ERROR_ACCESS_DENIED in FRS debug.log for SYSVOL

Hi all,

I'm preping for a migration from FRS to DFS for our SYSVOL replication, before I bring our first 2012 AD server online. While checking FRS for errors with FRSDiag I got errors on one of our servers, which I have posted below.
What are these errors and how do I fix them?

About our AD setup:
We have 2 sites, Site1 and Site2. Site1 has 2 AD servers, ADSRV05 AND ADSRV06. ADSRV05 holds all FSMO rolls. Site2 only has 1 AD server, ADSRV04. All AD servers are running 2008R2 SP1.


Errors from FRSDiag:
Checking for errors in debug logs ...
	ERROR on NtFrs_0005.log : "ERROR_ACCESS_DENIED" : <SndCsMain:                      976:   904: S0: 15:05:45> :SR: Cmd 005dd190, CxtG bb94e40e, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (368) [SndFail - Send Penalty]
	ERROR on NtFrs_0005.log : "ERROR_ACCESS_DENIED" : <SndCsMain:                     2336:   877: S0: 15:05:45> :SR: Cmd 005dcd10, CxtG 80e9c1bd, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (570) [SndFail - rpc call]
	ERROR on NtFrs_0005.log : "ERROR_ACCESS_DENIED" : <SndCsMain:                     2336:   904: S0: 15:05:45> :SR: Cmd 005dcd10, CxtG 80e9c1bd, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (570) [SndFail - Send Penalty]

	Found 8 ERROR_ACCESS_DENIED error(s)! Latest ones (up to 3) listed above

 ......... failed with 8 error entries

Open in new window


Here are all 8 errors from debug log:
<SndCsMain:                     3772:   877: S0: 14:23:37> :SR: Cmd 005dce90, CxtG bb94e40e, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (368) [SndFail - rpc call]
<SndCsMain:                     3772:   904: S0: 14:23:37> :SR: Cmd 005dce90, CxtG bb94e40e, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (368) [SndFail - Send Penalty]
<SndCsMain:                     3960:   877: S0: 14:23:38> :SR: Cmd 005dd190, CxtG 80e9c1bd, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (570) [SndFail - rpc call]
<SndCsMain:                     3960:   904: S0: 14:23:38> :SR: Cmd 005dd190, CxtG 80e9c1bd, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (570) [SndFail - Send Penalty]
<SndCsMain:                      976:   877: S0: 15:05:45> :SR: Cmd 005dd190, CxtG bb94e40e, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (368) [SndFail - rpc call]
<SndCsMain:                      976:   904: S0: 15:05:45> :SR: Cmd 005dd190, CxtG bb94e40e, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (368) [SndFail - Send Penalty]
<SndCsMain:                     2336:   877: S0: 15:05:45> :SR: Cmd 005dcd10, CxtG 80e9c1bd, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (570) [SndFail - rpc call]
<SndCsMain:                     2336:   904: S0: 15:05:45> :SR: Cmd 005dcd10, CxtG 80e9c1bd, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (570) [SndFail - Send Penalty]

Open in new window


I need to fix any errors in FRS before I can begin the migration to DFS.

Thanks,
H41
Hamilton-4100Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

SandeshdubeySenior Server EngineerCommented:
I will recommend to check FRS event log for any errors and warning. Check the sysvol permission it is set correctly. For sysvol permission see this:http://social.technet.microsoft.com/Forums/windowsserver/en-US/d54c2e41-f827-4db3-8956-1b3d15f5a076/want-to-modify-sysvol-and-netlogon-share-permissions

Also run dcdiag /q and repadmin /replsum to check the health of DCs. If errors are reported post the same. It seems you need to run authorative and non authorative restore of sysvol.

See below similar thread:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/a639d945-e712-45ab-b22d-ca0b47f36807/frs-erroraccessdenied-errors?forum=winserverfiles
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_24354445.html
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Q_24852276.html
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Q_28205882.html

Hope this helps
0
Hamilton-4100Author Commented:
Sandeshdubey,

Thanks for the Reply, but I waited a week and the errors are gone. I'm not sure why, but i believe it's because the errors occurred after a system reboot.

Again, thank you for your help!
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Seth SimmonsSr. Systems AdministratorCommented:
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.