Oscar Powers
asked on
Missing Expected Value SYSVOL Sync fail
I found some errors running health checks on my domain controllers. I did not have any problem with users, computers, DNS or DHCP that I notice.
I create a test GPO in DC1 and immediately was in DC2.
I got these errors:
1- There are warning or error events within the last 24 hours after the SYSVOL has been shared. Failing SYSVOL replication problems may cause Group Policy problems.
2- [1] Problem: Missing Expected Value
Base Object: CN=CON-DC1,OU=Domain Controllers,DC=Contosocs,D C=local
Base Object Description: "DC Account Object"
Value Object Attribute Name: msDFSR-ComputerReferenceBL
Value Object Description: "SYSVOL FRS Member Object"
Recommended Action: See Knowledge Base Article: Q312862
[2] Problem: Missing Expected Value
Base Object: CN=CON-DC2,OU=Domain Controllers,DC=Contosocs,D C=local
Base Object Description: "DC Account Object"
Value Object Attribute Name: msDFSR-ComputerReferenceBL
Value Object Description: "SYSVOL FRS Member Object"
Recommended Action: See Knowledge Base Article: Q312862
3- LDAP Error 0x20 (32) - No Such Object. ......................... CON-DC1 failed test
4 DCOM was unable to communicate with the computer XX.XXX.XXX.111 using any of the configured protocols; requested by PID 390 (C:\Windows\system32\dcdia g.exe).
5- DCOM was unable to communicate with the computer XX.XXX.XXX.95 using any of the configured protocols; requested by PID 11e8 (C:\Windows\system32\dcdia g.exe).
These IPs related to the DCOM problem are the forwarders for the web filter.
I check the kb 312862 but not sure about it. I add all test report for the domain controllers.
https://support.microsoft.com/en-us/help/312862/recovering-missing-frs-objects-and-frs-attributes-in-active-directory
DCReport-11-22-2019.txt
I create a test GPO in DC1 and immediately was in DC2.
I got these errors:
1- There are warning or error events within the last 24 hours after the SYSVOL has been shared. Failing SYSVOL replication problems may cause Group Policy problems.
2- [1] Problem: Missing Expected Value
Base Object: CN=CON-DC1,OU=Domain Controllers,DC=Contosocs,D
Base Object Description: "DC Account Object"
Value Object Attribute Name: msDFSR-ComputerReferenceBL
Value Object Description: "SYSVOL FRS Member Object"
Recommended Action: See Knowledge Base Article: Q312862
[2] Problem: Missing Expected Value
Base Object: CN=CON-DC2,OU=Domain Controllers,DC=Contosocs,D
Base Object Description: "DC Account Object"
Value Object Attribute Name: msDFSR-ComputerReferenceBL
Value Object Description: "SYSVOL FRS Member Object"
Recommended Action: See Knowledge Base Article: Q312862
3- LDAP Error 0x20 (32) - No Such Object. ......................... CON-DC1 failed test
4 DCOM was unable to communicate with the computer XX.XXX.XXX.111 using any of the configured protocols; requested by PID 390 (C:\Windows\system32\dcdia
5- DCOM was unable to communicate with the computer XX.XXX.XXX.95 using any of the configured protocols; requested by PID 11e8 (C:\Windows\system32\dcdia
These IPs related to the DCOM problem are the forwarders for the web filter.
I check the kb 312862 but not sure about it. I add all test report for the domain controllers.
https://support.microsoft.com/en-us/help/312862/recovering-missing-frs-objects-and-frs-attributes-in-active-directory
DCReport-11-22-2019.txt
ASKER
They are in a Windows Server 2016 and the functional level is Windows server 2012.
I add the files DCDiag and repadmin /showrepl
Thanks for your time.
DCDiag.txt
Repadmin--showrepl.txt
I add the files DCDiag and repadmin /showrepl
Thanks for your time.
DCDiag.txt
Repadmin--showrepl.txt
Starting with Server 2016 FRS is no longer supported by MS. The default replication for SYSVOL is DFSR. Therefore the objects are missing
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
What's the tool name reporting the error?
DCDiag
ASKER
Thanks, I will start the migration to DFSR.
ASKER
SYSVOL migration from FRS to DFSR fixes the errors.
PS C:\Users\administrator> dfsrmig /GetMigrationState
All domain controllers have migrated successfully to the Global state ('Eliminated').
Migration has reached a consistent state on all domain controllers.
Succeeded.
Thanks for all your help.
PS C:\Users\administrator> dfsrmig /GetMigrationState
All domain controllers have migrated successfully to the Global state ('Eliminated').
Migration has reached a consistent state on all domain controllers.
Succeeded.
Thanks for all your help.
What OS on your DCs?
There are no attachments for your DCDiag, also run a repadmin /showrepl