Server 2016 Dc Replication

[richbrowncardiff]

Hi All, Any idea how i fix this....

 

Tried everything i can think of and am getting no where. Re built from scratch our domain controllers and am getting group policy issues (Not applying) short of Deleting all GPO's im stumped. When i goto the GPMC and do a detect now to see if policys are replicated i get the following screen.

 

[PotNoodleTech]

Hi Rich, so these are new DCs that you've set up or old ones that have been converted/upgraded from 2012?

[richbrowncardiff]

Morning @AButters

 

They are new Dc's fresh build with Server 2016 Same domain tho (Just demoted old and promoted new and let replicate etc) have done an Authorative sync which appreared to work but after a few days im still getting issues with sysvol being out of sync

[PotNoodleTech]

Hmm I wish I could help more but not so much as installed 2016 yet. I hope someone in here can offer some assistance!

[TwistedHelixis]

Just some basics (no expert)

 

Have you checked with firewall disabled on both DC and clients

 

Disable UAC

 

If you create a new policy does that apply or not?

[PyROm]

Daft question, are your domain controllers using dfsr or frs for syncing? if upgrading from older (server 2003) you have do do some manual tweaks to switch over to dfsr.

 

If using dfsr you can install the dfsr role which lets you run diagnostic reports etc through gui. You can also use dfsrdiag at command line to check replication status.

[PyROm]

I should say, by upgrading I mean the domain itself, eg. if there used to be 2003 dc's on the domain. Raising the domains functional level doesnt auto activate dfsr on older domains (from memory)

[mukz]

Following on PyROm, its also worth checking you have migrated away from fsr - this solved alot of issues for me.

[richbrowncardiff]

Thanks all, as the domain started life on 2008R2 we are on DFSR and the forest and domain functional level is 2012R2 as has been updated when I updated before. New policy does apply and replicate.

 

checked permissions and all seems fine. Really strange as all tests pass when running dcdiag (except a warning about drfs replication) and also using the drfs gui tool say success.

[HPlum78]

Has one of the Server 2008R2 DC had a bad shutdown? this will stop DFS-R, the following may help https://blogs.technet.microsoft.com/filecab/2012/07/23/understanding-dfsr-dirty-unexpected-shutdown-recovery/