Solved

sysvol and netlogon shares and data missing on PDC Windows 2012

Posted on 2014-01-28
5
3,301 Views
Last Modified: 2014-10-24
I am trying to retire my first Domain controller machine and created a new DC to hold all FSMO roles in a windows 2012 server environment. I created my new DC, successfully transferred all FSMO and started using it as my DNS as well.  My exchange server is also acting as a Global catalog server but no FSMO roles. I turned off the old DC and things are running. However, when I went in to modify GPO, it failed.  Seems the SYSVOL and Netlogon folders did not replicate to the new DC.  All three servers show up in NTDS settings (I turned the original DC back on) but I can't get it to replicate.  I've told it to replicate from selected DC.  
What did I miss and what should my next troubleshooting steps be please?
0
Comment
Question by:davebird
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
5 Comments
 
LVL 13

Expert Comment

by:Jaihunt
ID: 39817238
Do D2 non-authoritative restore of sysvol replication

http://support.microsoft.com/kb/2218556/en-us

If you are not having any old 2003 servers and its not upgraded from that means you can check the below link (Sysvol using DFS-r)

http://kpytko.pl/2013/12/12/non-authoritative-sysvol-restore-dfs-r/

Sysvol using FRS

http://kpytko.pl/2013/12/06/non-authoritative-sysvol-restore-frs/
0
 

Author Comment

by:davebird
ID: 39836163
sorry for long delay.  I have attempted non-authoritative D2 Restore a couple of times but no joy.  The shares for sysvol netlogon don't exist and are not created after D2 restore is done.  Folders/files don't exist.  I'm getting an error if DFS R log of 5014 and event data error 9033 The Request was cancelled by a shutdown.
Threads say to cancel replication partner and re-add.  When googling how to, all I find is how to cancel SQL replication, nothing on domains.  
Still researching.  Thanks for any continued thoughts and suggestions.
0
 

Accepted Solution

by:
davebird earned 0 total points
ID: 39836726
Ok, Got it figured out.
DFS replication will only work if the two folders, policies and sysvol for a domain exist.  Since neither the policies or sysvol were created, for whatever reason, the tech threads to do a non-authoritative restore or ANY replication mechanism fails.  There are no errors generated but you never get a 4602 log or 4604 log entry.  
Ergo, if you don't have sysvol and policies folders AND/OR their corresponding shares:
- stop dfsr service on all domains
- run start sysvol
- Create the policies folder and sysvol folder manually under the appropriate domain
- restart dfsr service on all domains
- follow http://support.microsoft.com/kb/2218556 steps
Hopefully, within 10-15 minutes, you'll get the 4604 and data will have replicated to your new DC.

Thanks for all the suggestions.
0
 

Author Closing Comment

by:davebird
ID: 39846823
Figured it out
0
 

Expert Comment

by:danddnetworks
ID: 40403146
Hi Guys, i know this has been correctly answered, but one thing i've noticed on all articles with this problem is that it doesn't state where I run the commands from. In my situation I'm having the identical issue as above, existing 2012 DC, new 2012 DC added, no sysvol folder etc.I've looked at the D2 restore documentation, but where do i run the fix?

Do i run it on the domain controller which is missing the sysvol folders etc? (note my dc which looks broken holds all my FSMO roles at this time)

Or is it a mixture of editing both existing DC and New DC, all documents are unclear, unless it's my frustration getting the better of me. A clear answer would be appreciated.

Many Thanks
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article outlines the process to identify and resolve account lockout in an Active Directory environment.
This article describes my battle tested process for setting up delegation. I use this process anywhere that I need to setup delegation. In the article I will show how it applies to Active Directory
In this Micro Tutorial viewers will learn how to use Boot Corrector from Paragon Rescue Kit Free to identify and fix the boot problems of Windows 7/8/2012R2 etc. As an example is used Windows 2012R2 which lost its active partition flag (often happen…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question