How to Force an Authoritative DFSR Sync of SYSVOL - Fix Group Policy Replication

this is a sample from our training at itv.com if you'd like to learn more please go to ITT DVDs comm no Graham on one of my domain controllers and I've determined that DFS our replication is a problem because my group policy objects aren't replicating to all of my domain controllers and one of the ways I figured that out was one a lot of things were broken and I went to DFS management expand this out when go to replication right click on my domain system volume create diagnostic report and I can do a health report let's go ahead and click next next next again next again go ahead and create the report and we could run this remotely as well and I can see I got a couple of warnings here we can expand it out and let me know that ok this member is waiting for initial replication for replicated folder sysvol share and is not currently participating in replication also if I go to my sis lul folder on one of my domain controllers there it is go to my domain policies I can see I have a policy here that was made on 819 and if I go over to the same place on DC 0 - it should be replicated there but it's not so DC 0 1 is up-to-date so I'm going to use that as my authoritative server to do an authoritative synchronization that basically means ok DC 0 - you get everything from DC 0 1 because that's got all the update information and then continue synchronization after that so we're going to need to use ADSI edit in order to fix this problem here and in order to use it we can launch it from our MMC here I'll just type in MMC and go file add/remove snap-in and there's ADSI edit if we don't see it there then we're going to want to do a run and type in reg SVR 32 space ADSI edit dll click ok that will go ahead and register that dll and then it'll show up when we go to run mmm then add/remove snap-in we could potentially also go to tools and click on ADSI edit so if we don't have our default naming context open go ahead and remove it click yes we can right-click on ADSI edit connect to and connect to the default naming context click ok let's go ahead and expand it out expand out our domain now before we do this it's always a good idea to back things up so you know make sure the domain controllers are backed up make sure everything in your system all folder on all your domain controllers is backed up to different locations so that if for some reason something was on bc 0 2 which is my non-authoritative domain controller that wasn't on DC 0 1 which is what we're making authoritative well then that's going to be lost unless I back it up so I want to back it up copied off somewhere and we're going to go to domain controllers and we're going to go to the one that we want to make a thorat ativ so that's the one that's up-to-date DC 0 1 DFS our local settings domain system volume and sis folson I'll just go ahead and double click on that and let's go ahead and scroll down on our attributes here and we're going to go to MSD FS are enabled we're going to change that to false and go down a bit MS DFS our options double click on that let's change that to 1 click OK now we're going to want to go back up to domain controllers and on all of our other domain controllers I just have one other one we're going to want to go to the same place double click and we scroll down a bit and for our DFS are enabled we're going to change this to false next we're going to want to force Active Directory replication so I'm on a domain controller here and we're going to run the rep admin space slash single space last ad EP and I'll go ahead and replicate everything one make sure everything terminated with no errors and it looks good okay now and all my domain controllers are going to stop the DFS our service so I'll go ahead and stop it on this domain controller then I'm going to type it in right stop this service DFS are and I'll enter at PS session into my other domain controllers DC 0 2 and I'll run the same command I'll go ahead and exit out so now I'm back on DC 0 1 which is my authoritative domain controller and I'm going to start the service back up and if we're looking at our Event Viewer we should see an event for 1 1 4 here and let us know that sis file replication is not happen right now now let's go over to ADSI edit again and we're going to go back to the domain controller that should be authoritative go to our sis file subscription and scroll down and DFS are enabled now we're going to set that back to true we're going to force Active Directory replication again with the rep admin sync all a DEP now I'm on the server that's authoritative here DC is 0 1 I'm going to run DFS our diag space slash pull ad and now an event viewer we should see an event 4602 says this member is designated a primary member now we're going to start the DFS our service on our other domain controllers so I'm going to enter a PS session here into DC 0 to my other domain controller and any other domain controllers we'd want to do that so go ahead and start service DFS are now we're going to go back to ADSI edit here and for our other domain controllers so in my case DC 0 2 we're going to go back and go to our DFS are enabled and set that to true and on our other domain controller so you can see I'm got a PS session in 2d c02 here we're going to run DFS our diag pull ad and that's it we may want to give it a little time to replicate but we should be able to see okay great d c02 here it has that group policy object that wasn't replicated and it's the exact same as what DC 0 1 was so replication is now back up and working and if we want we go back up to our tools here let's go to DFS management right click on our domain name system here create diagnostic report and we'll just run a report again make sure everything looks good and now we don't have any errors anymore or any more warnings

Channel: ITdvds

Views: 61,802

Keywords: Group Policy Replication, DFSR Replication, DFSR Replication Broken, Fix Group Policy Replication, Fix DFSR

Id: ja53C2Mz1EQ

Length: 7min 32sec (452 seconds)

Published: Mon Aug 21 2017