FRS - The File Replication Service has detected that the replica set "Domain System Volume SYSVOL SHARE)

Posted on 2014-08-28
Last Modified: 2016-06-12
Hi all,

Quick overview (Domain Functional Level: 2008, Forest Functional Level: 2008)

the client has 2 domain controllers (DC1 and DC2 both running Windows Server 2008) that are in the state of JRNL_WRAP_ERROR.
This problem has existed since May 2013 and wasn't picked up until a 3rd DC (Windows Server 2012 R2) was added to the domain and didn't replicate the SYSVOL share. Backups therefore are out of date (a year and a bit)

On DC1
Event ID: 13561 - JRNL_WRAP_ERROR
Event ID: 13562 - Could not bind to a Domain Controller. Will try again at next polling cycle.
Sysvol/Netlogon shares are accessible

Event ID: 13508 - The FRS is having trouble enabling replication from DC2 to DC1 and will keep retrying.
Event ID: 13561 - JRNL_WRAP_ERROR
Sysvol/Netlogon shares are inaccessible

On DC3
Event ID: 13508 - The FRS is having trouble enabling replication from DC2 to DC3 and will keep retrying.
Event ID: 13508 - The FRS is having trouble enabling replication from DC1 to DC3 and will keep retrying.
Event ID: 13565 - FRS is initializing the system volume with data from another DC. Computer DC3 cannot become a DC until this process is complete
Event ID: 5706 - The Netlogon service could not create server share C:\Windows\SYSVOL\sysvol\domain\SCRIPS. The following error occured: The system cannot find the file specified.

There is also a transitive forest trust between this domain and another domain.
DNS zones are replicating ok.

Any advice?

Microsoft support call?

Thanks in advance
Question by:Summerhits
    LVL 9

    Accepted Solution

    The forest trust is what I'm not sure about here.  Otherwise, you need to set the BURFLAGS registry key on all of the DCs.

    Basic steps are to stop FRS service on all three.  Make a backup copy of the SYSVOL and NETLOGON folder on each DC (Don't need to do this on the new DC since it doesn't have them yet.)

    On the DC that you trust the most to have the best information, set BURFLAGS to D4.  On the other two DCs, set it to D2.  Start FRS on the DC where you set it to D4 and give it a few minutes.  Monitor the BURFLAGS key to make sure it goes back to 0 and check the event logs for FRS.  If all seems good, then start FRS on the other two DCs.  Same deal - monitor.

    Once all are happy, you may have to merge some data between the NETLOGON and SYSVOL folders you backed up.

    Here's an article that might help a little.

    Author Comment

    Thanks very much for the reply.

    I think the DC that trust the most is DC1 in this case as DC2 doesn't appear to be working well at all.

    Was worried about doing that due to  the forest trust.

    Another thing i was thinking of was unplugging DC2 and doing a dcpromo /forceremoval with a metadata cleanup.

    At this stage it seems like the only option.

    Featured Post

    Find Ransomware Secrets With All-Source Analysis

    Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

    Join & Write a Comment

    Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
    Synchronize a new Active Directory domain with an existing Office 365 tenant
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
    Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now