Solved

ERROR_ACCESS_DENIED in FRS debug.log for SYSVOL

Posted on 2014-07-21
4
305 Views
Last Modified: 2015-06-26
Hi all,

I'm preping for a migration from FRS to DFS for our SYSVOL replication, before I bring our first 2012 AD server online. While checking FRS for errors with FRSDiag I got errors on one of our servers, which I have posted below.
What are these errors and how do I fix them?

About our AD setup:
We have 2 sites, Site1 and Site2. Site1 has 2 AD servers, ADSRV05 AND ADSRV06. ADSRV05 holds all FSMO rolls. Site2 only has 1 AD server, ADSRV04. All AD servers are running 2008R2 SP1.


Errors from FRSDiag:
Checking for errors in debug logs ...
	ERROR on NtFrs_0005.log : "ERROR_ACCESS_DENIED" : <SndCsMain:                      976:   904: S0: 15:05:45> :SR: Cmd 005dd190, CxtG bb94e40e, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (368) [SndFail - Send Penalty]
	ERROR on NtFrs_0005.log : "ERROR_ACCESS_DENIED" : <SndCsMain:                     2336:   877: S0: 15:05:45> :SR: Cmd 005dcd10, CxtG 80e9c1bd, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (570) [SndFail - rpc call]
	ERROR on NtFrs_0005.log : "ERROR_ACCESS_DENIED" : <SndCsMain:                     2336:   904: S0: 15:05:45> :SR: Cmd 005dcd10, CxtG 80e9c1bd, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (570) [SndFail - Send Penalty]

	Found 8 ERROR_ACCESS_DENIED error(s)! Latest ones (up to 3) listed above

 ......... failed with 8 error entries

Open in new window


Here are all 8 errors from debug log:
<SndCsMain:                     3772:   877: S0: 14:23:37> :SR: Cmd 005dce90, CxtG bb94e40e, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (368) [SndFail - rpc call]
<SndCsMain:                     3772:   904: S0: 14:23:37> :SR: Cmd 005dce90, CxtG bb94e40e, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (368) [SndFail - Send Penalty]
<SndCsMain:                     3960:   877: S0: 14:23:38> :SR: Cmd 005dd190, CxtG 80e9c1bd, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (570) [SndFail - rpc call]
<SndCsMain:                     3960:   904: S0: 14:23:38> :SR: Cmd 005dd190, CxtG 80e9c1bd, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (570) [SndFail - Send Penalty]
<SndCsMain:                      976:   877: S0: 15:05:45> :SR: Cmd 005dd190, CxtG bb94e40e, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (368) [SndFail - rpc call]
<SndCsMain:                      976:   904: S0: 15:05:45> :SR: Cmd 005dd190, CxtG bb94e40e, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (368) [SndFail - Send Penalty]
<SndCsMain:                     2336:   877: S0: 15:05:45> :SR: Cmd 005dcd10, CxtG 80e9c1bd, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (570) [SndFail - rpc call]
<SndCsMain:                     2336:   904: S0: 15:05:45> :SR: Cmd 005dcd10, CxtG 80e9c1bd, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (570) [SndFail - Send Penalty]

Open in new window


I need to fix any errors in FRS before I can begin the migration to DFS.

Thanks,
H41
0
Comment
Question by:Hamilton-4100
4 Comments
 
LVL 24

Expert Comment

by:Sandeshdubey
ID: 40210706
I will recommend to check FRS event log for any errors and warning. Check the sysvol permission it is set correctly. For sysvol permission see this:http://social.technet.microsoft.com/Forums/windowsserver/en-US/d54c2e41-f827-4db3-8956-1b3d15f5a076/want-to-modify-sysvol-and-netlogon-share-permissions

Also run dcdiag /q and repadmin /replsum to check the health of DCs. If errors are reported post the same. It seems you need to run authorative and non authorative restore of sysvol.

See below similar thread:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/a639d945-e712-45ab-b22d-ca0b47f36807/frs-erroraccessdenied-errors?forum=winserverfiles
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_24354445.html
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Q_24852276.html
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Q_28205882.html

Hope this helps
0
 

Accepted Solution

by:
Hamilton-4100 earned 0 total points
ID: 40232405
Sandeshdubey,

Thanks for the Reply, but I waited a week and the errors are gone. I'm not sure why, but i believe it's because the errors occurred after a system reboot.

Again, thank you for your help!
0
 
LVL 34

Expert Comment

by:Seth Simmons
ID: 40852534
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
This article describes my battle tested process for setting up delegation. I use this process anywhere that I need to setup delegation. In the article I will show how it applies to Active Directory
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently changeā€¦
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

791 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question