Discussion:
FRS not replicating sysvol
(too old to reply)
Julian
2005-12-17 07:30:47 UTC
Permalink
I have a window 2000 domain controller that is not replicating the sysvol
share to other members, and therefore the sysvol share is not started on the
other servers.

I have tried the burflags D2 and D4 to no avail.

Help ! If the main server goes down no-one can login.
Jill Zoeller [MSFT]
2005-12-20 17:32:18 UTC
Permalink
Take a look at our troubleshooting resources at
http://www.microsoft.com/windowsserver2003/technologies/storage/dfs/tshootfrs.mspx.

D2/D4 are recommended only when you've identified the underlying problem and
fixed it. Many FRS problems are actually caused by other dependencies, such
as AD or DNS. Until these issues are repaired, D2/D4 won't work.
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Post by Julian
I have a window 2000 domain controller that is not replicating the sysvol
share to other members, and therefore the sysvol share is not started on the
other servers.
I have tried the burflags D2 and D4 to no avail.
Help ! If the main server goes down no-one can login.
Julian
2005-12-21 12:10:02 UTC
Permalink
Here is some output from the frsdiag: note the orphaned servers.

However, if I go to properties of the ntds settings, I get a list on
replicate from and replicate to servers.
------------------------------------------------------------
FRSDiag v1.7 on 21/12/2005 12:11:09
.\matrix on 2005-12-21 at 12.11.09
------------------------------------------------------------

Checking for errors/warnings in FRS Event Log .... passed
Checking for errors in Directory Service Event Log .... passed
Checking for minimum FRS version requirement ... passed
Checking for errors/warnings in ntfrsutl ds ...
Found Member Servers with no connection objects (orphaned) : "BAGGINS"
Found Member Servers with no connection objects (orphaned) : "BRAVO"
Found Member Servers with no connection objects (orphaned) : "MATRIX"
Jill Zoeller [MSFT]
2005-12-21 17:28:54 UTC
Permalink
Take a look at the following KBs; the first two will give you more
information about the FRS objects in AD and the references that should
exist.

http://support.microsoft.com/kb/312862/en-us
http://support.microsoft.com/kb/296183/en-us
http://support.microsoft.com/kb/316826/en-us
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Post by Julian
Here is some output from the frsdiag: note the orphaned servers.
However, if I go to properties of the ntds settings, I get a list on
replicate from and replicate to servers.
------------------------------------------------------------
FRSDiag v1.7 on 21/12/2005 12:11:09
.\matrix on 2005-12-21 at 12.11.09
------------------------------------------------------------
Checking for errors/warnings in FRS Event Log .... passed
Checking for errors in Directory Service Event Log .... passed
Checking for minimum FRS version requirement ... passed
Checking for errors/warnings in ntfrsutl ds ...
Found Member Servers with no connection objects (orphaned) : "BAGGINS"
Found Member Servers with no connection objects (orphaned) : "BRAVO"
Found Member Servers with no connection objects (orphaned) : "MATRIX"
Julian
2005-12-21 19:06:02 UTC
Permalink
I've looked at these kb's several times :)

I've now dcpromoed all machines except matrix (the pdc), so matrix is now
the only DC in the domain.

FRSDIAG gives no errors.

net stop ntfrs / net start ntfrs works , but SYSVOL and NETLOGON shares are
not present.

dcdiag /s:matrix

C:\Documents and Settings\jmls>dcdiag /s:matrix

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\MATRIX
Starting test: Connectivity
......................... MATRIX passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\MATRIX
Starting test: Replications
......................... MATRIX passed test Replications
Starting test: NCSecDesc
......................... MATRIX passed test NCSecDesc
Starting test: NetLogons
Unable to connect to the NETLOGON share! (\\MATRIX\netlogon)
[MATRIX] An net use or LsaPolicy operation failed with error 1203,
Win3
2 Error 1203.
......................... MATRIX failed test NetLogons
Starting test: Advertising
......................... MATRIX passed test Advertising
Starting test: KnowsOfRoleHolders
......................... MATRIX passed test KnowsOfRoleHolders
Starting test: RidManager
......................... MATRIX passed test RidManager
Starting test: MachineAccount
......................... MATRIX passed test MachineAccount
Starting test: Services
......................... MATRIX passed test Services
Starting test: ObjectsReplicated
......................... MATRIX passed test ObjectsReplicated
Starting test: frssysvol
......................... MATRIX passed test frssysvol
Starting test: frsevent
......................... MATRIX passed test frsevent
Starting test: kccevent
......................... MATRIX passed test kccevent
Starting test: systemlog
......................... MATRIX passed test systemlog
Starting test: VerifyReferences
......................... MATRIX passed test VerifyReferences

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : tessera
Starting test: CrossRefValidation
......................... tessera passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... tessera passed test CheckSDRefDom

Running enterprise tests on : somedomain.com
Starting test: Intersite
......................... somedomain.com passed test Intersite
Starting test: FsmoCheck
......................... somedomain.com passed test FsmoCheck


NTFRSUTL gives

NTFRS CONFIGURATION IN THE DS
SUBSTITUTE DCINFO FOR DC
FRS DomainControllerName: (null)
Computer Name : MATRIX
Computer DNS Name : matrix.somedomain.com

BINDING TO THE DS:
ldap_connect : matrix.somedomain.com
DsBind : matrix.somedomain.com

NAMING CONTEXTS:
SitesDn : CN=Sites,cn=configuration,DC=somedomain,DC=com
ServicesDn : CN=Services,cn=configuration,DC=somedomain,DC=com
DefaultNcDn: DC=somedomain,DC=com
ComputersDn: CN=Computers,DC=somedomain,DC=com
DomainCtlDn: OU=Domain Controllers,DC=somedomain,DC=com
Fqdn : CN=MATRIX,OU=Domain Controllers,DC=somedomain,DC=com
Searching : Fqdn

COMPUTER: MATRIX
DN : cn=matrix,ou=domain controllers,DC=somedomain,DC=com
Guid : 12792b38-9e80-46aa-ab1439f2ac0d8825
UAC : 0x00082000
Server BL :
CN=MATRIX,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Confi
guration,DC=somedomain,DC=com
Settings : cn=ntds
settings,cn=matrix,cn=servers,cn=default-first-site-name,
cn=sites,cn=configuration,DC=somedomain,DC=com
DNS Name : matrix.somedomain.com
WhenCreated : 11/30/2001 14:36:41 GMT Standard Time GMT Daylight Time [0]
WhenChanged : 12/5/2005 11:30:22 GMT Standard Time GMT Daylight Time [0]

SUBSCRIPTION: NTFRS SUBSCRIPTIONS
DN : cn=ntfrs subscriptions,cn=matrix,ou=domain
controllers,dc=somedomain,dc=com
Guid : ee678e07-30c1-4452-b546cd5f161fcd14
Working : c:\win2k\ntfrs
Actual Working: c:\win2k\ntfrs
WhenCreated : 9/30/2003 9:4:9 GMT Standard Time GMT Daylight Time [0]
WhenChanged : 9/30/2003 9:4:9 GMT Standard Time GMT Daylight Time [0]

SUBSCRIBER: DOMAIN SYSTEM VOLUME (SYSVOL SHARE)
DN : cn=domain system volume (sysvol share),cn=ntfrs
subscriptions,cn
=matrix,ou=domain controllers,DC=somedomain,DC=com
Guid : 673c1281-064d-48a6-985adc35bfa12076
Member Ref: CN=MATRIX,CN=Domain System Volume (SYSVOL
share),CN=File Re
plication Service,CN=System,DC=somedomain,DC=com
Root : c:\win2k\sysvol\domain
Stage : c:\win2k\sysvol\staging\domain
WhenCreated : 9/30/2003 9:4:9 GMT Standard Time GMT Daylight Time
[0]
WhenChanged : 9/30/2003 9:4:9 GMT Standard Time GMT Daylight Time
[0]
Subscriber Member Back Links:
cn=matrix,cn=domain system volume (sysvol share),cn=file replication
servi
ce,cn=system,DC=somedomain,DC=com

SETTINGS: FILE REPLICATION SERVICE
DN : cn=file replication service,cn=system,DC=somedomain,DC=com
Guid : 198656e5-f89e-44c0-a6b91acd8bf223e2
WhenCreated : 1/29/2001 21:10:31 GMT Standard Time GMT Daylight Time [0]
WhenChanged : 9/30/2003 7:26:4 GMT Standard Time GMT Daylight Time [0]

SET: DOMAIN SYSTEM VOLUME (SYSVOL SHARE)
DN : cn=domain system volume (sysvol share),cn=file replication
service,
cn=system,DC=somedomain,DC=com
Guid : c22df7d4-89be-4c58-a879210cb06c6690
Type : 4
Primary Member: CN=MATRIX,OU=Domain Controllers,DC=somedomain,DC=com
File Filter : (null)
Dir Filter : (null)
WhenCreated : 9/30/2003 9:2:33 GMT Standard Time GMT Daylight Time [0]
WhenChanged : 12/16/2005 18:15:6 GMT Standard Time GMT Daylight Time
[0]

MEMBER: MATRIX
DN : cn=matrix,cn=domain system volume (sysvol share),cn=file
replica
tion service,cn=system,DC=somedomain,DC=com
Guid : 19dd91c6-99d8-4514-b982667c81390b7c
Server Ref : CN=NTDS
Settings,CN=MATRIX,CN=Servers,CN=Default-First
-Site-Name,CN=Sites,CN=Configuration,DC=somedomain,DC=com
Computer Ref : cn=matrix,ou=domain controllers,DC=somedomain,DC=com

Cracked Domain : somedomain.com
Cracked Name : 00000002 SOMEDOMAIN\MATRIX$
Cracked Domain : somedomain.com
Cracked Name : fffffff4
S-1-5-21-567896775-1220169441-2118856591-1493

Computer's DNS : matrix.somedomain.com
WhenCreated : 9/30/2003 9:4:9 GMT Standard Time GMT Daylight Time
[0]
WhenChanged : 9/30/2003 9:4:9 GMT Standard Time GMT Daylight Time
[0]
Post by Jill Zoeller [MSFT]
Take a look at the following KBs; the first two will give you more
information about the FRS objects in AD and the references that should
exist.
http://support.microsoft.com/kb/312862/en-us
http://support.microsoft.com/kb/296183/en-us
http://support.microsoft.com/kb/316826/en-us
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Post by Julian
Here is some output from the frsdiag: note the orphaned servers.
However, if I go to properties of the ntds settings, I get a list on
replicate from and replicate to servers.
------------------------------------------------------------
FRSDiag v1.7 on 21/12/2005 12:11:09
.\matrix on 2005-12-21 at 12.11.09
------------------------------------------------------------
Checking for errors/warnings in FRS Event Log .... passed
Checking for errors in Directory Service Event Log .... passed
Checking for minimum FRS version requirement ... passed
Checking for errors/warnings in ntfrsutl ds ...
Found Member Servers with no connection objects (orphaned) : "BAGGINS"
Found Member Servers with no connection objects (orphaned) : "BRAVO"
Found Member Servers with no connection objects (orphaned) : "MATRIX"
Hii Sing Chung
2006-01-08 15:56:30 UTC
Permalink
I also have the same kind of problems. All the newly promoted DCs (so far
tested 2, one Windows 2003 with sp1 and another Windows 2000 with sp4) would
start sysvol replication during first restart after promotion, then about 10
minutes later, it stops, the staging folder is never emptied and no new
files being written into it. Frsdiag and Replmon show no problem with
connectivity or anything that prevents it from replicating.
Doing burflags D4/D2 will start off another round of the sysvol replication
from fresh, but about 10 minutes only, then 'idle' all the time. Why?

I believe if I demote and promote them, it will end up to the same state.
Post by Julian
I've looked at these kb's several times :)
I've now dcpromoed all machines except matrix (the pdc), so matrix is now
the only DC in the domain.
FRSDIAG gives no errors.
net stop ntfrs / net start ntfrs works , but SYSVOL and NETLOGON shares are
not present.
dcdiag /s:matrix
C:\Documents and Settings\jmls>dcdiag /s:matrix
Domain Controller Diagnosis
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\MATRIX
Starting test: Connectivity
......................... MATRIX passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\MATRIX
Starting test: Replications
......................... MATRIX passed test Replications
Starting test: NCSecDesc
......................... MATRIX passed test NCSecDesc
Starting test: NetLogons
Unable to connect to the NETLOGON share! (\\MATRIX\netlogon)
[MATRIX] An net use or LsaPolicy operation failed with error 1203,
Win3
2 Error 1203.
......................... MATRIX failed test NetLogons
Starting test: Advertising
......................... MATRIX passed test Advertising
Starting test: KnowsOfRoleHolders
......................... MATRIX passed test KnowsOfRoleHolders
Starting test: RidManager
......................... MATRIX passed test RidManager
Starting test: MachineAccount
......................... MATRIX passed test MachineAccount
Starting test: Services
......................... MATRIX passed test Services
Starting test: ObjectsReplicated
......................... MATRIX passed test ObjectsReplicated
Starting test: frssysvol
......................... MATRIX passed test frssysvol
Starting test: frsevent
......................... MATRIX passed test frsevent
Starting test: kccevent
......................... MATRIX passed test kccevent
Starting test: systemlog
......................... MATRIX passed test systemlog
Starting test: VerifyReferences
......................... MATRIX passed test VerifyReferences
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : tessera
Starting test: CrossRefValidation
......................... tessera passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... tessera passed test CheckSDRefDom
Running enterprise tests on : somedomain.com
Starting test: Intersite
......................... somedomain.com passed test Intersite
Starting test: FsmoCheck
......................... somedomain.com passed test FsmoCheck
NTFRSUTL gives
NTFRS CONFIGURATION IN THE DS
SUBSTITUTE DCINFO FOR DC
FRS DomainControllerName: (null)
Computer Name : MATRIX
Computer DNS Name : matrix.somedomain.com
ldap_connect : matrix.somedomain.com
DsBind : matrix.somedomain.com
SitesDn : CN=Sites,cn=configuration,DC=somedomain,DC=com
ServicesDn : CN=Services,cn=configuration,DC=somedomain,DC=com
DefaultNcDn: DC=somedomain,DC=com
ComputersDn: CN=Computers,DC=somedomain,DC=com
DomainCtlDn: OU=Domain Controllers,DC=somedomain,DC=com
Fqdn : CN=MATRIX,OU=Domain Controllers,DC=somedomain,DC=com
Searching : Fqdn
COMPUTER: MATRIX
DN : cn=matrix,ou=domain controllers,DC=somedomain,DC=com
Guid : 12792b38-9e80-46aa-ab1439f2ac0d8825
UAC : 0x00082000
CN=MATRIX,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Confi
guration,DC=somedomain,DC=com
Settings : cn=ntds
settings,cn=matrix,cn=servers,cn=default-first-site-name,
cn=sites,cn=configuration,DC=somedomain,DC=com
DNS Name : matrix.somedomain.com
WhenCreated : 11/30/2001 14:36:41 GMT Standard Time GMT Daylight Time [0]
WhenChanged : 12/5/2005 11:30:22 GMT Standard Time GMT Daylight Time [0]
SUBSCRIPTION: NTFRS SUBSCRIPTIONS
DN : cn=ntfrs subscriptions,cn=matrix,ou=domain
controllers,dc=somedomain,dc=com
Guid : ee678e07-30c1-4452-b546cd5f161fcd14
Working : c:\win2k\ntfrs
Actual Working: c:\win2k\ntfrs
WhenCreated : 9/30/2003 9:4:9 GMT Standard Time GMT Daylight Time [0]
WhenChanged : 9/30/2003 9:4:9 GMT Standard Time GMT Daylight Time [0]
SUBSCRIBER: DOMAIN SYSTEM VOLUME (SYSVOL SHARE)
DN : cn=domain system volume (sysvol share),cn=ntfrs
subscriptions,cn
=matrix,ou=domain controllers,DC=somedomain,DC=com
Guid : 673c1281-064d-48a6-985adc35bfa12076
Member Ref: CN=MATRIX,CN=Domain System Volume (SYSVOL
share),CN=File Re
plication Service,CN=System,DC=somedomain,DC=com
Root : c:\win2k\sysvol\domain
Stage : c:\win2k\sysvol\staging\domain
WhenCreated : 9/30/2003 9:4:9 GMT Standard Time GMT Daylight Time [0]
WhenChanged : 9/30/2003 9:4:9 GMT Standard Time GMT Daylight Time [0]
cn=matrix,cn=domain system volume (sysvol share),cn=file replication
servi
ce,cn=system,DC=somedomain,DC=com
SETTINGS: FILE REPLICATION SERVICE
DN : cn=file replication service,cn=system,DC=somedomain,DC=com
Guid : 198656e5-f89e-44c0-a6b91acd8bf223e2
WhenCreated : 1/29/2001 21:10:31 GMT Standard Time GMT Daylight Time [0]
WhenChanged : 9/30/2003 7:26:4 GMT Standard Time GMT Daylight Time [0]
SET: DOMAIN SYSTEM VOLUME (SYSVOL SHARE)
DN : cn=domain system volume (sysvol share),cn=file replication
service,
cn=system,DC=somedomain,DC=com
Guid : c22df7d4-89be-4c58-a879210cb06c6690
Type : 4
Primary Member: CN=MATRIX,OU=Domain Controllers,DC=somedomain,DC=com
File Filter : (null)
Dir Filter : (null)
WhenCreated : 9/30/2003 9:2:33 GMT Standard Time GMT Daylight Time [0]
WhenChanged : 12/16/2005 18:15:6 GMT Standard Time GMT Daylight Time
[0]
MEMBER: MATRIX
DN : cn=matrix,cn=domain system volume (sysvol share),cn=file
replica
tion service,cn=system,DC=somedomain,DC=com
Guid : 19dd91c6-99d8-4514-b982667c81390b7c
Server Ref : CN=NTDS
Settings,CN=MATRIX,CN=Servers,CN=Default-First
-Site-Name,CN=Sites,CN=Configuration,DC=somedomain,DC=com
Computer Ref : cn=matrix,ou=domain
controllers,DC=somedomain,DC=com
Cracked Domain : somedomain.com
Cracked Name : 00000002 SOMEDOMAIN\MATRIX$
Cracked Domain : somedomain.com
Cracked Name : fffffff4
S-1-5-21-567896775-1220169441-2118856591-1493
Computer's DNS : matrix.somedomain.com
WhenCreated : 9/30/2003 9:4:9 GMT Standard Time GMT Daylight Time [0]
WhenChanged : 9/30/2003 9:4:9 GMT Standard Time GMT Daylight Time [0]
Post by Jill Zoeller [MSFT]
Take a look at the following KBs; the first two will give you more
information about the FRS objects in AD and the references that should
exist.
http://support.microsoft.com/kb/312862/en-us
http://support.microsoft.com/kb/296183/en-us
http://support.microsoft.com/kb/316826/en-us
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Post by Julian
Here is some output from the frsdiag: note the orphaned servers.
However, if I go to properties of the ntds settings, I get a list on
replicate from and replicate to servers.
------------------------------------------------------------
FRSDiag v1.7 on 21/12/2005 12:11:09
.\matrix on 2005-12-21 at 12.11.09
------------------------------------------------------------
Checking for errors/warnings in FRS Event Log .... passed
Checking for errors in Directory Service Event Log .... passed
Checking for minimum FRS version requirement ... passed
Checking for errors/warnings in ntfrsutl ds ...
Found Member Servers with no connection objects (orphaned) : "BAGGINS"
Found Member Servers with no connection objects (orphaned) : "BRAVO"
Found Member Servers with no connection objects (orphaned) : "MATRIX"
Continue reading on narkive:
Loading...