Off topic, but to create an immediately effective KDS root key, just set the effective time ten hours in the past. You can validate propagation by looking for the 4004 event in the KDS event log. This is probably not a good idea in production, but is useful when building/rebuilding a lab.
Add-KdsRootKey –EffectiveTime ((get-date).addhours(-10))
See https://technet.microsoft.com/en-us/library/jj128430.aspx
Re:How to Deploy Software
by henrikschroder on Tuesday March 01, 2016 @11:23PM
(#11208075)
Luxury!
And thank goodness Microsoft hard-coded in a 10 hour delay to ensure the KDS root key of a domain is propagated, even if I create it before I create additional domain controllers...
Such fun!