Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Active directory upgrade to DFSR

Posted on 2016-10-28
4
Medium Priority
?
161 Views
Last Modified: 2016-11-03
There looks to be something wrong here.  I have a domain across 3 sites with 5 DCs. 3 of the DCs are 2008 R2 or Ent., the other 2 DCs are 2012 R2.  There do  not appear to be any problems with AD replication or DNS at this time. However, when I start the tool to migrate from FRS to DFS I see in the status that only 4 of the DCs are listed in the state results.  NLtest shows me all 5 DCs.  Here are the pastes.

C:\Windows\system32>nltest /dclist:grid.loc
Get list of DCs in domain 'grid.loc' from '\\CHEF.grid.loc'.
        CHEF.grid.loc [PDC]  [DS] Site: PPG-EDMS-Office
       Wendy.grid.loc        [DS] Site: SMSD
        Bebe.grid.loc        [DS] Site: SMSD
       Kenny.grid.loc        [DS] Site: SMTX
    MrHankey.grid.loc        [DS] Site: PPG-EDMS-Office

The command completed successfully

******************************************************************

PS C:\Users\administrator.GRID> dfsrmig /getmigrationstate

Unable to create DFSR Migration log file. Error 1307
The following Domain Controllers are not in sync with Global state ('Prepared'):

Domain Controller (Local Migration State) - DC Type
===================================================

WENDY ('Start') - Writable DC
BEBE ('Start') - Writable DC
KENNY ('Start') - Writable DC
MRHANKEY ('Waiting For Initial Sync') - Writable DC

Migration has not yet reached a consistent state on all Domain Controllers.
State information might be stale due to AD latency.

**********************************************************************
Anyone know why this is happening or what to fix?
0
Comment
Question by:billherde
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 41

Accepted Solution

by:
footech earned 2000 total points
ID: 41864770
I don't think it lists DCs that have reached the target state.

Also you should run from an elevated prompt to avoid "Unable to create DFSR Migration log file. Error 1307".
0
 
LVL 3

Author Comment

by:billherde
ID: 41864796
The command was being run from CHEF, so that could be viable.  Anyone able to confirm?
0
 
LVL 3

Author Comment

by:billherde
ID: 41867196
Well the migration continues through the steps and DCdiag /c /e tells me everything is healthy.  So I suppose it is good enough!  If it ain't broke.....
0
 
LVL 41

Expert Comment

by:footech
ID: 41867278
I don't really see the point in using Chef for this, since it's an automation tool meant for repeated actions.  You wouldn't have to do this more than once in an environment.

All you really want to do is re-run dfsrmig /getmigrationstate until all the DCs show they're in the same state.  You don't even have to run it, it's just a safety check.
0

Featured Post

Q2 2017 - Latest Malware & Internet Attacks

WatchGuard’s Threat Lab is a group of dedicated threat researchers committed to helping you stay ahead of the bad guys by providing in-depth analysis of the top security threats to your network.  Check out our latest Quarterly Internet Security Report!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
Microsoft Office 365 is a subscriptions based service which includes services like Exchange Online and Skype for business Online. These services integrate with Microsoft's online version of Active Directory called Azure Active Directory.
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
Suggested Courses

618 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question