Netlogon and Sysvol shares and Replication

Hello,
I'm beginning to feel I MUST be doing something wrong, Microsoft couldn't have made this THAT much trouble for adding additional DCs, but it seems every time I add an additional DC, I cannot get Netlogon and Sysvol to share out and replicate as expected.

Here's what I'm experiencing currently:

Server 2008 Standard is the Pre-existing DC (was added to domain to replicate with a Server 2003 DC, now that Server 2003 DC has failed)
Server 2008 R2 x64 is the new DC, dcpromo run with no issues, no DNS complaints, etc.

No SYSVOL replication now
No Netlogon Share
I have run the MS KB and changed the burflags key to D4, have set SysVolReady to 1, now have Sysvol shared out, no replication and now still no netlogon share.

dcdiag reports:
  Starting test: NCSecDesc
     Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
        Replicating Directory Changes In Filtered Set
     access rights for the naming context:
     DC=DomainDnsZones,DC=domain,DC=local
     Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
        Replicating Directory Changes In Filtered Set
     access rights for the naming context:
     DC=ForestDnsZones,DC=domain,DC=local
     ......................... SERVER failed test NCSecDesc

Thanks for any help you can provide. I feel like I need to make some sort of change to the way we do our additional DCs because this is a royal pain to have to go through this every time.
Thanks in advance!
stsanfordAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

SuperTacoCommented:
Are all of the machine GUID's showing up in DNS?  do you have any other DC's or DNS sevrers trapped in DNS?   if so , remove them
0
stsanfordAuthor Commented:
I searched through, I don't see any of the old DCs listed.
0
yo_beeDirector of Information TechnologyCommented:
What is your domain and forest functioning level?

How to check the level:
http://www.techgalaxy.net/Docs/Win2003/Verifying_functional_levels_by_using_ADSIEdit.htm
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

yo_beeDirector of Information TechnologyCommented:
Also open active directory domians and trust  > domain > right click > properties.
This will show both domain and forest levels.

0
stsanfordAuthor Commented:
It is Windows2003 functional level...Thanks,
0
yo_beeDirector of Information TechnologyCommented:
Did you do the forest adprep before adding the 2008 machines ?
0
stsanfordAuthor Commented:
I have gone back through things, and the only oddities I am seeing are the following:
DNS Eventlog error 4013
When I try to run ntfrsutl server I receive:
ERROR - Cannot RPC to computer, (null); 00001f47 (8007)

Thanks for any additional help.
0
Syed_M_UsmanSystem AdministratorCommented:
Dear,

with regards to below error,
"dcdiag reports:
  Starting test: NCSecDesc
     Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
        Replicating Directory Changes In Filtered Set
     access rights for the naming context:
     DC=DomainDnsZones,DC=domain,DC=local
     Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
        Replicating Directory Changes In Filtered Set
     access rights for the naming context:
     DC=ForestDnsZones,DC=domain,DC=local
     ......................... SERVER failed test NCSecDesc"

you shoudl look at http://support.microsoft.com/kb/967482

i think you have 1 or more 2003Dc and you also have 2008DC. can you please run below commands and upload screen shots

netdom query fsmo
dcdiag
repadmin /showrepl

upload screen shots plz.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.