If changes to some objects in Active Directory are not reflected on all domain controllers, which command would you use to check replication status?

To check the replication status of objects in Active Directory and diagnose potential issues with replication, utilizing the "repadmin -showrepl" command is the most effective choice. This command provides detailed information about the replication status between domain controllers. It shows the state of replication for each domain controller, including the last time replication occurred and any replication errors that may exist.

When you run this command, it helps pinpoint which domain controllers are not up to date with the changes, allowing for a clear understanding of where the replication issues lie. This is crucial for troubleshooting scenarios where changes to user accounts, group policies, or other directory objects require synchronization across multiple domain controllers to ensure consistency in the directory service environment.

The other options, while they can provide useful information about Active Directory, do not specifically focus on checking the replication status. For instance, "Get-ADReplicationPartner" provides information about replication partners but does not show the status of the replication itself. "Active Directory Sites and Services" is a graphical tool that can help manage replication topology but isn't a command-line tool to check the status. Lastly, "dcdiag" is used for diagnosing the health of domain controllers but does not primarily focus on replication issues—its output can include several tests beyond just replication