?
Solved

Sysvol / Element not found when trying to access share.

Posted on 2011-09-22
6
Medium Priority
?
1,211 Views
Last Modified: 2012-05-12
Experts,

Recently, two of our MANY servers recently started reporting problems processing group policy.

When looking at them further, they both have the same symptoms:

Event log reports that a certain GPO.ini file isn't accessible, so group policy processing stops.

When attempting to access \\domain\sysvol it comes with the error pictured below.  I can access \\domain with no problems, but accessing the sysvol share gives the error.

DNS checks fine, and I can nslookup the domain with no issues.

Anybody with any ideas - it would be very appreciated if you could chime in. 22Sep11-SYSVOL-Share.png 2Sep11-SYSVOL-ElementNotFound.png
0
Comment
Question by:usslindstrom
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 39

Expert Comment

by:Krzysztof Pytko
ID: 36579107
Please try to follow this MS article to fix it up at
http://support.microsoft.com/kb/315457

Might be a problem with replication. Please try to run on a DC

dcdiag /c /e /v
and
repadmin /showrepl /all /intersite /verbose

and check if there is no problem.

Regards,
Krzysztof
0
 
LVL 5

Author Comment

by:usslindstrom
ID: 36584173
Thank you for the assistance.

I ran the tests as you suggested.  (Also ran dcdiag previously) - and thankfully nothing errors.

This error is happening on two member servers.  I've already dejoined them from the domain, and re-added them, but they come back with the same error.

Other member servers or clients that connect to the same DCs are fine, and can access the SYSVOL share at the root domain level with no problems.
0
 
LVL 5

Author Comment

by:usslindstrom
ID: 36584283
On note,

From the two servers having the issue, accessing their %logonserver%\sysvol works fine and I'm not given any errors.

Accessing \\domain\sysvol on those same two servers is where the error stems.
0
Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 
LVL 39

Accepted Solution

by:
Krzysztof Pytko earned 2000 total points
ID: 36585119
%logonserver% viarable points to DC where clients is authentcated. Wjen you tryt o open share \\domain\sysvol it's requesting access ton and of DCs, so it looks like there is a problem on some DC(s)?

Please make simple test.  Open command-line and do

ipconfig /flushdns
ping domain.local (your DNS-Domain-Name)

try to access share \\domain\sysvol

repeat this action as many times as many DCs in your environment is available. DNS round robin mechanism will switch you to another DC in a list :)

Krzysztof
0
 
LVL 5

Author Closing Comment

by:usslindstrom
ID: 36585743
You were exactly right.

I missed it.  We had one DC that was booted in "Safe Mode" for some strange reason.  It was the cause of our headaches here.

Thank you very much for the assistance!
0
 
LVL 39

Expert Comment

by:Krzysztof Pytko
ID: 36585762
You're welcome :)

Krzysztof
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Suggested Courses
Course of the Month13 days, 17 hours left to enroll

800 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question