Strange Replication Issue with AD/Group Policy

Posted on 2012-08-13
Last Modified: 2012-08-13
I have a domain that has about 6 domain controllers in it, all at different locations.

One location has a server running 2003 Standard, all others are 2008.

The one running 2003, when I open group policy, all the policies are wrong and old.  So it seems that group policy is not replication to this domain controller.

I have checked the file replication logs, here is what i'm finding:
Event ID 13508
The File Replication Service is having trouble enabling replication from DCNORTH to DCMONT for c:\windows\sysvol\domain using the DNS name DCNORTH.domain.local. FRS will keep retrying.
 Following are some of the reasons you would see this warning.
 [1] FRS can not correctly resolve the DNS name DCNORTH.domain.local from this computer.
 [2] FRS is not running on DCNORTH.domain.local.
 [3] The topology information in the Active Directory for this replica has not yet replicated to all the Domain Controllers.

Then Event ID 13509 will appear after about 6 days.

The File Replication Service has enabled replication from DCNORTH to DCMONT for c:\windows\sysvol\domain after repeated retries.

I would prefer it replicate with another server, not DCNORTH. But event 13509 indicates that replication is happening, correct?

Thank you!
Question by:cas_three
    LVL 17

    Assisted Solution

    by:Brad Bouchard
    On the 2k3 server:
    Restart the DNS Client, and DNS Server services
    Scavenge stale resource records in DNS
    Open Active Directory Sites and Services and expand all servers all the way to NTDS settings.  Right click on each and select Replicate Now
    Lastly, make sure FRS is running on all DCs

    Let me know the results of the above and we can go from there.

    Author Comment

    how long will replication take?
    LVL 10

    Expert Comment


    Event ID 13509 says that the replication has been resumed hence there hould not be any problem.

    You may confirm the same by running DCDIAG, REPADMIN command and using FRS events.

    You said the you do not want replicate with DCNORTH but with another server,  FYI, that is depend upon the AD replication topology and that is configured by KCC more efficient way and I would recommmend to change the default configuration.

    Did you manually configured AD replication topology in site and services?
    LVL 39

    Accepted Solution

    Looks like FRS replication issue. Maybe you AD database is replicating properly and there is no issue with it. Please check that running on a DC in command-line

    dcdiag /e /c /v /f:c:\dcdiag.log

    Open in new window

    and attach it here for analyze, please.

    In the meantime, perform non-authoritative restore on that 2003 Domain Controller using D2 burflag regarding to MS article at

    should solve the issue


    Author Comment

    Looks like it's not a replication issue after all.  I implemented GPP's on a 2008 server, this server is 2003, can't see the GPP's there. I'm such an idiot!!!!

    Sorry for being dumb:)

    Thank you!
    LVL 39

    Expert Comment

    by:Krzysztof Pytko
    If you wish to use GPP on 2003, install Client Side Extension (CSE) first and it would work


    Author Comment

    I know, just emailed my client about it.  I completely overlooked that I was using gpp's.l

    Featured Post

    PRTG Network Monitor: Intuitive Network Monitoring

    Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

    Join & Write a Comment

    [b]Ok so now I will show you how to add a user name to the description at login. [/b] First connect to your DC (Domain Controller / Active Directory Server) SET PERMISSIONS FOR SCRIPT TO UPDATE COMPUTER DESCRIPTION TO USERNAME 1. Open Active …
    The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
    This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

    734 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now