it_gsr
asked on
Major DFS/FRS Problems Event 13508
hi all
i set up DFS to replicate data between two file servers running Windows Server 2003, Ent Edition. It worked well (more than 3months) until i decide to replicate home folders and redirected folders (for users' My Documents) as well as other directories\folders
i have had major problems since. Some of the files/folders are now locked up in the staging file. Others are in Ntfrs_Preexisting folders (which i can retrieve). Some users complain that though they can see their files, they are not able to access them. Other folders are not replicated at all.
In the event log of the file servers, i have many of these Event logs
Event: 13508 Source: Ntfrs Category: None Type: Warning Computer: Server1
The File Replication Service is having trouble enabling replication from server2 to server1 for dfsdrive\folder using the DNS name DC2. FRS will keep retrying.
Following are some of the reasons you would see this warning.
[1] FRS can not correctly resolve the DNS name DC2 from this computer.
[2] FRS is not running on DC2.
[3] The topology information in the Active Directory for this replica has not yet replicated to all the Domain Controllers.
This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
I can confirm that replication is ok between my 2 domain controllers by running appropriate tools in the Windows Support tools.I'm quite disillusioned with this whole DFS/FRS business. Among others, I have already done the following
1. Installed and run FRSDiag
2. Stopped Symantec Antivirus from scanning the stagein folder, the NTDS folder, SYSVOL, etc and other troubleshooting tricks related to the event 13508 (above). I never get Event 13509 to tell me if any of the problems go away.
Can someone help me out
1. Can i ever recover the files locked up in the staging folder?
2. Is there a way to fix this problem. I need to replicate about 300GB of data altogether (in separate directories/folders) in future and would appreciate an alternative to DFS/FRS or be able to make DFS/FRS work for me effectively.
Please help!!!
i set up DFS to replicate data between two file servers running Windows Server 2003, Ent Edition. It worked well (more than 3months) until i decide to replicate home folders and redirected folders (for users' My Documents) as well as other directories\folders
i have had major problems since. Some of the files/folders are now locked up in the staging file. Others are in Ntfrs_Preexisting folders (which i can retrieve). Some users complain that though they can see their files, they are not able to access them. Other folders are not replicated at all.
In the event log of the file servers, i have many of these Event logs
Event: 13508 Source: Ntfrs Category: None Type: Warning Computer: Server1
The File Replication Service is having trouble enabling replication from server2 to server1 for dfsdrive\folder using the DNS name DC2. FRS will keep retrying.
Following are some of the reasons you would see this warning.
[1] FRS can not correctly resolve the DNS name DC2 from this computer.
[2] FRS is not running on DC2.
[3] The topology information in the Active Directory for this replica has not yet replicated to all the Domain Controllers.
This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
I can confirm that replication is ok between my 2 domain controllers by running appropriate tools in the Windows Support tools.I'm quite disillusioned with this whole DFS/FRS business. Among others, I have already done the following
1. Installed and run FRSDiag
2. Stopped Symantec Antivirus from scanning the stagein folder, the NTDS folder, SYSVOL, etc and other troubleshooting tricks related to the event 13508 (above). I never get Event 13509 to tell me if any of the problems go away.
Can someone help me out
1. Can i ever recover the files locked up in the staging folder?
2. Is there a way to fix this problem. I need to replicate about 300GB of data altogether (in separate directories/folders) in future and would appreciate an alternative to DFS/FRS or be able to make DFS/FRS work for me effectively.
Please help!!!
You might be able to call Microsoft PSS and ask for this patch - which may fix your problem.
http://support.microsoft.com/default.aspx?scid=kb;en-us;823230
http://support.microsoft.com/default.aspx?scid=kb;en-us;823230
Service Pack 1 for Server 2003 has been released. You might want to give thought to installing this as it will fix a number of issues with FRS/DFS.
As always, excercise caution when installing a new Service Pack - but, the benefits are worth the update.
Let me know.
As always, excercise caution when installing a new Service Pack - but, the benefits are worth the update.
Let me know.
ASKER
hi Netman66
Have you actuallly tried using Server 2003 SP1? I have downloaded SP1 but as u know with all Microsoft SP's and hotfixes, you would never know and so i'm a bit sceptical. SP1 was released like when?....two days ago
Have you actuallly tried using Server 2003 SP1? I have downloaded SP1 but as u know with all Microsoft SP's and hotfixes, you would never know and so i'm a bit sceptical. SP1 was released like when?....two days ago
Yes, I was a Beta tester. I didn't notice any uglies in my testing environment. It has been tested in various builds for almost 6 months, and they have taken an immense amount of feedback for this release - so feel comfortable that most of the possible scenarios have been covered.
Just make certain to save an uninstall - just in case you need to roll back.
Just make certain to save an uninstall - just in case you need to roll back.
ASKER
hi Netman66,
Sorry i haven't been in touch for a while now...i have tried SP1 on my ADC and it works fine. But for some reason, i can't install it in the DC. I get the error message
' You do no have permission to update Windows Server 2003. Contact your system administrator'
I checked and found out that the message relates to access to update. exe file. I have the highest user authority here, Enterprise Admin but i still get this message anyway.
What do you think?
Sorry i haven't been in touch for a while now...i have tried SP1 on my ADC and it works fine. But for some reason, i can't install it in the DC. I get the error message
' You do no have permission to update Windows Server 2003. Contact your system administrator'
I checked and found out that the message relates to access to update. exe file. I have the highest user authority here, Enterprise Admin but i still get this message anyway.
What do you think?
Make sure that the server object in the Domain Controllers OU has the checkbox enabled for Trust the Computer for Delegation.
Also, read this article to determine if something has changed from the default User permissions.
http://support.microsoft.com/default.aspx?scid=kb;en-us;823659
Let me know.
Also, read this article to determine if something has changed from the default User permissions.
http://support.microsoft.com/default.aspx?scid=kb;en-us;823659
Let me know.
ASKER
Netmann66
the checkbox on the server box in the domain controller OU is checked for Trust the Computer for Delefation. I'm quite sure i haven't changed anything on the user rights assignment as is stated in the article i went through (i'd go thru thoroughly again as it makes an interesting read). Any more ideas?
the checkbox on the server box in the domain controller OU is checked for Trust the Computer for Delefation. I'm quite sure i haven't changed anything on the user rights assignment as is stated in the article i went through (i'd go thru thoroughly again as it makes an interesting read). Any more ideas?
Just to make sure I understand you,
You applied SP1 to all servers except the DC? Are you running the SP from the server itself? - off CD? from a share??
Please also check the Event logs to provide the messages from them so we can start looking at this from the correct point.
NM
You applied SP1 to all servers except the DC? Are you running the SP from the server itself? - off CD? from a share??
Please also check the Event logs to provide the messages from them so we can start looking at this from the correct point.
NM
This might assist you in determining what is happening:
http://support.microsoft.com/default.aspx?scid=kb;en-us;888791
http://support.microsoft.com/default.aspx?scid=kb;en-us;888791
My hunch is this one:
Manage auditing and security log
Administrators should be in there...
I've had this one happen to me on occasion.
Manage auditing and security log
Administrators should be in there...
I've had this one happen to me on occasion.
ASKER
hi Netman66
i have successfully installed Windows server 2003 SP1 on our DC and ADC (thanks to you) and i'm happy to say they are stable. However, I'm still not mkaing any head way on the DFS/FRS issue. I get the same error (Event 13508 and no 13509). SP1 has been running on the servers ( the DC, ADC and the file servers for at least 24 hours now). Which way do i turn now?
cheers
i have successfully installed Windows server 2003 SP1 on our DC and ADC (thanks to you) and i'm happy to say they are stable. However, I'm still not mkaing any head way on the DFS/FRS issue. I get the same error (Event 13508 and no 13509). SP1 has been running on the servers ( the DC, ADC and the file servers for at least 24 hours now). Which way do i turn now?
cheers
Please download and run one of these tools to determine what might be going on.
Sonar - http://www.microsoft.com/downloads/details.aspx?FamilyID=158cb0fb-fe09-477c-8148-25ae02cf15d8&DisplayLang=en
and / or
Ultrasound - http://www.microsoft.com/downloads/details.aspx?FamilyID=61acb9b9-c354-4f98-a823-24cc0da73b50&DisplayLang=en
One of these tools is likely to help us pinpoint what is going wrong with DFS.
Advise.
Sonar - http://www.microsoft.com/downloads/details.aspx?FamilyID=158cb0fb-fe09-477c-8148-25ae02cf15d8&DisplayLang=en
and / or
Ultrasound - http://www.microsoft.com/downloads/details.aspx?FamilyID=61acb9b9-c354-4f98-a823-24cc0da73b50&DisplayLang=en
One of these tools is likely to help us pinpoint what is going wrong with DFS.
Advise.
ASKER
hi Netmann66
what is the last resort step to take in DFS trouble resolution? i think i'm ready to go for broke because nothing works. I've tried almost anything i can get in this forum but so far nothing so i'm ready to go all out.
what is the last resort step to take in DFS trouble resolution? i think i'm ready to go for broke because nothing works. I've tried almost anything i can get in this forum but so far nothing so i'm ready to go all out.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I want to award the points to Netmann66, he pointed me in the right direction!!!! thanks MATE!!! DFS is working like a dream!
Error 13508 means the DC cannot become a Domain controller. Check if the syslog folder and netlogon folder have been shared by the DC. If they haven't it sounds like some of the ports are closed that enable the DC to replicate ( probably due to a firewall).
Try this link it will tell you what ports need to be open and ways around a firewall.
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/deploy/confeat/adrepfir.mspx
If there is a ristriction on your network for UDP byte size it will stop Kerberos Authentication from working
Try this link
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Operations/4f504103-1a16-41e1-853a-c68b77bf3f7e.mspx
There is also a link to a utility on this page called Portquery that will allow you to test for the open ports you need.
Try this link it will tell you what ports need to be open and ways around a firewall.
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/deploy/confeat/adrepfir.mspx
If there is a ristriction on your network for UDP byte size it will stop Kerberos Authentication from working
Try this link
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Operations/4f504103-1a16-41e1-853a-c68b77bf3f7e.mspx
There is also a link to a utility on this page called Portquery that will allow you to test for the open ports you need.
Glad you're back in business. Would you care to fill us in on the ultimate resolution so that this question will be useful to others?
Thanks,
NM
Thanks,
NM
1) Make sure you have sufficient disk space on each server.
2) Stop the NTFRS service on all servers then begin at the root DC and restart it again.
3) Post any new errors you get after restarting those services.
Most of the time these things happen because of "Journal wrap" - you might want to see if this article helps:
http://support.microsoft.com/default.aspx?scid=kb;en-us;292438
We can also set your root as an authoritative source by resetting the replication burflag - but we should save this as a last resort since it will discard any data your peers have already and start replicating fresh. Since you have 300GB of data, we want to avoid this huge data transfer if at all possible.
Advise.