Group Policy Replication Issue - can anyone help?

Hi all, we have two servers that replicate to each other at different sites, when I updated the server with a new group policy at point A, I get the following issue showing at point B. Can anyone help, error below:
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

C:\Users\chrisg>gpupdate
Updating Policy...

User Policy update has completed successfully.
Computer policy could not be updated successfully. The following errors were encountered:

The processing of Group Policy failed. Windows attempted to read the file \\smwh.local\sysvol\smwh.local\Policies\{62558637-02E4-43CF-B1A2-6906A956D85D}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller
 has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.

To diagnose the failure, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.

Can anyone help?

it's on a Server 2008R2, with Windows 7 machines.
alanterrillAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Will SzymkowskiSenior Solution ArchitectCommented:
I would start by checking your replicaiton of your active directory environment. Use the below commands...
- repadmin /replsum
- repadmin /showrepl
- repadmin /bridgeheads

- DCDiag /v

Also does this happen to all machines? When you go into the sysvol folder / policies / do you see this GUID key for this GPO? What GPO is it? Have you checked the logs on the client machine for more details.

Will.
0
alanterrillAuthor Commented:
server A is: server1
server B is: telfordserver1

at site A where server A is, all workstations work with server A's group policy
at site B where server B is,  all the workstations do not deploy server A's group policy however they are able to see it just not find the information

in sysvol on server B the GUID key for the GPO is not on server B, however it is on Server A

I did the above commands on the server B

errors did appear in DCDiag /v, what's the best way to show you this?

repadmin /replsum (results)

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

C:\Users\chrisg>repadmin /replsum
Replication Summary Start Time: 2015-03-05 16:28:23

Beginning data collection for replication summary, this may take awhile:
  .......


Source DSA          largest delta    fails/total %%   error
 SERVER1                   36m:25s    0 /   5    0
 SHREWSEXCHANGE            32m:18s    0 /  10    0
 TELFEXCHANGE              35m:29s    0 /   5    0
 TELFORDSERVER1            28m:33s    0 /  10    0


Destination DSA     largest delta    fails/total %%   error
 SERVER1                   32m:18s    0 /   5    0
 SHREWSEXCHANGE            36m:25s    0 /  10    0
 TELFEXCHANGE              28m:33s    0 /  10    0
 TELFORDSERVER1            35m:30s    0 /   5    0

repadmin /showrepl (results)

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

C:\Users\chrisg>repadmin /showrepl

Repadmin: running command /showrepl against full DC localhost
Telford\TELFORDSERVER1
DSA Options: IS_GC
Site Options: (none)
DSA object GUID: bfda1b9a-abbb-46f1-88f4-073e9c0b510c
DSA invocationID: 589af75e-4d33-4511-9e95-694de1249a8f

==== INBOUND NEIGHBORS ======================================

DC=smwh,DC=local
    Telford\TELFEXCHANGE via RPC
        DSA object GUID: 566caa47-2e21-4574-9e18-320ab1e24e71
        Last attempt @ 2015-03-05 16:32:32 was successful.

CN=Configuration,DC=smwh,DC=local
    Telford\TELFEXCHANGE via RPC
        DSA object GUID: 566caa47-2e21-4574-9e18-320ab1e24e71
        Last attempt @ 2015-03-05 16:22:25 was successful.

CN=Schema,CN=Configuration,DC=smwh,DC=local
    Telford\TELFEXCHANGE via RPC
        DSA object GUID: 566caa47-2e21-4574-9e18-320ab1e24e71
        Last attempt @ 2015-03-05 15:52:54 was successful.

DC=ForestDnsZones,DC=smwh,DC=local
    Telford\TELFEXCHANGE via RPC
        DSA object GUID: 566caa47-2e21-4574-9e18-320ab1e24e71
        Last attempt @ 2015-03-05 15:52:54 was successful.

DC=DomainDnsZones,DC=smwh,DC=local
    Telford\TELFEXCHANGE via RPC
        DSA object GUID: 566caa47-2e21-4574-9e18-320ab1e24e71
        Last attempt @ 2015-03-05 15:52:54 was successful.


C:\Users\chrisg>
repadmin /bridgeheads (results)

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

C:\Users\chrisg>repadmin /bridgeheads

Repadmin: running command /bridgeheads against full DC localhost
Gathering topology from site Telford (TELFORDSERVER1.smwh.local):

Bridgeheads for site Telford (TELFEXCHANGE.smwh.local):
             Source Site    Local Bridge  Trns         Fail. Time    #    Status

         ===============  ==============  ====  =================   ===  =======
=
 Default-First-Site-Name    TELFEXCHANGE    IP             (never)   0   The ope
ration completed successfully.
                 smwh DomainDnsZones ForestDnsZones Configuration

Bridgeheads for site Default-First-Site-Name (Server1.smwh.local):
             Source Site    Local Bridge  Trns         Fail. Time    #    Status

         ===============  ==============  ====  =================   ===  =======
=
                 Telford  SHREWSEXCHANGE    IP             (never)   0   The ope
ration completed successfully.
                 smwh DomainDnsZones ForestDnsZones Configuration
0
alanterrillAuthor Commented:
*here's the dxdiag, only the end part
dxdiag-test.txt
0
Acronis True Image 2019 just released!

Create a reliable backup. Make sure you always have dependable copies of your data so you can restore your entire system or individual files.

Will SzymkowskiSenior Solution ArchitectCommented:
in sysvol on server B the GUID key for the GPO is not on server B, however it is on Server A

Based on this comment your sysvol is not syncing properly. If you create a new GPO does it replicate to Server B?

You might have to do an authoritative restore of sysvol. Below is how to accomplish this.
http://support.microsoft.com/kb/2218556

Will.
0
alanterrillAuthor Commented:
Hi Will, If I create a new GPO on Server A, it appears on group policy on server B but doesn't replicate sysvol
0
alanterrillAuthor Commented:
Hi Will, Side note do I do the above restore of sysvol on Server A or Server B?
0
alanterrillAuthor Commented:
Hi will can you help??
0
Netman66Commented:
Follow the Non-Authoritative Restore section in this article.

http://support.microsoft.com/kb/290762

This is to be performed on the server that is NOT replicating those GPOs (the server where they are missing).

Once done - be patient.  This will take a little while to iron itself out.
0
alanterrillAuthor Commented:
Managed to resolve the issue myself. Turns out the issue started at the domain function level, as this was running at Server 2003, which is incorrect for us as  we have 2008r2 rolled out to all servers, also turns out it was using the old FRS replication instead of DFSR. So I followed guide below for FRS to DFSR migration. http://www.showmehowtodoit.com/step-by-step-frs-to-dfsr-migration-guide-for-windows-2008-and-2008-r2/

thanks for your suggestions everyone
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
alanterrillAuthor Commented:
Worked it out myself!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.