Greeting dear Experts,
As I logged on our domain controller (server 2003 STD) this morning, I noticed an NTFRS Journal Wrap Error (13568). After searching here and on MS websites, I followed the solution to add 'Enable Journal Wrap Automatic Restore' DWORD to the registry, giving it a value of 1 and stop/start the NTFRS service.
Since then, my logs are filled with errors 1054, stating that 'Windows cannot obtain the domain controller name...' and I cant log on any machines using domain credentials. Its been 5 hours now since I tried the first solution but my NTFRS still did not came back. I am using RDP to the server and am afraid of doing a restart since its the only available connection atm and the office are closed for the weekend. I also had couple of errors 1030/1058 regarding GPOs before error 1054 appeared. This D.C is the only one available atm since we recently lost an SBS and I had to seize all FSMO roles to this server (let just say i had better months :s).
When checking at the Debug Logs of NTFRS, I have errors stating :
WARN - No sysvol outbound connections found for member cn=ntds settings,cn=SERVERNAME,cn=
servers,cn
=default-f
irst-site-
name,cn=si
tes,cn=con
figuration
,dc=DOMAIN
NAME,dc=lo
cal!
<FrsDsGetSysvolInboundCxti
ons: 6196: 2706: S1: 15:47:38> :DS: WARN - No sysvol inbound connections found for object cn=ntds settings,cn=SERVERNAME,cn=
servers,cn
=default-f
irst-site-
name,cn=si
tes,cn=con
figuration
,dc=DOMAIN
NAME,dc=lo
cal!
<RcsCreateSeedingCxtion: 5368: 7087: S0: 15:47:38> :X: ERROR - no parent computer for DOMAIN SYSTEM VOLUME (SYSVOL SHARE) : WStatus: ERROR_FILE_NOT_FOUND
Looking at my SYSVOL folder, I have 2 folders inside : one called 'NtFrs_PreExisting___See_E
ventLog' and 'DO_NOT_REMOVE_NtFrs_PreIn
stall_Dire
ctory', the last one beeing empty.
Anyone would know the best course of action to solve this problem, any input would be greatly appreciated as I'm not sure what to do next. Should I attempt a 'non authoritative FRS restore' or.... help !
Best Regards,
Eric