Fix them by forcing a new replication from a working DC using the BurFlags fix:

http://www.michaelriccioni.com/force-sysvol-netlogon-replication-on-a-problematic-domain-controller/