Link to home
Start Free TrialLog in
Avatar of GarryBaker
GarryBaker

asked on

GPO Errors

Morning,

A little bit of history first.

I've recently taken over a system and found that I had replcation problem, after inital inverstigation found that replication was turned off, nobody was able to tell me why this was the case and I went forward and turned replication back on. At this point I lost the sysvol on both my DC and needed to restore from backup.

I am now getting Events 1030 & 1058 on my main DC and my secound DC is not creating a sysvol.

Within GPO manage 3 of my policys intermittently gray themselves out and I am unable to edit (1 being the Default Domain Policy).

I have checked the permissions on my sysvol and all looks ok.  I am apprehensive about running dcgpofix as this is a live system and it has been down alot over the last 2 weeks.

Any idea would be great

Thanks
Garry
Avatar of Brian Pierce
Brian Pierce
Flag of United Kingdom of Great Britain and Northern Ireland image

If repllication had been disabled for more than 60 days then the tombstone perid would have been exceeded. The only option in such cases is to remove and re-install the DC.
You may need to use the DCPROMO /forceremoval option and treat the DC as a failed DC and clean up the metadata as detailed in http://www.petri.co.il/delete_failed_dcs_from_ad.htm
Avatar of GarryBaker
GarryBaker

ASKER

Thanks KCTS

I've checked the events on both my DC's they are both reporting that the tombstone lifetime count is 180 day.  On the assumption that my DC1 is the Operations Masters for RID, PDC, Infrastructure, Global Catalogue and that it is the only one with a Sysvol that I will need to rebuild DC2.

Would you also belive this to be the best course of action.

Thanks
Garry
ASKER CERTIFIED SOLUTION
Avatar of ChiefIT
ChiefIT
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thanks ChiefIT

I have read this solutions and will be trying this out at our next planned outage. Will keep you posted.

Thanks
Garry
How goes the battle, Garry?
Hi Chiefit

I'm currently building a VM server and loading the servers into a test environment so I  test without effecting the live system.  Should have this running my early next week then will be tring the solution out.

Will keep you posted on how it goes.

Thanks
Garry