AD gone Crazy

I need help. All of my dc’s in my AD cannot access the RPCLocator service. When I try to promote or demote I get the error message access is denied for RPCLocator service.

I can join client to the domain, however cannot join servers.

My dc’s are not picking up the default domain controller policy for the DCOU, but it’s picking up the default domain policy.

Data is replicating between all server however. The AD replication monitor is showing successful replications.