Missing Expected Value SYSVOL Sync fail

Oscar Powers
Oscar Powers used Ask the Experts™
on
I found some errors running health checks on my domain controllers.  I did not have any problem with users, computers, DNS or DHCP that I notice.
I create a test GPO in DC1 and immediately was in DC2.
I got these errors:
1-      There are warning or error events within the last 24 hours after the SYSVOL has been shared.  Failing SYSVOL replication problems may cause Group Policy problems.
2-     [1] Problem: Missing Expected Value
Base Object: CN=CON-DC1,OU=Domain Controllers,DC=Contosocs,DC=local
Base Object Description: "DC Account Object"
Value Object Attribute Name: msDFSR-ComputerReferenceBL
 Value Object Description: "SYSVOL FRS Member Object"
Recommended Action: See Knowledge Base Article: Q312862
 [2] Problem: Missing Expected Value
 Base Object: CN=CON-DC2,OU=Domain Controllers,DC=Contosocs,DC=local
Base Object Description: "DC Account Object"
Value Object Attribute Name: msDFSR-ComputerReferenceBL
Value Object Description: "SYSVOL FRS Member Object"
Recommended Action: See Knowledge Base Article: Q312862
3-      LDAP Error 0x20 (32) - No Such Object. ......................... CON-DC1 failed test
4      DCOM was unable to communicate with the computer XX.XXX.XXX.111 using any of the configured protocols; requested by PID      390 (C:\Windows\system32\dcdiag.exe).
5-     DCOM was unable to communicate with the computer XX.XXX.XXX.95 using any of the configured protocols; requested by PID     11e8 (C:\Windows\system32\dcdiag.exe).
These IPs related to the DCOM problem are the forwarders for the web filter.

I check the kb 312862 but not sure about it. I add all test report for the domain controllers.
https://support.microsoft.com/en-us/help/312862/recovering-missing-frs-objects-and-frs-attributes-in-active-directory
DCReport-11-22-2019.txt
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
AlexSenior Infrastructure Analyst

Commented:
What is the domain functional level?

What OS on your DCs?

There are no attachments for your DCDiag, also run a repadmin /showrepl

Author

Commented:
They are in a Windows Server 2016 and the functional level is Windows server 2012.
I add the files DCDiag and  repadmin /showrepl
Thanks for your time.
DCDiag.txt
Repadmin--showrepl.txt
Starting with Server 2016 FRS is no longer supported by MS. The default replication for SYSVOL is DFSR. Therefore the objects are missing
Success in ‘20 With a Profitable Pricing Strategy

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Senior Infrastructure Analyst
Commented:
Starting test: FrsEvent
         There are warning or error events within the last 24 hours after the SYSVOL has been shared.  Failing SYSVOL
         replication problems may cause Group Policy problems.


100% the issue, migrate to DFSR
What's the tool name reporting the error?
AlexSenior Infrastructure Analyst

Commented:
DCDiag

Author

Commented:
Thanks, I will start the migration to DFSR.

Author

Commented:
SYSVOL migration from FRS to DFSR fixes the errors.

PS C:\Users\administrator> dfsrmig /GetMigrationState
All domain controllers have migrated successfully to the Global state ('Eliminated').
Migration has reached a consistent state on all domain controllers.
Succeeded.

Thanks for all your help.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial