Active Directory - JRNL_WRAP_ERROR on one domain controller

Technical Information: Windows 2003 forest and all domains are operating at a 2003 functionally level.

 Discovered that in one of my domains, I am receiving an error / event ID: 13568. Which says "The file replication service has detected the replica set "DOMAIN SYSTEM VOLUME (SYSVOL SHARE) is in JRNL_WRAP_ERROR."

 The domain has two domain controllers (Lets just say DC1 & DC2). A few weeks ago, is when this error in my event viewer first showed up on DC2. On the same day, DC1 is reporting that it can no longer replicate with DC2. DC2 has all roles.

 My question is: If I set the BurFlags on DC1 to D2, will it restore correctly from DC2?

I found this after I was having issues with my GPO Polices Created new ones and they were not working


I checked sysvol \sysvol\mydomai\policies on DC2 I have 12 items
I checked sysvol\sysvol\mydomain\policies on DC1 I have only 7 items the five new ones plus updated ones not in this folder

That's what lead me to the event 13568

On DC1 I am getting event
Event Type:      Warning
Event Source:      NtFrs
Event Category:      None
Event ID:      13508
Date:            3/14/2015
Time:            7:58:17 PM
User:            N/A
Computer:      TGCS011
Description:
The File Replication Service is having trouble enabling replication from TGCS012 to TGCS011 for c:\windows\sysvol\domain using the DNS name tgcs012.our.network.tgcsnet.com. FRS will keep retrying.
 Following are some of the reasons you would see this warning.
 
 [1] FRS can not correctly resolve the DNS name tgcs012.our.network.tgcsnet.com from this computer.
 [2] FRS is not running on tgcs012.our.network.tgcsnet.com.
 [3] The topology information in the Active Directory for this replica has not yet replicated to all the Domain Controllers.
 
 This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

On DC2  In reg I added "Enable Journal Wrap Automatic Restore" dword value 0

What burflags should I make DC2  and what Burflags should I set on DC1

Should I copy the sysvol to a temp folder on both DC's before setting the Burflags

Any one have a good procedure for two DCs like I have here?

Thanks in advance

Tom
LVL 23
Thomas GrassiSystems AdministratorAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

arnoldCommented:
In this case, you have to await the replication of the AD.  There is nothing to be done on your side, check if more omenpous messages exist on the other system that might prevent replication.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Thomas GrassiSystems AdministratorAuthor Commented:
Anrold


your the man from your post on my other question

Changed it to a one 1 ther restart FRS on both DC's now getting normal event messages

The sysvol on DC1 still only has 7 files how long before they replicate?

Can I force a replication process?

command line?

Thanks
0
Thomas GrassiSystems AdministratorAuthor Commented:
Arnold

Update

After replication was successful now both sysvol's on the DC's match in numbr of files but they are not updating

Getting this error now

 Event Type:      Error
Event Source:      Userenv
Event Category:      None
Event ID:      1058
Date:            3/14/2015
Time:            11:17:22 PM
User:            NT AUTHORITY\SYSTEM
Computer:      TGCS012
Description:
Windows cannot access the file gpt.ini for GPO cn={1787A482-E490-45F4-985D-1174CF63D90D},cn=policies,cn=system,DC=our,DC=network,DC=tgcsnet,DC=com. The file must be present at the location <\\our.network.tgcsnet.com\SysVol\our.network.tgcsnet.com\Policies\{1787A482-E490-45F4-985D-1174CF63D90D}\gpt.ini>. (The system cannot find the path specified. ). Group Policy processing aborted.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type:      Error
Event Source:      Userenv
Event Category:      None
Event ID:      1030
Date:            3/14/2015
Time:            11:17:22 PM
User:            NT AUTHORITY\SYSTEM
Computer:      TGCS012
Description:
Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Any thoughts

Thanks
0
Thomas GrassiSystems AdministratorAuthor Commented:
Arnold

Update

Ran this

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator.OUR>cd \program files

C:\Program Files>
C:\Program Files>cd gpmc

C:\Program Files\GPMC>cd scripts

C:\Program Files\GPMC\Scripts>cscript grantpermissiononallgpos.wsf "enterprise d
omain Controllers" /permission:read /domain:our.network.tgcsnet.com
Microsoft (R) Windows Script Host Version 5.6
Copyright (C) Microsoft Corporation 1996-2001. All rights reserved.


Warning! By executing this script, all GPOs in the target domain will be
updated with the desired security setting.

Both the Active Directory and Sysvol portions of the GPO will be updated.
This will result in the Sysvol contents of every GPO being copied to all
replica domain controllers, and may cause excessive replication traffic
in your domain.

If you have slow network links or restricted bandwidth between your domain
controllers, you should check the amount of data on the Sysvol that would
be replicated before performing this task.

Do you want to proceed? [Y/N]
y
Error updating GPO 'DC WSUS' to 'read' for enterprise domain Controllers
80070002 -
Updated GPO 'Logon Script' to 'read' for enterprise domain Controllers
Updated GPO 'Default Domain Policy' to 'read' for enterprise domain Controllers
Updated GPO 'LogonAsAService' to 'read' for enterprise domain Controllers
Updated GPO 'Default Domain Controllers Policy' to 'read' for enterprise domain
Controllers
Updated GPO 'WSUS' to 'read' for enterprise domain Controllers
Updated GPO 'DNS Suffix' to 'read' for enterprise domain Controllers
Error updating GPO 'Member Servers WSUS' to 'read' for enterprise domain Control
lers
80070002 -
Error updating GPO 'Windows 8 WSUS' to 'read' for enterprise domain Controllers
80070002 -
Error updating GPO 'Windows 7 WSUS' to 'read' for enterprise domain Controllers
80070002 -
Error updating GPO 'Windows Vista WSUS' to 'read' for enterprise domain Controll
ers
80070002 -

C:\Program Files\GPMC\Scripts>

Now the original GPOS are ok but when this error started I added a few more and they are the ones in error.

Should I delete them and add then back?

Thoughts
0
Thomas GrassiSystems AdministratorAuthor Commented:
Arnold

I just deleted all those GPO that had errors.

Added them back an now they are working

Thanks for all your help
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.