Solved

ERROR_ACCESS_DENIED in FRS debug.log for SYSVOL

Posted on 2014-07-21
4
228 Views
Last Modified: 2015-06-26
Hi all,

I'm preping for a migration from FRS to DFS for our SYSVOL replication, before I bring our first 2012 AD server online. While checking FRS for errors with FRSDiag I got errors on one of our servers, which I have posted below.
What are these errors and how do I fix them?

About our AD setup:
We have 2 sites, Site1 and Site2. Site1 has 2 AD servers, ADSRV05 AND ADSRV06. ADSRV05 holds all FSMO rolls. Site2 only has 1 AD server, ADSRV04. All AD servers are running 2008R2 SP1.


Errors from FRSDiag:
Checking for errors in debug logs ...
	ERROR on NtFrs_0005.log : "ERROR_ACCESS_DENIED" : <SndCsMain:                      976:   904: S0: 15:05:45> :SR: Cmd 005dd190, CxtG bb94e40e, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (368) [SndFail - Send Penalty]
	ERROR on NtFrs_0005.log : "ERROR_ACCESS_DENIED" : <SndCsMain:                     2336:   877: S0: 15:05:45> :SR: Cmd 005dcd10, CxtG 80e9c1bd, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (570) [SndFail - rpc call]
	ERROR on NtFrs_0005.log : "ERROR_ACCESS_DENIED" : <SndCsMain:                     2336:   904: S0: 15:05:45> :SR: Cmd 005dcd10, CxtG 80e9c1bd, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (570) [SndFail - Send Penalty]

	Found 8 ERROR_ACCESS_DENIED error(s)! Latest ones (up to 3) listed above

 ......... failed with 8 error entries

Open in new window


Here are all 8 errors from debug log:
<SndCsMain:                     3772:   877: S0: 14:23:37> :SR: Cmd 005dce90, CxtG bb94e40e, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (368) [SndFail - rpc call]
<SndCsMain:                     3772:   904: S0: 14:23:37> :SR: Cmd 005dce90, CxtG bb94e40e, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (368) [SndFail - Send Penalty]
<SndCsMain:                     3960:   877: S0: 14:23:38> :SR: Cmd 005dd190, CxtG 80e9c1bd, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (570) [SndFail - rpc call]
<SndCsMain:                     3960:   904: S0: 14:23:38> :SR: Cmd 005dd190, CxtG 80e9c1bd, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (570) [SndFail - Send Penalty]
<SndCsMain:                      976:   877: S0: 15:05:45> :SR: Cmd 005dd190, CxtG bb94e40e, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (368) [SndFail - rpc call]
<SndCsMain:                      976:   904: S0: 15:05:45> :SR: Cmd 005dd190, CxtG bb94e40e, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (368) [SndFail - Send Penalty]
<SndCsMain:                     2336:   877: S0: 15:05:45> :SR: Cmd 005dcd10, CxtG 80e9c1bd, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (570) [SndFail - rpc call]
<SndCsMain:                     2336:   904: S0: 15:05:45> :SR: Cmd 005dcd10, CxtG 80e9c1bd, WS ERROR_ACCESS_DENIED, To   ADSRV05.HAMILTON.ASI Len:  (570) [SndFail - Send Penalty]

Open in new window


I need to fix any errors in FRS before I can begin the migration to DFS.

Thanks,
H41
0
Comment
Question by:Hamilton-4100
4 Comments
 
LVL 24

Expert Comment

by:Sandeshdubey
ID: 40210706
I will recommend to check FRS event log for any errors and warning. Check the sysvol permission it is set correctly. For sysvol permission see this:http://social.technet.microsoft.com/Forums/windowsserver/en-US/d54c2e41-f827-4db3-8956-1b3d15f5a076/want-to-modify-sysvol-and-netlogon-share-permissions

Also run dcdiag /q and repadmin /replsum to check the health of DCs. If errors are reported post the same. It seems you need to run authorative and non authorative restore of sysvol.

See below similar thread:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/a639d945-e712-45ab-b22d-ca0b47f36807/frs-erroraccessdenied-errors?forum=winserverfiles
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_24354445.html
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Q_24852276.html
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Q_28205882.html

Hope this helps
0
 

Accepted Solution

by:
Hamilton-4100 earned 0 total points
ID: 40232405
Sandeshdubey,

Thanks for the Reply, but I waited a week and the errors are gone. I'm not sure why, but i believe it's because the errors occurred after a system reboot.

Again, thank you for your help!
0
 
LVL 34

Expert Comment

by:Seth Simmons
ID: 40852534
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0

Join & Write a Comment

Introduction You may have a need to setup a group of users to allow local administrative access on workstations.  In a domain environment this can easily be achieved with Restricted Groups and Group Policies. This article will demonstrate how to…
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now