+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 29
Windows Server 2008 R2 Thread, Sysvol not propagating to other server and pcs looking to old server for scripts. in Technical; Hi, I recently added a new 2008r2 server to our 2003 domain and moved all rolls to the new server ...
  1. #1

    Join Date
    Apr 2010
    Posts
    2,054
    Thank Post
    83
    Thanked 188 Times in 155 Posts
    Rep Power
    84

    Sysvol not propagating to other server and pcs looking to old server for scripts.

    Hi,

    I recently added a new 2008r2 server to our 2003 domain and moved all rolls to the new server as the old one 2003 server will be dumped soon.

    I ran dcpromo on the new server and all went ok. it has dns active directory and sysvol all populated. I then migrated dhcp and made the setings point to the new server so all computers logging on should and do point to the new server.

    Odd thing is, if I make a change to the kix script in netlogon on the new server this does not get copied to the old server. The other odd thing is that all computers still look to the old server for the kix script in sysvol.

    Any pointers as to why this might be happening.
    Last edited by edutech4schools; 26th May 2012 at 01:01 PM.

  2. #2

    Join Date
    Apr 2010
    Posts
    2,054
    Thank Post
    83
    Thanked 188 Times in 155 Posts
    Rep Power
    84
    More info.
    when I run netdom query fsmo on new server all roles are listed as running on the new server but when I look in AD\domain controllers the old server is listed as DC and the new as GC.

  3. #3

    Join Date
    Apr 2010
    Posts
    2,054
    Thank Post
    83
    Thanked 188 Times in 155 Posts
    Rep Power
    84
    More info:
    Well the propagation issues might be down to DNS setting in network adapters on the old server was still pointing to itself rather than the new server. Will need to wait to see if that helps.

  4. #4

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,053
    Thank Post
    888
    Thanked 1,728 Times in 1,491 Posts
    Blog Entries
    12
    Rep Power
    453
    How long did you leave it to replicate? Have you had a look in the event logs?

  5. #5

    Join Date
    Apr 2010
    Posts
    2,054
    Thank Post
    83
    Thanked 188 Times in 155 Posts
    Rep Power
    84
    How long did you leave it to replicate?
    its been about 20 mins since I pointed the old server dns at the new server.

    Have you had a look in the event logs?
    Had lots yesterday after I rebooted both servers but nothing since that jumps out at me as being an issue.

    Just dumped a new text file in the netlogon folder and it replicated almost instantly. but if I make a change in the kix script it does not get replicated.

    EDIT - Kix is replicating. I deleted the old file and created a new one. YAY.

  6. #6

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,053
    Thank Post
    888
    Thanked 1,728 Times in 1,491 Posts
    Blog Entries
    12
    Rep Power
    453
    I have known replication to take ages to decide to work. I would just leave it and see what happens. Are your other domain controllers looking healthy?

  7. #7
    ricki's Avatar
    Join Date
    Jul 2005
    Location
    uk
    Posts
    1,475
    Thank Post
    20
    Thanked 164 Times in 157 Posts
    Rep Power
    52
    HI

    Have you tried a repadmin /showrepl on both domain controllers. You need to be logged on as admin

    Is the time on both servers the same otherwise kerberos will fail.

    Have you tried forcing a replication and do you get an error in the event logs or on the screen. After holidays wil have to change a registry setting on devieny partners and allow them to replicate and them put them back as they have been off and have not replicated for a few days.
    Event ID 2042: It has been too long since this machine replicated: Active Directory

    Check the nic card settings and the ip addresses / subnet etc

    Check dns is allowed to replicate to all servers.

    I know this will be a silly question but you did to a adprep on the old domain controller before adding the windows 2008 server to prepare the schema Windows Server 2008 ADPREP

    Richard

  8. #8
    ricki's Avatar
    Join Date
    Jul 2005
    Location
    uk
    Posts
    1,475
    Thank Post
    20
    Thanked 164 Times in 157 Posts
    Rep Power
    52
    Sorry

    I forget have you done a dcdiag and a netdiag on the windows 2003 server and a dc diag on the windows 2008 server.

    Richard

  9. #9
    themightymrp's Avatar
    Join Date
    Dec 2009
    Location
    Leeds, West Yorkshire
    Posts
    1,219
    Thank Post
    216
    Thanked 226 Times in 195 Posts
    Rep Power
    73
    Do you use any subfolders of the Netlogon share to hold software distributions or anything similar? I have a subfolder in mine which contains a few programs that I deploy via GPO. Recently, when I added a new DC, our Anti-Virus (sophos) accidentally identified one of the apps as suspicious and wouldn't let the replication take place. It therefore kept killing the Replication Service. I didn't realise until I went through the anti-virus logs! Once the app was authorized the replication took less than an hour to complete

  10. #10

    Join Date
    Apr 2010
    Posts
    2,054
    Thank Post
    83
    Thanked 188 Times in 155 Posts
    Rep Power
    84
    Thanks for all the info. It looks like all is ok, just seemed to take much longer to start replicating than normal.

  11. #11

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,804
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224
    Quote Originally Posted by themightymrp View Post
    Do you use any subfolders of the Netlogon share to hold software distributions or anything similar? I have a subfolder in mine which contains a few programs that I deploy via GPO. Recently, when I added a new DC, our Anti-Virus (sophos) accidentally identified one of the apps as suspicious and wouldn't let the replication take place. It therefore kept killing the Replication Service. I didn't realise until I went through the anti-virus logs! Once the app was authorized the replication took less than an hour to complete
    I wouldn't recommend running on access AV scanning on servers.

  12. #12

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,572 Times in 1,252 Posts
    Rep Power
    340
    Immediate things to check (as others have mentioned) are DNS settings. Make sure the DCs point to themselves first, then each other second, then any external DNS.

    In Active Directory Sites and Services you can manually force the servers to replicate instead of hanging around. Typically it should take seconds unless there's a huge amount of data to replicate. There should be literally a handful of scripts or reg edits possibly, but you could argue you can do most of this using GPO in 2008 R2.

  13. #13

    Join Date
    Apr 2010
    Posts
    2,054
    Thank Post
    83
    Thanked 188 Times in 155 Posts
    Rep Power
    84
    Just one more question. Why does the old server (which I have not demoted yet) say its a DC and the New server say its a GC. Is this normal?

    Notes:
    repadmin /showrepl gives the other servers info, as expected.
    Replication is working fine now.
    All setting such as PDC, Op Master etc all have the new server name.
    Yes
    adprep32 was done
    netdom query fsmo = Looks good and lists new server for all roles

    DCDIAG on old server = all pass
    NETDIAG on old server = all pass

    However DCDIAG on new server passes all except this one: (I have changed server and domain names)

    Starting test: NCSecDesc
    Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
    Replicating Directory Changes In Filtered Set
    access rights for the naming context:
    DC=ForestDnsZones,DC=domain,DC=LAN
    Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
    Replicating Directory Changes In Filtered Set
    access rights for the naming context:
    DC=DomainDnsZones,DC=domain,DC=LAN
    ......................... server-SRV01 failed test NCSecDesc


    Should I worry about this error and should I worry the the new server is listed as GC?

    EDIT. Info about the failed test NCSecDesc
    If you do not plan to add an RODC to the forest, you can disregard this error. If you plan to add an RODC to the forest, you must run adprep /rodcprep.

    So back to my first question. Why does my new server which has all the roles say its a GC?
    Last edited by edutech4schools; 28th May 2012 at 07:15 PM.

  14. #14

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,572 Times in 1,252 Posts
    Rep Power
    340
    You need at least one GC (Global Catalog) server in your network and typically this can be on the same box as your 2008 R2 DC. Without the GC option enabled, processing logons would not be possible.

  15. #15

    Join Date
    Apr 2010
    Posts
    2,054
    Thank Post
    83
    Thanked 188 Times in 155 Posts
    Rep Power
    84
    Yep, I moved all roles and GC to the new server but the old one is still listed as DC in Acitve directory and the new one as GC. Is this correct until I demote the old server? I would have thought having all the roles on the new server and none on the old would make the new server the main DC.

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. script to rename computer and join it to domain ...
    By RabbieBurns in forum Scripts
    Replies: 22
    Last Post: 2nd May 2013, 11:08 AM
  2. Replies: 5
    Last Post: 29th January 2013, 10:16 AM
  3. Replies: 4
    Last Post: 6th August 2009, 10:25 AM
  4. Replies: 7
    Last Post: 17th June 2007, 11:09 PM
  5. Replies: 4
    Last Post: 25th December 2006, 09:15 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •