SYSVOL and NETLOGON shares missing - 2008R2, after demoting and removing old 2003R2 DC

Hi guys,

We've had a site running for about 2 years, with a PDC Server 2008R2, and a 6+ year old 2003R2 as a backup DC.  Was running well, until several hard shutdowns later we had issues with clients PC's not being able to access the server via DNS name - IP was ok.  At that time DCDIAG was giving numerous errors as expected, event log was rather full.  Several hours of troubleshooting these errors later, all FSMO roles have been moved to the 2008 box (nicely, not seized), and the 2003 has been demoted and will not be used again.  Thanks to many Experts-Exchange articles to get me this far!  I also had to create and register DNS.

Only issue left, is the SYSVOL and NETLOGON shares are missing.  

Event log ID 5706
The Netlogon service could not create server share C:\Windows\SYSVOL\sysvol.  The following error occurred:
Access is denied.
Event log ID 5706
The Netlogon service could not create server share C:\Windows\SYSVOL\sysvol\whitehaven.local\SCRIPTS.  The following error occurred:
Access is denied.

I've attached results of dcdiag, dcdiag /test:dns and ipconfig /all

Have found several articles referencing the issue, though have not made much headway on this last niggling issue!

Thanks
dcdiag.txt
dns.txt
ipconfig.txt
scottytnzAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

scottytnzAuthor Commented:
Hi,

I've been through the steps already, and again just now.  The articles seem to reference a slightly different issue, where Sysvol and scripts folders don't exist.  In this case the C:\Windows\SYSVOL\sysvol\whitehaven.local\Scripts folder exists.  I've also replicated the permissions off another server, though still get the "access is denied" error.

However, the C:\Windows\SYSVOL\sysvol\whitehaven.local\policies folder is missing if that helps?

Does the DCDIAG DNS error "Error: Can't read OS version through WMI No host records (A or AAAA) were found for this DC" help point in the right direction?

Can I simply remove the Sysvol folder structure and add them again?

Cheers,
0
scottytnzAuthor Commented:
Also, the SYSVOL share is also missing - not just NETLOGON.  Thanks.
0
Walter PadrónCommented:
I recommend the following:

1- Make a backup of your server DC
2- Use a spare server (if you don't have one use a virtual machine) and install a new DC with DNS rol
3- Stop DNS on old server
4- Check if SYSVOL/NETLOGON was created, join computers, DNS is working, etc...
5- If working move roles to new DC and rebuild the old one

It is a lot of work but safer and can be accomplished in 1 day or two without disrupt the normal work

Best regards
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
scottytnzAuthor Commented:
Thanks, I was hoping to avoid that though will proceed with a rebuild.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Server OS

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.