• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 5106
  • Last Modified:

FRS not replicating properly Event ID 13508 without 13509

I have 3 sites: site a, site b site c
I have 3 W2K8 R2 DC's: DC-A in site A, DC-B in Site B, DC-C in Site C.
Windows 2008 Domain Functional Level.  All Windows 2003 DC have been demoted.

I recently deployed new Windows 2008 R2 DC's in all three sites.  I started with Site A and everything worked perfectly.  Next, I setup DC-B in site B and everything is working properly.  Active Directory and FRS is replicating properly.  Next, I setup DC-C in Site C.  Active Directory is replicating correctly but FRS is failing.  I am also missing my Netlogon share when typing net share.  I followed this Microsoft KB: http://support.microsoft.com/kb/947022/en-us but had no success.

I get the Event ID 13508 in the File Replication Service log on DC C.  It says

The File Replication Service is having trouble enabling replication from DC-B to DC-C for c:\windows\sysvol\domain using the DNS name DC-B. FRS will keep retrying.
 Following are some of the reasons you would see this warning.
 
 [1] FRS can not correctly resolve the DNS name DC-B  from this computer.
 [2] FRS is not running on DC-B.tci.corp.
 [3] The topology information in the Active Directory Domain Services for this replica has not yet replicated to all the Domain Controllers.
 
 This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established

1. I can ping FQDN and resolve DC-B from DC-C and vise versa.
2. FRS is running on all 3 DC's.
3.  RPC is working.
4.  Corporate Firewalls between all three sites allow Any-Any.

HELP!!!!!
0
srfoster77
Asked:
srfoster77
1 Solution
 
5g6tdcv4Commented:
What does DCdiag /s:DC-C
report?
0
 
Vinchenzo-the-SecondCommented:
Can u run a dcdiag /v.  Stop the FRS service.  Stop the netlogon service.  Start netlogon the FRS.  Let me know if its shared?
0
 
srfoster77Author Commented:
Everything passes except for the following.

 Starting test: NetLogons

         Unable to connect to the NETLOGON share! (\\DC-C\netlogon)

         [DC-C] An net use or LsaPolicy operation failed with error 67,

         The network name cannot be found..

         ......................... DC-C failed test NetLogons

and


Starting test: SystemLog

         An error event occurred.  EventID: 0x00000422

            Time Generated: 05/12/2011   09:06:11

            Event String:

            The processing of Group Policy failed. Windows attempted to read the file \\domain\sysvol\domain\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:


I get the second error because the c:\windows\sysvol\policies folder is empty.
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
Vinchenzo-the-SecondCommented:
Stop and start the services netlogon and frs
0
 
srfoster77Author Commented:
FRS stopped, then Netlogon
Netlogon started, then FRS

Still no Netlogon share with command: net share.
0
 
Justin OwensITIL Problem ManagerCommented:
Kindly run this for us:

DCDIAG /test:DNS

You need to get DNS running and working correctly before you will be able to address your other issues.

DrUltima
0
 
srfoster77Author Commented:
dcdiag /test:DNS comes back with everything passed.
0
 
Vinchenzo-the-SecondCommented:
I think it be quicker if you just demote the DC and promote it.
0
 
srfoster77Author Commented:
The problem ended up being a firewall rule that was hidden.  Everythign is working now.
0
 
srfoster77Author Commented:
There was a firewall rule preventing FRS to work properly.
0
 
SynergonCommented:
What firewall rule?  That's a little vague.
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now