?
Solved

ERROR_ACCESS_DENIED in FRS debug.log for SYSVOL

Posted on 2014-07-21
4
Medium Priority
?
437 Views
Last Modified: 2015-06-26
Hi all,

I'm preping for a migration from FRS to DFS for our SYSVOL replication, before I bring our first 2012 AD server online. While checking FRS for errors with FRSDiag I got errors on one of our servers, which I have posted below.
What are these errors and how do I fix them?

About our AD setup:
We have 2 sites, Site1 and Site2. Site1 has 2 AD servers, ADSRV05 AND ADSRV06. ADSRV05 holds all FSMO rolls. Site2 only has 1 AD server, ADSRV04. All AD servers are running 2008R2 SP1.


Errors from FRSDiag:
Checking for errors in debug logs ...
	ERROR on NtFrs_0005.log : "ERROR_ACCESS_DENIED" : <SndCsMain:                      976:   904: S0: 15:05:45> :SR: Cmd 005dd190, CxtG bb94e40e, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (368) [SndFail - Send Penalty]
	ERROR on NtFrs_0005.log : "ERROR_ACCESS_DENIED" : <SndCsMain:                     2336:   877: S0: 15:05:45> :SR: Cmd 005dcd10, CxtG 80e9c1bd, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (570) [SndFail - rpc call]
	ERROR on NtFrs_0005.log : "ERROR_ACCESS_DENIED" : <SndCsMain:                     2336:   904: S0: 15:05:45> :SR: Cmd 005dcd10, CxtG 80e9c1bd, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (570) [SndFail - Send Penalty]

	Found 8 ERROR_ACCESS_DENIED error(s)! Latest ones (up to 3) listed above

 ......... failed with 8 error entries

Open in new window


Here are all 8 errors from debug log:
<SndCsMain:                     3772:   877: S0: 14:23:37> :SR: Cmd 005dce90, CxtG bb94e40e, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (368) [SndFail - rpc call]
<SndCsMain:                     3772:   904: S0: 14:23:37> :SR: Cmd 005dce90, CxtG bb94e40e, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (368) [SndFail - Send Penalty]
<SndCsMain:                     3960:   877: S0: 14:23:38> :SR: Cmd 005dd190, CxtG 80e9c1bd, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (570) [SndFail - rpc call]
<SndCsMain:                     3960:   904: S0: 14:23:38> :SR: Cmd 005dd190, CxtG 80e9c1bd, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (570) [SndFail - Send Penalty]
<SndCsMain:                      976:   877: S0: 15:05:45> :SR: Cmd 005dd190, CxtG bb94e40e, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (368) [SndFail - rpc call]
<SndCsMain:                      976:   904: S0: 15:05:45> :SR: Cmd 005dd190, CxtG bb94e40e, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (368) [SndFail - Send Penalty]
<SndCsMain:                     2336:   877: S0: 15:05:45> :SR: Cmd 005dcd10, CxtG 80e9c1bd, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (570) [SndFail - rpc call]
<SndCsMain:                     2336:   904: S0: 15:05:45> :SR: Cmd 005dcd10, CxtG 80e9c1bd, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (570) [SndFail - Send Penalty]

Open in new window


I need to fix any errors in FRS before I can begin the migration to DFS.

Thanks,
H41
0
Comment
Question by:Hamilton-4100
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 24

Expert Comment

by:Sandeshdubey
ID: 40210706
I will recommend to check FRS event log for any errors and warning. Check the sysvol permission it is set correctly. For sysvol permission see this:http://social.technet.microsoft.com/Forums/windowsserver/en-US/d54c2e41-f827-4db3-8956-1b3d15f5a076/want-to-modify-sysvol-and-netlogon-share-permissions

Also run dcdiag /q and repadmin /replsum to check the health of DCs. If errors are reported post the same. It seems you need to run authorative and non authorative restore of sysvol.

See below similar thread:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/a639d945-e712-45ab-b22d-ca0b47f36807/frs-erroraccessdenied-errors?forum=winserverfiles
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_24354445.html
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Q_24852276.html
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Q_28205882.html

Hope this helps
0
 

Accepted Solution

by:
Hamilton-4100 earned 0 total points
ID: 40232405
Sandeshdubey,

Thanks for the Reply, but I waited a week and the errors are gone. I'm not sure why, but i believe it's because the errors occurred after a system reboot.

Again, thank you for your help!
0
 
LVL 35

Expert Comment

by:Seth Simmons
ID: 40852534
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
Suggested Courses

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question