• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1604
  • Last Modified:

One of the DC sysvol folder is not updating/in synch with other DCs

HI there,
All my DC are running server 2008 x32 ent edition.  For some reason of my DC's sysvol folder is not updated. Example serv01,02,03 all have updated sysvold under \\domain.com\sysvol\domain.com\Policies or if I go directly \\serv01\sysvol all the files are updated and are in sync.
One of the server's sysvol is not in sync with other DC's due to this I am unable to apply and new GPO and the error becomes 'The processing of group policy failed.windows attempted to read the file \\domain.com\sysvol\domain.com\policiies\{C134DA72-2FB8....'
All the rest of the DC's have this file but not this one where the new GPO are not applied.
2 Solutions
Sarang TinguriaSr EngineerCommented:
first check that you have proper Connection objects has been created in Sites and Services

Browse \\WorkingDC.domain.local copy sysvol & netlogon and keep backup on ProblemDC &  WorkingDC (If can not browse check network connectivity/Port and don't proceed further)

Go to WorkingDC  stop NTFRS service open regedit and go to "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup" change the burflag value to D4 Start NTFRS(File Replication service) service and wait for File Replication event ID 13516 now Go to ProblemDC  stop NTFRS service open regedit go to "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at <samp>Startup" change the burflag value to D2 -> Start NTFRS(File Replication service) service and wait for File Replication event ID 13516 now

Check Now your sysvol and netlogon shares are available

Above is called Authoritive(D4) and non-Authoritive Restore (D2)

Refer http://support.microsoft.com/kb/257338 for more info
Stelian StanCommented:
Did you run:
repadmin /syncall

Also check the NTFS permission on SYSVOL folder: http://www.experts-exchange.com/Software/Server_Software/File_Servers/Active_Directory/Q_26894047.html

Another one to check would be the restore Default Domain Policies: http://blogs.technet.com/b/grouppolicy/archive/2008/10/16/restoring-default-domain-policies-to-their-defaults.aspx
amanzoorNetwork infrastructure AdminAuthor Commented:
Hi experts;
I had to demote and promote the DC, made sure that the FSMO roles were transfered to the other DC before doing this.  Till now synching well.

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now