Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Microsoft, Microsoft Windows Server, Windows 2003 R2, Active Directory and behind ISA server 2006 firewall, There are warning or error events within the last 24 hours after the SYSVOL has been shared

Posted on 2008-11-03
3
Medium Priority
?
428 Views
Last Modified: 2013-11-25
I have two Server, Server 1 is my Active Directory and Server 2 is my additional  domain controller with ISA Serverr 2006 installed, here the Error

(There are warning or error events within the last 24 hours after the SYSVOL has been shared. Failing SYSVOL replication may cause Group policy problem.)

The File Replication Service is having trouble enabling replication from ISA_SERVER to SNCLI_SERVER for c:\windows\sysvol\domain using the DNS name isa_server.sncli.com. FRS will keep retrying.
 Following are some of the reasons you would see this warning.
 
 [1] FRS can not correctly resolve the DNS name isa_server.sncli.com from this computer.
 [2] FRS is not running on isa_server.sncli.com.
 [3] The topology information in the Active Directory for this replica has not yet replicated to all the Domain Controllers.
 
 This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established.

0
Comment
Question by:raulmonda
  • 2
3 Comments
 
LVL 19

Accepted Solution

by:
Stephen Manderson earned 1500 total points
ID: 22870499
You shouldnt be running ISA on a DC it should be installed on its own machine. One of the main reasons for this is security.. :) And thats whats causing the issues for you just now ISA has locked down the server and as such replication cannot occur. The admin share on ISA is inaccessable ie \\Servername\Admin$ . I would personally recommend having ISA on its own.
Regards
Steve
0
 

Author Closing Comment

by:raulmonda
ID: 31512722
But according to some expert the ISA server should be member of the domain controller. If I do this solution to separate my ISA server I need to removed from my AD the ISA server.
0
 
LVL 19

Expert Comment

by:Stephen Manderson
ID: 22873972
ISA can be run as a domain member yes by all means, but as a domain controller no it shouldnt (Except in the case of SBS in which it was designed to do).
Regards
Steve
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Microsoft's ISA Server has been its pre-eminent security product for about a decade and is still regarded amongst the well-informed as one of the best software firewalls and application gateways ever released, by any manufacturer. ISA Server has bee…
Preface There are many applications where some computing systems need have their system clocks running synchronized within a small margin and eventually need to be in sync with the global time. There are different solutions for this, i.e. the W3…
This Micro Tutorial will teach you how to add a cinematic look to any film or video out there. There are very few simple steps that you will follow to do so. This will be demonstrated using Adobe Premiere Pro CS6.
This video shows how to quickly and easily deploy an email signature for all users in Office 365 and prevent it from being added to replies and forwards. (the resulting signature is applied on the server level in Exchange Online) The email signat…
Suggested Courses
Course of the Month14 days, 13 hours left to enroll

577 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question