We help IT Professionals succeed at work.

Strange Replication Issue with AD/Group Policy

I have a domain that has about 6 domain controllers in it, all at different locations.

One location has a server running 2003 Standard, all others are 2008.

The one running 2003, when I open group policy, all the policies are wrong and old.  So it seems that group policy is not replication to this domain controller.

I have checked the file replication logs, here is what i'm finding:
Event ID 13508
The File Replication Service is having trouble enabling replication from DCNORTH to DCMONT for c:\windows\sysvol\domain using the DNS name DCNORTH.domain.local. FRS will keep retrying.
 Following are some of the reasons you would see this warning.
 [1] FRS can not correctly resolve the DNS name DCNORTH.domain.local from this computer.
 [2] FRS is not running on DCNORTH.domain.local.
 [3] The topology information in the Active Directory for this replica has not yet replicated to all the Domain Controllers.

Then Event ID 13509 will appear after about 6 days.

The File Replication Service has enabled replication from DCNORTH to DCMONT for c:\windows\sysvol\domain after repeated retries.

I would prefer it replicate with another server, not DCNORTH. But event 13509 indicates that replication is happening, correct?

Thank you!
Watch Question

Brad BouchardInformation Systems Security Officer
On the 2k3 server:
Restart the DNS Client, and DNS Server services
Scavenge stale resource records in DNS
Open Active Directory Sites and Services and expand all servers all the way to NTDS settings.  Right click on each and select Replicate Now
Lastly, make sure FRS is running on all DCs

Let me know the results of the above and we can go from there.


how long will replication take?

Event ID 13509 says that the replication has been resumed hence there hould not be any problem.

You may confirm the same by running DCDIAG, REPADMIN command and using FRS events.

You said the you do not want replicate with DCNORTH but with another server,  FYI, that is depend upon the AD replication topology and that is configured by KCC more efficient way and I would recommmend to change the default configuration.

Did you manually configured AD replication topology in site and services?
Senior Active Directory Engineer
Top Expert 2012
Looks like FRS replication issue. Maybe you AD database is replicating properly and there is no issue with it. Please check that running on a DC in command-line

dcdiag /e /c /v /f:c:\dcdiag.log

Open in new window

and attach it here for analyze, please.

In the meantime, perform non-authoritative restore on that 2003 Domain Controller using D2 burflag regarding to MS article at

should solve the issue



Looks like it's not a replication issue after all.  I implemented GPP's on a 2008 server, this server is 2003, can't see the GPP's there. I'm such an idiot!!!!

Sorry for being dumb:)

Thank you!
Krzysztof PytkoSenior Active Directory Engineer
Top Expert 2012

If you wish to use GPP on 2003, install Client Side Extension (CSE) first and it would work



I know, just emailed my client about it.  I completely overlooked that I was using gpp's.l

Explore More ContentExplore courses, solutions, and other research materials related to this topic.