Solved

Windows Server 2012 SYSVOL and Group Policy Replication

Posted on 2015-01-15
4
286 Views
Last Modified: 2015-01-16
We have two Windows Server 2012 Datacenter (non R2) DC's running on VMWare 5.1 ESXi hosts.

The DC's are in the same subnet. They appear to be replicated but I am concerned about the domain status being shown on the Group Policy Management status page. When I click Detect Now from either DC, the other DC is always shows as "replication in progress". At no time do they ever show as "replication in sync". (See picture)
gp.PNG
My troubleshooting:
I've run dcdiag and every test successfully passes except for the DFSREvent which says: There are warning or error events within the last 24 hours...." (See picture)
dcdiag.PNG
The only warning is at 1am each night when our backup system does its thing. (See picture)
warning.PNG
repadmin /syncall works fine
There aren't any red exclamation errors in the event viewer
The NETLOGON and SYSVOL shares are working fine
We don't have any DFS NameSpaces


QUESTION:
Is this something I need to be worried about? It would seem that even if the service is interrupted during backup, I should be able to update it during the day to see the DCs in sync.
0
Comment
Question by:Paul Wagner
  • 2
  • 2
4 Comments
 
LVL 53

Expert Comment

by:Will Szymkowski
ID: 40552602
Have you tried to open DFS Management and run a health report on the DC replication?

Have you checked the sysvol folder on each of your domain controllers to ensure the same data is present on both?

Will.
0
 
LVL 3

Author Comment

by:Paul Wagner
ID: 40553966
Health Report shows no errors or warnings.
SYSVOL\domain folder shows 4 GPO folders but the date on one of them is a few months off.
0
 
LVL 53

Accepted Solution

by:
Will Szymkowski earned 500 total points
ID: 40553990
DFS-R only replicates changes not the entire folder. What are the timestamps on the policies? Do they match up?

If all tests are coming back clean there shouldn't be too much to worry about. Did you recently do an AD upgrade or was one done in the past?

Sometimes what I have seen is if you do an AD upgrade and you have domain controllers issues not all of the data is replicated during the upgrade or there are orphaned objects on some domain controllers.

Aside from that if all your tests are clean and there are no issues in regards to Policies apply etc I would not worry.

Will.
0
 
LVL 3

Author Comment

by:Paul Wagner
ID: 40554015
Ya, everything matches up. I just wish Group Policy Management said that the DC's were in sync. The tests all seem to pass so I guess we're good. Thanks for setting my mind at ease. :-)
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Join & Write a Comment

Synchronize a new Active Directory domain with an existing Office 365 tenant
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will walk an individual through the process of configuring basic necessities in order to use the 2010 version of Data Protection Manager. These include storage, agents, and protection jobs. Launch Data Protection Manager from the deskt…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now