Yet another Sysvol replication issue

I have an ongoing issue with sysvol replication.

I have 2x 2k8r2 DCs, single site, both in same subnet.  Group Policy folders weren't being replicated correctly to DC2.  Active Directory would replicate OK, just not the sysvol folders.  The shares and Netlogon were ok, just the policy folders not replicating.

I tried the many suggestions scattered over google, like non-authoritative restore etc, but nothing fixed the issue.  In frustration I removed DC2 from the domain, using the sites and services tool on DC1, and rebuilt it from install media.  I looked for all mentions of DC2 in DNS and removed them too.  I used the same name and IP address when I rebuilt it.

After dcpromoing it, and getting it back up and running I still had the same issue; AD replicates ok, sysvol does not.  DFSR diagnostic reports do not replicate correctly.

More pissed off,  I demoted DC2 using dcpromo, removed from domain completely, cleaned up as above, deleted sysvol, and used sysprep /generalize to start again.

This time used ntdsutil ifm on DC1 to create a backup that I could restore from.

I got DC2 setup, this time as DC2a, with a new IP address that hasn't been used before.  Ran all the validation checks pre-dc promo.

I copied the backup as per technet instructions to DC2a, ran DCPromo in advanced mode and pointed it to the ifm backup.  all completed.  Check policies folder and lo an behold, there are only 12 folders there!  There are 40 on DC1 and the ifm backup looks to include all of the folders.  

An interesting thing I noticed though, on DC1 the __DFSR_DIAGNOSTICS_TEST_FOLDER__ has 5 files in it.  on DC2a there is only 1!  and it is the oldest file.


is my problem somehow on DC1?


Any help much appreciated!!!
LVL 1
ITPOLAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Will SzymkowskiSenior Solution ArchitectCommented:
There are most likely issues with your DC1 server. What I would do is the following...
- Remove DC2 AGAIN
- Perform a Sysvol "Authoriatative" restore of DC1
- Ensure that replicaiton is working repadmin /replsum /showrepl DCdiag /v etc
- Promote DC2 again and test again

It also appears that there may be some poliies that might be corrupt or something of that nature. You may want to delete the ones that are not replicating if after the Authoritative restore of DC1 does not work.

Create new GPO's and see if they get replicated properly.

Post back when done.

Will.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
AmitIT ArchitectCommented:
Can you also post result for below command

repadmin /replsum
0
ITPOLAuthor Commented:
Remove DC2 AGAIN
- Perform a Sysvol "Authoriatative" restore of DC1
- Ensure that replicaiton is working repadmin /replsum /showrepl DCdiag /v etc
- Promote DC2 again and test again

if I do an authoritative restore of DC1, will I loose anything?

With there being only two DCs; I remove DC2 how can I ensure replication is working if there is only one?
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

ITPOLAuthor Commented:
Can you also post result for below command

repadmin /replsum

DC2;

C:\Windows\system32>repadmin /replsum
Replication Summary Start Time: 2015-07-08 09:45:54

Beginning data collection for replication summary, this may take awhile:
  .....


Source DSA          largest delta    fails/total %%   error
 POLDC1                    51m:17s    0 /   5    0
 POLDC2A                      :47s    0 /   5    0


Destination DSA     largest delta    fails/total %%   error
 POLDC1                       :48s    0 /   5    0
 POLDC2A                   51m:18s    0 /   5    0


DC1

Replication Summary Start Time: 2015-07-08 09:47:13

Beginning data collection for replication summary, this may take awhile:
  .....


Source DSA          largest delta    fails/total %%   error
 POLDC1                    52m:36s    0 /   5    0
 POLDC2A                   02m:06s    0 /   5    0


Destination DSA     largest delta    fails/total %%   error
 POLDC1                    02m:06s    0 /   5    0
 POLDC2A                   52m:36s    0 /   5    0
0
AmitIT ArchitectCommented:
From repadmin result, I don't see any issue. It is replicate fine. Can you run net share command on both server and share the result. If it ask to start any server, say yes. That means server service is stopped.
0
ITPOLAuthor Commented:
All appears to be sorted now.  Unforunate that it appeared the problem was with DC2, but was with DC1

thanks
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.