Event 13559 on SBS 2011 NTFRS_CMD_FILE_MOVE_ROOT

Hello experts,

I have a SBS 2011 box that was migrated from 2003 about one year ago. About a week ago, Event ID 13559 appeared in the File Replication Service event viewer. Up until then it was all 13501 & 13516's which would be indications that things are going well. Here is the Event 13559:

The File Replication Service has detected that the replica root path has changed from "c:\windows\sysvol\domain" to "c:\windows\sysvol\domain". If this is an intentional move then a file with the name NTFRS_CMD_FILE_MOVE_ROOT needs to be created under the new root path.
This was detected for the following replica set:
Changing the replica root path is a two step process which is triggered by the creation of the NTFRS_CMD_FILE_MOVE_ROOT file.
 [1] At the first poll which will occur in 5 minutes this computer will be deleted from the replica set.
 [2] At the poll following the deletion this computer will be re-added to the replica set with the new root path. This re-addition will trigger a full tree sync for the replica set. At the end of the sync all the files will be at the new location. The files may or may not be deleted from the old location depending on whether they are needed or not.

Nothing was moved on this server, nor was anything virtualized as I've seen as the culprit on other articles. Disk space is fine, and this event just appeared in the middle of the day, approx. 12:02 PM local time.

I'm very reluctant to follow the Event's suggested fix as there are no other DC's to replicate from. SBS 2011 is the only one on the network. I've seen other suggestions about restarting NTFRS but am very reluctant.

Any help would be greatly appreciated.


Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

robklubsAuthor Commented:
I should note, that I haven't even tried to restart the file replication service yet. Not sure what would happen with that event hanging out there.

Looking forward to some guidance!
Neeraj KumarSystem adminCommented:

As this is a single domain controller you need to perform authoritative restore of active directory. Find the below mentioned article for the same.


Find the below mentioned article for reason of occurence

robklubsAuthor Commented:
Thanks for your help. Your links are certainly the way to go.

Interestingly enough, I had another server that had the same error. After a reboot, the error went away and 13516 appeared without issue. I even waited a couple of days and rebooted again and it was still fixed.

Thanks again!NTFRS Error gone after reboot, event log

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
robklubsAuthor Commented:
FYI - I should have given this expert an "A" grade and am looking into how to change it . . . .
robklubsAuthor Commented:
The expert was quick, courteous, and correct. The only reason for the B instead of the A was that a reboot on another machine with the same issue fixed the issue before his solution was needed.

To be fair, a reboot should not fix this issue. I haven't been able to find any answer as to why it did.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.