Cannot delete or take ownership of policy in SYSVOL

[ozydave]

My sysvol replication (DFSR) had a hiccup after an unexpected shutdown.

Everything seems to be replication fine now.

I create a dummy GPO and it replicates fine. When I delete the GPO it deletes the GPO from all domain controllers (I have 3).

 

Running this command

For /f %i IN ('dsquery server -o rdn') do @echo %i && @wmic /node:"%i" /namespace:\\root\microsoftdfs path dfsrreplicatedfolderinfo WHERE replicatedfoldername='SYSVOL share' get replicationgroupname,replicatedfoldername,state

 

2 DC’s report a state of 4, one reports a state of 3

 

The DC with a state of 3 has an error in the event viewer 4312.

 

There is one policy in the sysvol that is not on the other DC’s {1E154276-3C16-457C-AE4F-0F8AEBDBF9E1}

 

Looking through my Group policy objects there is no GPO with that GUID. And it does not appear in the sysvols on the other domain controllers.

 

Assuming {1E154276-3C16-457C-AE4F-0F8AEBDBF9E1} is the problem, I tried to delete it but I don’t have permissions.

I cannot even take ownership as an enterprise admin.

Any ideas how to get rid of it?

 

Cheers

[neonetman]

I've had a similar problem in the past and managed to solve it this way..

 

* Open CMD as an administrator

* Use pushd to navigate tothe share on the server in question (not the DFS share)

* Use takeown and icacls commands with the /reset and /grant options to force access back.

 

It's worth making sure you have full access to the parent folder as well, as without that you may not have success with this resolution.

Edited March 22, 2018 by neonetman

[ozydave]

Thank you. It does seem to have sorted itself out this morning!

I run the command in my first post this morning and all reported 4, which is normal! There was no errors in the event viewer and the troublesome folder had gone! Guess DFS has self healed. Will be keeping a close eye on it for a while. But at least I learned more. Every problem is a learning opportunity [emoji3]