One of the DC sysvol folder is not updating/in synch with other DCs

HI there,
All my DC are running server 2008 x32 ent edition.  For some reason of my DC's sysvol folder is not updated. Example serv01,02,03 all have updated sysvold under \\domain.com\sysvol\domain.com\Policies or if I go directly \\serv01\sysvol all the files are updated and are in sync.
One of the server's sysvol is not in sync with other DC's due to this I am unable to apply and new GPO and the error becomes 'The processing of group policy failed.windows attempted to read the file \\domain.com\sysvol\domain.com\policiies\{C134DA72-2FB8....'
All the rest of the DC's have this file but not this one where the new GPO are not applied.
Help
LVL 5
amanzoorNetwork infrastructure AdminAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

 
Life1430Sr EngineerCommented:
first check that you have proper Connection objects has been created in Sites and Services

Browse \\WorkingDC.domain.local copy sysvol & netlogon and keep backup on ProblemDC &  WorkingDC (If can not browse check network connectivity/Port and don't proceed further)

Go to WorkingDC  stop NTFRS service open regedit and go to "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup" change the burflag value to D4 Start NTFRS(File Replication service) service and wait for File Replication event ID 13516 now Go to ProblemDC  stop NTFRS service open regedit go to "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at <samp>Startup" change the burflag value to D2 -> Start NTFRS(File Replication service) service and wait for File Replication event ID 13516 now

Check Now your sysvol and netlogon shares are available

Above is called Authoritive(D4) and non-Authoritive Restore (D2)

Refer http://support.microsoft.com/kb/257338 for more info
0

Experts Exchange Solution brought to you by ConnectWise

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
 
Stelian StanNetwork AdministratorCommented:
Did you run:
repadmin /syncall

Also check the NTFS permission on SYSVOL folder: http://www.experts-exchange.com/Software/Server_Software/File_Servers/Active_Directory/Q_26894047.html

Another one to check would be the restore Default Domain Policies: http://blogs.technet.com/b/grouppolicy/archive/2008/10/16/restoring-default-domain-policies-to-their-defaults.aspx
0
 
amanzoorNetwork infrastructure AdminAuthor Commented:
Hi experts;
I had to demote and promote the DC, made sure that the FSMO roles were transfered to the other DC before doing this.  Till now synching well.
Thanks
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.