SYSVOL Replication

[Badger]

Hi,

Am Edugeek virgin so hope some kind soul can rescue me!

Active directory on WIN2003 servers replicates ok. However SYSVOL folder does not replicate at all. NTFRS is running on domain controllers and reports errors of morph directories (can't see them) and shared violations (can't see them either).

Can anyone suggest solution or recommend appropriate software to address this problem? Have spent ages looking at this but getting nowhere.

 

Thanks

 

Badger

[plexer]

You say that it replicates ok but it obviously doesn't

 

What did you do to test it?

 

DCDiag etc..?

 

Ben

[plexer]

I also use NetIQ's ADCheck.

 

Ben

[Badger]

AD is replicating ok. However SYSVOL is not replicating (scripts, group policies etc) Passes DCDIAG & NETDIAG ok.

 

Badger

[m25man]

99% of these issues are DNS related

 

THIS MOST LIKELY WILL BE A DNS ISSUE.

 

Check your DNS settings, check the network adaptor settings, check the bindings.

If you are using Static IP's (of course you are they are DC's) make sure that the internal DNS table contains the correct information. Only use 1 NIC unless you are trunking them. DC's do not like multiple NIC's.

 

DNS DNS DNS..... #1 rule of AD troubleshooting.

[mattx]

Badger - is that Bishopshalt School In Hillingdon ?

If so - I went there many years ago...........

 

Have to agree with M25man - DNS, DNS & DNS.

[djm968]

A couple of thoughts:

 

Make sure the time on both servers is sync'd

Corrupt permissions on the SYSVOL share can cause this

Run net share on the DC and check that the SYSVOL share does actually exist

[Badger]

Thanks everyone for all your help - much appreciated. However still having problem.

Time is sync’d and DNS settings ok (can resolve names, ping etc).

Don’t use multiple nics on DC.

Server attempts to send policy and script files to staging folders in SYSVOL folder but unable to move files out into final location. Agree could be permission settings on SYSVOL folders, if so what should they be?

If delete connection objects for replication, servers do in fact recreate correctly suggesting AD working ok.

Yes, Matt, I am from sunny Hillingdon.

 

Badger

[ajbritton]

A couple of suggestions if you have not already tried..

 

DCDIAG /TEST:DNS

REPLMON

REPADMIN /SYNCALL

 

If all that fails, you could un-DCPROMO then re-DCPROMO but don't forget to move any FSMO roles and make sure you still have a GC.

 

when I have replication probs I often find it helps to point all the DCs to a single DNS server, restart NETLOGONS, restart DNS SERVER.

[djm968]

Are there any FRS errors in the event log?

 

Also, it might be worth checking this article. http://support.microsoft.com/kb/257338

[bishopsgarthstockton]

How many days has your server been running?

[mattx]

Yes, Matt, I am from sunny Hillingdon.

 

If you get really stuck, I'm only round the corner [ when at home ] - if you want to check me out then I am quite friendly with one of your Govs Mark Haley [ who is the head gov of my kids school where I am a gov.... ]

 

Just out of interest, have you checked your 'replication from' settings in sites and services ?

Also there must be some event logs like djm stated.

[RobD]

Tought it only replicates twice a day?? Although i may be talking rubbish!!

[Dos_Box]

Tought it only replicates twice a day?? Although i may be talking rubbish!!

 

No. AD syncs at random intervals, but I've heard that every 20-40 mins is the average.

[randle]

I have had a very similar problem recently but this was just after a full server restore so it was just down to the AD account passwords being out of sync. I doubt this is the case if you haven't done a restore but they may have got out of sync some other way!!

 

For me, even when it looked like replication was working on all other levels, the sysvol folder was still not replicating and this fixed the issue.

 

Just a thought

[Badger]

Many thanks for all your help and comments.

Have tried un DCPROMO and re DCPROMO as suggested.

No FRS errors in Event Log.

Am checking MS Support article as suggested by djm968 but heavy going.

Servers have been running for months.

Servers can see each other and replication connection objects fine and checked. Servers are sending and receiving files inside NTFRS pre-install directory, staging directory, staging areas directory but unable to move same files inside policies or scripts folders. Reports sharing violations and morphed directories which we can’t see and resolve. Also reports files in ID Table without proper parent.

NETLOGON and SYSVOL share exist on all servers.

Am intrigued by randle’s mention of AD password and would appreciate clarification.

 

Badger

[djm968]

Have you tried the secure channel utility NLTEST http://support.microsoft.com/kb/158148?

 

You could try resetting the secure channel using NETDOM http://support.microsoft.com/kb/329721

[randle]

It was the same NETDOM link above that i used

[Badger]

Thanks for all your comments.

However still having problems so will continue to manually replicate SYSVOL.

Will have another look during summer break but while network ok, loathe to meddle and perhaps cause all sorts of problems especially while students doing exams using the network.

 

Badger

[mattx]

so will continue to manually replicate SYSVOL.

 

Hmmm - me feel a script needs writing for that.

Like I said, I'm only round the corner from the school - SSShhh - don't tell anyone but I went to that school too many many years ago. The offer still stands.....