ITPOL
asked on
Yet another Sysvol replication issue
I have an ongoing issue with sysvol replication.
I have 2x 2k8r2 DCs, single site, both in same subnet. Group Policy folders weren't being replicated correctly to DC2. Active Directory would replicate OK, just not the sysvol folders. The shares and Netlogon were ok, just the policy folders not replicating.
I tried the many suggestions scattered over google, like non-authoritative restore etc, but nothing fixed the issue. In frustration I removed DC2 from the domain, using the sites and services tool on DC1, and rebuilt it from install media. I looked for all mentions of DC2 in DNS and removed them too. I used the same name and IP address when I rebuilt it.
After dcpromoing it, and getting it back up and running I still had the same issue; AD replicates ok, sysvol does not. DFSR diagnostic reports do not replicate correctly.
More pissed off, I demoted DC2 using dcpromo, removed from domain completely, cleaned up as above, deleted sysvol, and used sysprep /generalize to start again.
This time used ntdsutil ifm on DC1 to create a backup that I could restore from.
I got DC2 setup, this time as DC2a, with a new IP address that hasn't been used before. Ran all the validation checks pre-dc promo.
I copied the backup as per technet instructions to DC2a, ran DCPromo in advanced mode and pointed it to the ifm backup. all completed. Check policies folder and lo an behold, there are only 12 folders there! There are 40 on DC1 and the ifm backup looks to include all of the folders.
An interesting thing I noticed though, on DC1 the __DFSR_DIAGNOSTICS_TEST_FO LDER__ has 5 files in it. on DC2a there is only 1! and it is the oldest file.
is my problem somehow on DC1?
Any help much appreciated!!!
I have 2x 2k8r2 DCs, single site, both in same subnet. Group Policy folders weren't being replicated correctly to DC2. Active Directory would replicate OK, just not the sysvol folders. The shares and Netlogon were ok, just the policy folders not replicating.
I tried the many suggestions scattered over google, like non-authoritative restore etc, but nothing fixed the issue. In frustration I removed DC2 from the domain, using the sites and services tool on DC1, and rebuilt it from install media. I looked for all mentions of DC2 in DNS and removed them too. I used the same name and IP address when I rebuilt it.
After dcpromoing it, and getting it back up and running I still had the same issue; AD replicates ok, sysvol does not. DFSR diagnostic reports do not replicate correctly.
More pissed off, I demoted DC2 using dcpromo, removed from domain completely, cleaned up as above, deleted sysvol, and used sysprep /generalize to start again.
This time used ntdsutil ifm on DC1 to create a backup that I could restore from.
I got DC2 setup, this time as DC2a, with a new IP address that hasn't been used before. Ran all the validation checks pre-dc promo.
I copied the backup as per technet instructions to DC2a, ran DCPromo in advanced mode and pointed it to the ifm backup. all completed. Check policies folder and lo an behold, there are only 12 folders there! There are 40 on DC1 and the ifm backup looks to include all of the folders.
An interesting thing I noticed though, on DC1 the __DFSR_DIAGNOSTICS_TEST_FO
is my problem somehow on DC1?
Any help much appreciated!!!
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Remove DC2 AGAIN
- Perform a Sysvol "Authoriatative" restore of DC1
- Ensure that replicaiton is working repadmin /replsum /showrepl DCdiag /v etc
- Promote DC2 again and test again
if I do an authoritative restore of DC1, will I loose anything?
With there being only two DCs; I remove DC2 how can I ensure replication is working if there is only one?
ASKER
Can you also post result for below command
repadmin /replsum
DC2;
C:\Windows\system32>repadm
Replication Summary Start Time: 2015-07-08 09:45:54
Beginning data collection for replication summary, this may take awhile:
.....
Source DSA largest delta fails/total %% error
POLDC1 51m:17s 0 / 5 0
POLDC2A :47s 0 / 5 0
Destination DSA largest delta fails/total %% error
POLDC1 :48s 0 / 5 0
POLDC2A 51m:18s 0 / 5 0
DC1
Replication Summary Start Time: 2015-07-08 09:47:13
Beginning data collection for replication summary, this may take awhile:
.....
Source DSA largest delta fails/total %% error
POLDC1 52m:36s 0 / 5 0
POLDC2A 02m:06s 0 / 5 0
Destination DSA largest delta fails/total %% error
POLDC1 02m:06s 0 / 5 0
POLDC2A 52m:36s 0 / 5 0
From repadmin result, I don't see any issue. It is replicate fine. Can you run net share command on both server and share the result. If it ask to start any server, say yes. That means server service is stopped.
ASKER
All appears to be sorted now. Unforunate that it appeared the problem was with DC2, but was with DC1
thanks
thanks
repadmin /replsum