We saw a domain controller was not replicating to another one.

dcdiag came up with a 

• • result 1722 (0x6ba): The RPC server is unavailable.

Someone had added an extra IP address to the domain controller on a seperate subnet not being used which caused this. Removing the secondary IP fixed this