SYSVOL and Netlogon not replicating to new 2012 Server

[Theldron]

Hi guys,

 

I am replacing a 2003 server PDC with a 2012 server PDC I am pretty much finished except for SYSVOL and NETLOGON replication is not working.

 

Any ideas how to fix this?

 

Cheers

[cscc]

Download Active Directory Replication Status Tool from Official Microsoft Download Center

 

This should help.

[Theldron]

Thanks I ran that and it came out with no errors. Any more help would be appreciated?

[cscc]

Anything showing in event viewer under DFS replication logs on each DC?

[Oaktech]

have you run repadmin /showrepl and seen if there are anything there with access denied or other errors?

[Theldron]

There was a FRS wrap error on the original DC which I have resolved, but other than that nothing. Repladmin is not running I have downloaded the latest 2003 support tools.

[cscc]

As Oaktech suggested have you tried running repadmin on the 2012 DC inputting your 2003 DC, DNS name?

 

repadmin 2003DC.domain.local /showrepl

[Theldron]

The 2012 DC was getting a BAD ADDRESS error so I have sorted that but now I am getting an error 1908 could not find the domain controller for this domain error.

[cscc]

Can you ping the DNS/IP for the old DC from the new one?

[Theldron]

Yes I can I have that sorted now, but when I look at the File Replication Service logs I am getting:

On DC2 I am getting - The DFS Replication service successfully contacted domain controller DC2.CURRICULUM.LOCAL to access configuration information.

 

On DC1 I am getting - The DFS Replication service successfully contacted domain controller DC1.CURRICULUM.LOCAL to access configuration information.

 

Is this normal as it is like they are trying to replicate themselves instead of each other?

 

Cheers

[Theldron]

Also on DCDIAG I am getting an Advertising error its saying it returned information for DC1 when it was expecting DC2.

[Michael]

Replication problems can be caused by DNS issues, or even worse if something's corrupt. If that's the case, you'll need to enable burflags in the registry (on your 2003 PDC), so it will re-create SYSVOL and then in theory it should replicate to your 2012 DC. In effect you're making the 2003 server authoritative, then it'll replicate out to any other DCs (in this case your 2012 server).

 

Presumably you upgraded the schema on your 2003 server as well as upgrade the domain + forest functional levels to 2003 before introducing a 2012 server?

[Gatt]

I had some Replication issues a few weeks ago and needed to do an Authorative restore as per:

 

(2010-08-12) Restoring The SYSVOL (Non-)Authoritatively When Either Using NTFRS Or DFS-R (Part 3) « Jorge's Quest For Knowledge!

[Theldron]

I have completed the Burflag method on the 2003 DC but nothing has happened.

 

Help please!!

[Theldron]

I have run the DCDiag again and I am still getting the Advertising error.

[cscc]

Do you have any Event ID 2213 showing in the DFS replication logs?

 

Also would be helpful to see an output of ipconfig /all for both servers.

Edited November 13, 2014 by cscc

[Theldron]

IPCONFIG /ALL Server 2012:

 

Windows IP Configuration

 

Host Name . . . . . . . . . . . . : curr-server1

Primary Dns Suffix . . . . . . . : CURRICULUM.BLAKENEY

Node Type . . . . . . . . . . . . : Hybrid

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No

DNS Suffix Search List. . . . . . : CURRICULUM.BLAKENEY

 

Ethernet adapter Ethernet:

 

Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller

Physical Address. . . . . . . . . : 74-D4-35-F6-8C-44

DHCP Enabled. . . . . . . . . . . : No

Autoconfiguration Enabled . . . . : Yes

IPv4 Address. . . . . . . . . . . : 10.149.83.199(Preferred)

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 10.149.83.254

DNS Servers . . . . . . . . . . . : 10.149.83.20

NetBIOS over Tcpip. . . . . . . . : Enabled

 

Tunnel adapter isatap.{C2F6BEA0-9C48-4226-9254-59656E6E9D48}:

 

Media State . . . . . . . . . . . : Media disconnected

Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2

Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0

DHCP Enabled. . . . . . . . . . . : No

Autoconfiguration Enabled . . . . : Yes

 

IPCONFIG /ALL Server 2003

 

Windows IP Configuration

 

Host Name . . . . . . . . . . . . : curr-server

Primary Dns Suffix . . . . . . . : CURRICULUM.BLAKENEY

Node Type . . . . . . . . . . . . : Unknown

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No

DNS Suffix Search List. . . . . . : CURRICULUM.BLAKENEY

 

Ethernet adapter Local Area Connection:

 

Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet

Physical Address. . . . . . . . . : 00-1D-09-FE-98-CC

DHCP Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 192.168.0.49

Subnet Mask . . . . . . . . . . . : 255.255.255.0

IP Address. . . . . . . . . . . . : 10.149.83.20

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 10.149.83.254

DNS Servers . . . . . . . . . . . : 10.149.83.20

10.149.83.199

 

I dont have any 2213 events.

 

- - - Updated - - -

 

Heres the DCDIAG from 2012 Server:

 

Directory Server Diagnosis

 

Performing initial setup:

Trying to find home server...

Home Server = curr-server1

* Identified AD Forest.

Done gathering initial info.

 

Doing initial required tests

 

Testing server: Default-First-Site-Name\CURR-SERVER1

Starting test: Connectivity

......................... CURR-SERVER1 passed test Connectivity

 

Doing primary tests

 

Testing server: Default-First-Site-Name\CURR-SERVER1

Starting test: Advertising

Warning: DsGetDcName returned information for

\\curr-server.CURRICULUM.BLAKENEY, when we were trying to reach

CURR-SERVER1.

SERVER IS NOT RESPONDING or IS NOT CONSIDERED SUITABLE.

......................... CURR-SERVER1 failed test Advertising

Starting test: FrsEvent

There are warning or error events within the last 24 hours after the

SYSVOL has been shared. Failing SYSVOL replication problems may cause

Group Policy problems.

......................... CURR-SERVER1 passed test FrsEvent

Starting test: DFSREvent

......................... CURR-SERVER1 passed test DFSREvent

Starting test: SysVolCheck

......................... CURR-SERVER1 passed test SysVolCheck

Starting test: KccEvent

......................... CURR-SERVER1 passed test KccEvent

Starting test: KnowsOfRoleHolders

......................... CURR-SERVER1 passed test KnowsOfRoleHolders

Starting test: MachineAccount

......................... CURR-SERVER1 passed test MachineAccount

Starting test: NCSecDesc

......................... CURR-SERVER1 passed test NCSecDesc

Starting test: NetLogons

Unable to connect to the NETLOGON share! (\\CURR-SERVER1\netlogon)

[CURR-SERVER1] An net use or LsaPolicy operation failed with error 67,

The network name cannot be found..

......................... CURR-SERVER1 failed test NetLogons

Starting test: ObjectsReplicated

......................... CURR-SERVER1 passed test ObjectsReplicated

Starting test: Replications

[Replications Check,CURR-SERVER1] DsReplicaGetInfo(PENDING_OPS, NULL)

failed, error 0x2105 "Replication access was denied."

......................... CURR-SERVER1 failed test Replications

Starting test: RidManager

......................... CURR-SERVER1 passed test RidManager

Starting test: Services

Could not open NTDS Service on CURR-SERVER1, error 0x5

"Access is denied."

......................... CURR-SERVER1 failed test Services

Starting test: SystemLog

A warning event occurred. EventID: 0x000727A5

Time Generated: 11/13/2014 13:43:22

Event String:

The WinRM service is not listening for WS-Management requests.

An error event occurred. EventID: 0x0000106A

Time Generated: 11/13/2014 13:45:13

Event String:

Unable to update the IP address on Isatap interface isatap.{C2F6BEA0

-9C48-4226-9254-59656E6E9D48}. Update Type: 1. Error Code: 0x490.

A warning event occurred. EventID: 0x00002724

Time Generated: 11/13/2014 13:45:14

Event String:

This computer has at least one dynamically assigned IPv6 address.For

reliable DHCPv6 server operation, you should use only static IPv6 addresses.

A warning event occurred. EventID: 0x00000081

Time Generated: 11/13/2014 13:45:32

Event String:

NtpClient was unable to set a domain peer to use as a time source be

cause of discovery error. NtpClient will try again in 15 minutes and double the

reattempt interval thereafter. The error was: The entry is not found. (0x800706E

1)

A warning event occurred. EventID: 0x00000081

Time Generated: 11/13/2014 13:45:33

Event String:

NtpClient was unable to set a domain peer to use as a time source be

cause of discovery error. NtpClient will try again in 15 minutes and double the

reattempt interval thereafter. The error was: The entry is not found. (0x800706E

1)

An error event occurred. EventID: 0x0000272C

Time Generated: 11/13/2014 13:57:23

Event String:

DCOM was unable to communicate with the computer 62.171.194.104 usin

g any of the configured protocols; requested by PID 854 (C:\Windows\system3

2\dcdiag.exe).

An error event occurred. EventID: 0x0000272C

Time Generated: 11/13/2014 13:57:44

Event String:

DCOM was unable to communicate with the computer 62.171.194.105 usin

g any of the configured protocols; requested by PID 854 (C:\Windows\system3

2\dcdiag.exe).

......................... CURR-SERVER1 failed test SystemLog

Starting test: VerifyReferences

......................... CURR-SERVER1 passed test VerifyReferences

 

 

Running partition tests on : ForestDnsZones

Starting test: CheckSDRefDom

......................... ForestDnsZones passed test CheckSDRefDom

Starting test: CrossRefValidation

......................... ForestDnsZones passed test

CrossRefValidation

 

Running partition tests on : DomainDnsZones

Starting test: CheckSDRefDom

......................... DomainDnsZones passed test CheckSDRefDom

Starting test: CrossRefValidation

......................... DomainDnsZones passed test

CrossRefValidation

 

Running partition tests on : Schema

Starting test: CheckSDRefDom

......................... Schema passed test CheckSDRefDom

Starting test: CrossRefValidation

......................... Schema passed test CrossRefValidation

 

Running partition tests on : Configuration

Starting test: CheckSDRefDom

......................... Configuration passed test CheckSDRefDom

Starting test: CrossRefValidation

......................... Configuration passed test CrossRefValidation

 

Running partition tests on : CURRICULUM

Starting test: CheckSDRefDom

......................... CURRICULUM passed test CheckSDRefDom

Starting test: CrossRefValidation

......................... CURRICULUM passed test CrossRefValidation

 

Running enterprise tests on : CURRICULUM.BLAKENEY

Starting test: LocatorCheck

......................... CURRICULUM.BLAKENEY passed test LocatorCheck

Starting test: Intersite

......................... CURRICULUM.BLAKENEY passed test Intersite

[Michael]

The 2012 config looks OK, but I'd make these changes:

 

IPv4 Address. . . . . . . . . . . : 10.149.83.199(Preferred)

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 10.149.83.254

DNS Servers . . . . . . . . . . . : 10.149.83.199 10.149.83.20

 

2003:

 

IP Address. . . . . . . . . . . . : 192.168.0.49 <- What's this for? If it's not used, disable the adapter.

Subnet Mask . . . . . . . . . . . : 255.255.255.0 <- What's this for? If it's not used, disable the adapter.

IP Address. . . . . . . . . . . . : 10.149.83.20

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 10.149.83.254

DNS Servers . . . . . . . . . . . : 10.149.83.20 10.149.83.199

 

Just a thought, why not make the 2012 Server end in .21 instead of .199. Would make more sense to bunch servers together.

[Theldron]

I did try that but the .21 was coming up BAD ADDRESS.

[Gatt]

The DCDIAG report is the same as the one that I was getting

Did you try the authoritative restore link I posted?

[Michael]

Servers should have static IPs, outside of your DHCP scope.

 

So your distribution range could be 10.149.83.50 to 10.149.83.253, seeing as your Gateway is .254. Bad Address mostly likely means there's a conflict as the IP is issued out. Adjust your scope and lease time to say 3 days, then change the 2012 Server to .21.

[Theldron]

Hi guys,

 

This is still causing problems for me and giving a major headache.

 

The 2003 server has only DFS in the regsitry rather than DFSR do I have to do an upgrade or migrate to a newer version before the replication will work with 2012?

 

Cheers

[Theldron]

I am starting to think it would be easier to wait till the holidays remove old server and start from scratch.

[Gatt]

DFS-R is only available at server 2008 R2 Domain & Forest Functional levels IIRC and you need to migrate from FRS to DFS-R

 

However, this shouldn't be stopping replication

[Theldron]

I dont get it then mate. I have a headache. I tried this (2010-08-12) Restoring The SYSVOL (Non-)Authoritatively When Either Using NTFRS Or DFS-R (Part 3) « Jorge's Quest For Knowledge! link but nothing is happening. I am not getting any events.

 

Cheers