Greeting dear Experts,
As I logged on our domain controller (server 2003 STD) this morning, I noticed an NTFRS Journal Wrap Error (13568). After searching here and on MS websites, I followed the solution to add 'Enable Journal Wrap Automatic Restore' DWORD to the registry, giving it a value of 1 and stop/start the NTFRS service.
Since then, my logs are filled with errors 1054, stating that 'Windows cannot obtain the domain controller name...' and I cant log on any machines using domain credentials. Its been 5 hours now since I tried the first solution but my NTFRS still did not came back. I am using RDP to the server and am afraid of doing a restart since its the only available connection atm and the office are closed for the weekend. I also had couple of errors 1030/1058 regarding GPOs before error 1054 appeared. This D.C is the only one available atm since we recently lost an SBS and I had to seize all FSMO roles to this server (let just say i had better months :s).
When checking at the Debug Logs of NTFRS, I have errors stating :
WARN - No sysvol outbound connections found for member cn=ntds settings,cn=SERVERNAME,cn=servers,cn=default-first-site-name,cn=sites,cn=configuration,dc=DOMAINNAME,dc=local!
<FrsDsGetSysvolInboundCxtions: 6196: 2706: S1: 15:47:38> :DS: WARN - No sysvol inbound connections found for object cn=ntds settings,cn=SERVERNAME,cn=servers,cn=default-first-site-name,cn=sites,cn=configuration,dc=DOMAINNAME,dc=local!
<RcsCreateSeedingCxtion: 5368: 7087: S0: 15:47:38> :X: ERROR - no parent computer for DOMAIN SYSTEM VOLUME (SYSVOL SHARE) : WStatus: ERROR_FILE_NOT_FOUND
Looking at my SYSVOL folder, I have 2 folders inside : one called 'NtFrs_PreExisting___See_EventLog' and 'DO_NOT_REMOVE_NtFrs_PreInstall_Directory', the last one beeing empty.
Anyone would know the best course of action to solve this problem, any input would be greatly appreciated as I'm not sure what to do next. Should I attempt a 'non authoritative FRS restore' or.... help !
Best Regards,
Eric
by: wantabe2Posted on 2009-09-19 at 15:49:39ID: 25375072
1. Stop FRS.
2. Start Registry Editor (Regedt32.exe).
3. Locate and click the following key in the registry:
HKEY_LOCAL_MACHINE\SYSTEM\
4. On the Edit menu, click Add Value , and then add the following registry value:
Value name: BurFlags
Data type: REG_DWORD
Radix: Hexadecimal
Value data: D2
5. Quit Registry Editor.
6. Restart FRS.
Use the tool FRSDIAG to verify that all DC's will replicate the SYSVOL contents and created a test file to verify propagation to all DC's. You can also verified the consistency of the SYSVOL contents across all of the DC's using the GPOTOOL resource kit utility.