Solved

SYSVOL at branch site not same as HQ site

Posted on 2014-02-04
10
339 Views
Last Modified: 2014-02-10
Our AD comprises of 2 Sites and 3DCS (All Windows Server 2008 R2, forest and domain functional levels also 2008 R2)

Our Head Office has 2 DCs and our branch office (4k miles away) has 1 DC.

The branch office DC has a SYSVOL folder that is different to the Head office SYSVOL folder.

I have attached DCDIAG output, be grateful for any help/advice on resolving this issue.
dcdiag.log
0
Comment
Question by:antonioking
  • 5
  • 4
10 Comments
 
LVL 9

Expert Comment

by:Ahmed786
ID: 39832319
Is your Group policies working fine on both sites ?
0
 
LVL 9

Expert Comment

by:Ahmed786
ID: 39832351
Check below few command and update us the output.

¿      Repadmin /showrepl & Repadmin /Syncall DCName

¿      Dcdiag /s:Serverdc01 /test:replications

¿      Dcdiag /s:Serverdc01 /test:netlogons


So if u have not ran below command pls get it and update us the output.

C:\>Dcdiag /s:DCName --> Enter
0
 

Author Comment

by:antonioking
ID: 39832482
Repadmin /showrepl displayed errors (see attached)
Repadmin /Syncall HQDC01 terminated with no errors.

Dcdiag /s:HQDC01 /test:replications passed all tests without any failures
Dcdiag /s:HQDC01 /test:netlogons passed all tests without any failures

I have also attached results from DCdiag /s:BRANCHDC

Thanks for your help!
repadminshowrepl.log
dcdiag.log
0
 
LVL 53

Expert Comment

by:Will Szymkowski
ID: 39832581
Take a look at the below link which illustrates common replication issues and ways to resolve them. Make sure that the DC in the remote site has the proper time.

Troubleshooting Steps for AD Replication

If you cannot get Sysvol to replicate properly, you may need to demote that DC in the branch office and promote it again and allow replication to happen.

Will.
0
 
LVL 9

Expert Comment

by:Ahmed786
ID: 39832627
Have u checked your Group Policy, is it working fine ?

gpupdate /force --> Enter


Also check your DNS Server settings IP address and all IP on Dcs as well


Also ensure the following on DC:
1. Each DC / DNS server points to its private IP address as primary DNS server and other remote/local DNS servers as secondary in TCP/IP properties.
2. Each DC has just one IP address and single network adapter is enabled.
3. Contact your ISP and get valid DNS IPs from them and add it in to the forwarders, Do not set public DNS server in TCP/IP setting of DC.
4. Once you are done, run "ipconfig /flushdns & ipconfig /registerdns", restart DNS and NETLOGON service each DC.
5.Also, disable local windows firewall service, by default it is enabled in vista/windows 2008 and above
0
[Webinar] Disaster Recovery and Cloud Management

Learn from Unigma and CloudBerry industry veterans which providers are best for certain use cases and how to lower cloud costs, how to grow your Managed Services practice in IaaS clouds, and how to utilize public cloud for Disaster Recovery

 
LVL 9

Expert Comment

by:Ahmed786
ID: 39832945
You may go through below microsoft article as well to resolve ur mentioned related errors.

http://support.microsoft.com/kb/2183411/en-gb
0
 
LVL 9

Expert Comment

by:Ahmed786
ID: 39838316
Is your issue resolved ?
0
 

Accepted Solution

by:
antonioking earned 0 total points
ID: 39838367
Yes, I demoted and re-promoted the DC and everything is replicating fine now.
0
 

Author Comment

by:antonioking
ID: 39838385
Thanks for your help, sorry I didn't go through the MS article. I needed a quick resolution.
Appreciate it doesn't help me or anyone else find the root cause but demoting and re-promoting certainly fixed the problem.!
0
 

Author Closing Comment

by:antonioking
ID: 39846864
Demoting/Promoting resolved the issue
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

867 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now