Avatar of Oscar Powers
Oscar Powers
Flag for United States of America asked on

Missing Expected Value SYSVOL Sync fail

I found some errors running health checks on my domain controllers.  I did not have any problem with users, computers, DNS or DHCP that I notice.
I create a test GPO in DC1 and immediately was in DC2.
I got these errors:
1-      There are warning or error events within the last 24 hours after the SYSVOL has been shared.  Failing SYSVOL replication problems may cause Group Policy problems.
2-     [1] Problem: Missing Expected Value
Base Object: CN=CON-DC1,OU=Domain Controllers,DC=Contosocs,DC=local
Base Object Description: "DC Account Object"
Value Object Attribute Name: msDFSR-ComputerReferenceBL
 Value Object Description: "SYSVOL FRS Member Object"
Recommended Action: See Knowledge Base Article: Q312862
 [2] Problem: Missing Expected Value
 Base Object: CN=CON-DC2,OU=Domain Controllers,DC=Contosocs,DC=local
Base Object Description: "DC Account Object"
Value Object Attribute Name: msDFSR-ComputerReferenceBL
Value Object Description: "SYSVOL FRS Member Object"
Recommended Action: See Knowledge Base Article: Q312862
3-      LDAP Error 0x20 (32) - No Such Object. ......................... CON-DC1 failed test
4      DCOM was unable to communicate with the computer XX.XXX.XXX.111 using any of the configured protocols; requested by PID      390 (C:\Windows\system32\dcdiag.exe).
5-     DCOM was unable to communicate with the computer XX.XXX.XXX.95 using any of the configured protocols; requested by PID     11e8 (C:\Windows\system32\dcdiag.exe).
These IPs related to the DCOM problem are the forwarders for the web filter.

I check the kb 312862 but not sure about it. I add all test report for the domain controllers.
https://support.microsoft.com/en-us/help/312862/recovering-missing-frs-objects-and-frs-attributes-in-active-directory
DCReport-11-22-2019.txt
Windows Server 2016DHCPDNSActive Directory

Avatar of undefined
Last Comment
Oscar Powers

8/22/2022 - Mon
Alex

What is the domain functional level?

What OS on your DCs?

There are no attachments for your DCDiag, also run a repadmin /showrepl
Oscar Powers

ASKER
They are in a Windows Server 2016 and the functional level is Windows server 2012.
I add the files DCDiag and  repadmin /showrepl
Thanks for your time.
DCDiag.txt
Repadmin--showrepl.txt
Michael Pfister

Starting with Server 2016 FRS is no longer supported by MS. The default replication for SYSVOL is DFSR. Therefore the objects are missing
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes
ASKER CERTIFIED SOLUTION
Alex

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
Michael Pfister

What's the tool name reporting the error?
Alex

DCDiag
Oscar Powers

ASKER
Thanks, I will start the migration to DFSR.
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
Oscar Powers

ASKER
SYSVOL migration from FRS to DFSR fixes the errors.

PS C:\Users\administrator> dfsrmig /GetMigrationState
All domain controllers have migrated successfully to the Global state ('Eliminated').
Migration has reached a consistent state on all domain controllers.
Succeeded.

Thanks for all your help.