• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 581
  • Last Modified:

ERROR_ACCESS_DENIED in FRS debug.log for SYSVOL

Hi all,

I'm preping for a migration from FRS to DFS for our SYSVOL replication, before I bring our first 2012 AD server online. While checking FRS for errors with FRSDiag I got errors on one of our servers, which I have posted below.
What are these errors and how do I fix them?

About our AD setup:
We have 2 sites, Site1 and Site2. Site1 has 2 AD servers, ADSRV05 AND ADSRV06. ADSRV05 holds all FSMO rolls. Site2 only has 1 AD server, ADSRV04. All AD servers are running 2008R2 SP1.


Errors from FRSDiag:
Checking for errors in debug logs ...
	ERROR on NtFrs_0005.log : "ERROR_ACCESS_DENIED" : <SndCsMain:                      976:   904: S0: 15:05:45> :SR: Cmd 005dd190, CxtG bb94e40e, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (368) [SndFail - Send Penalty]
	ERROR on NtFrs_0005.log : "ERROR_ACCESS_DENIED" : <SndCsMain:                     2336:   877: S0: 15:05:45> :SR: Cmd 005dcd10, CxtG 80e9c1bd, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (570) [SndFail - rpc call]
	ERROR on NtFrs_0005.log : "ERROR_ACCESS_DENIED" : <SndCsMain:                     2336:   904: S0: 15:05:45> :SR: Cmd 005dcd10, CxtG 80e9c1bd, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (570) [SndFail - Send Penalty]

	Found 8 ERROR_ACCESS_DENIED error(s)! Latest ones (up to 3) listed above

 ......... failed with 8 error entries

Open in new window


Here are all 8 errors from debug log:
<SndCsMain:                     3772:   877: S0: 14:23:37> :SR: Cmd 005dce90, CxtG bb94e40e, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (368) [SndFail - rpc call]
<SndCsMain:                     3772:   904: S0: 14:23:37> :SR: Cmd 005dce90, CxtG bb94e40e, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (368) [SndFail - Send Penalty]
<SndCsMain:                     3960:   877: S0: 14:23:38> :SR: Cmd 005dd190, CxtG 80e9c1bd, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (570) [SndFail - rpc call]
<SndCsMain:                     3960:   904: S0: 14:23:38> :SR: Cmd 005dd190, CxtG 80e9c1bd, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (570) [SndFail - Send Penalty]
<SndCsMain:                      976:   877: S0: 15:05:45> :SR: Cmd 005dd190, CxtG bb94e40e, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (368) [SndFail - rpc call]
<SndCsMain:                      976:   904: S0: 15:05:45> :SR: Cmd 005dd190, CxtG bb94e40e, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (368) [SndFail - Send Penalty]
<SndCsMain:                     2336:   877: S0: 15:05:45> :SR: Cmd 005dcd10, CxtG 80e9c1bd, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (570) [SndFail - rpc call]
<SndCsMain:                     2336:   904: S0: 15:05:45> :SR: Cmd 005dcd10, CxtG 80e9c1bd, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (570) [SndFail - Send Penalty]

Open in new window


I need to fix any errors in FRS before I can begin the migration to DFS.

Thanks,
H41
0
Hamilton-4100
Asked:
Hamilton-4100
1 Solution
 
SandeshdubeyCommented:
I will recommend to check FRS event log for any errors and warning. Check the sysvol permission it is set correctly. For sysvol permission see this:http://social.technet.microsoft.com/Forums/windowsserver/en-US/d54c2e41-f827-4db3-8956-1b3d15f5a076/want-to-modify-sysvol-and-netlogon-share-permissions

Also run dcdiag /q and repadmin /replsum to check the health of DCs. If errors are reported post the same. It seems you need to run authorative and non authorative restore of sysvol.

See below similar thread:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/a639d945-e712-45ab-b22d-ca0b47f36807/frs-erroraccessdenied-errors?forum=winserverfiles
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_24354445.html
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Q_24852276.html
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Q_28205882.html

Hope this helps
0
 
Hamilton-4100Author Commented:
Sandeshdubey,

Thanks for the Reply, but I waited a week and the errors are gone. I'm not sure why, but i believe it's because the errors occurred after a system reboot.

Again, thank you for your help!
0
 
Seth SimmonsSr. Systems AdministratorCommented:
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now