Solved

SYSVOL/NETLOGON Replication problems in domain

Posted on 2013-01-23
6
1,452 Views
Last Modified: 2013-01-24
This problem is so complex, I'll just stick to the basic...

I manage a child domain, in which it's divided in 4 sites in AD.  Each site has 2 DCs under this child domain.    I noticed when applying a change in GP, not all the sites were being affected by the change.  I found out that the actual GPO folder in SYSVOL wasn't being updated in the problematic sites.   I forced replications (via Sites and Services) to no avail.  I manually copied the updated GPO folders in each Sysvol folders in each DC.  (which "fixed" that particular GP issue)

I then tested Netlogon.  In each site, i created a text file in one DC  in each site naming it "a_[site_name].txt" (i therefore created 4 different text files in  the Netlogon folder)  I found that the text files weren't all replicated everywhere (with the exception of one site, which had all 4 text files).  

What I found to be interesting is that the Global Catalog DC did not contain any of the 4 text files (in the site where the GC is at, I created the text file in a 'secondary' DC).  

I did dabble a bit in creating manual connections in Sites and Services, but didn't want to go to far.  I'd hate to have that 'resolve' this since I'm sure there's a more underlying problem than "site A doesn't replicate to site B".

Environment:  Windows Server 2008 R2

I know I'm missing something but this is a start.  So, help is appreciated, as always.  
Thank you.
0
Comment
Question by:Ormat
6 Comments
 
LVL 18

Expert Comment

by:Sarang Tinguria
ID: 38812652
Are you using FRS or DFS for sysvol replication..
0
 
LVL 1

Expert Comment

by:t-work
ID: 38812673
Did you look into the DFS log file?
Are there any errors?
0
 

Author Comment

by:Ormat
ID: 38812693
your comments pose an interesting question - how can i tell if i'm using either frs of dfs for replications?
0
Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 
LVL 4

Expert Comment

by:jjjosef
ID: 38813256
You can follow the quite similar discussion in EE also

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/Q_27152919.html

Also you can follow the technet support also
http://support.microsoft.com/kb/290762
0
 

Author Comment

by:Ormat
ID: 38814779
wow. ran a burflag (d2) since i saw journal wrap errors on a dc, and now the netlogon is missing.. rather, all the shares. now what?!? :)   am i supposed to remove "d2" after having restarted the fsr service?
0
 
LVL 18

Accepted Solution

by:
Sarang Tinguria earned 500 total points
ID: 38814992
first check that you have proper Connection objects has been created in Sites and Services
Run repadmin /replsum to check that your replication is good

Browse \\WorkingDC.domain.local copy sysvol & netlogon and keep backup on ProblemDC &  WorkingDC (If can not browse check network connectivity/Port and don't proceed further)

Go to WorkingDC  stop NTFRS service open regedit and go to "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup" change the burflag value to D4 Start NTFRS(File Replication service) service and wait for File Replication event ID 13516 now Go to ProblemDC  stop NTFRS service open regedit go to "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup" change the burflag value to D2 -> Start NTFRS(File Replication service) service and wait for File Replication event ID 13516 now

Check Now your sysvol and netlogon shares are available

Above is called Authoritive(D4) and non-Authoritive Restore (D2)

Refer http://support.microsoft.com/kb/257338 for more info
0

Featured Post

Control application downtime with dependency maps

Visualize the interdependencies between application components better with Applications Manager's automated application discovery and dependency mapping feature. Resolve performance issues faster by quickly isolating problematic components.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

914 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now