Check AD replication health
Use repadmin and dcdiag to check Active Directory replication between domain controllers.
repadmin Access is denied
Troubleshoot repadmin and Active Directory Sites and Services errors that return Access is denied (error 5).