Important: This article is only applicable if SYSVOL data is being replicated using the File Replication Service (FRS). FRS has been deprecated but may still be in use in Active Directory domains that were created with functional levels earlier than Windows Server 2008. To determine whether FRS is in use, run the dfsrmig /getmigrationstate
command at an elevated command prompt on a domain controller (DC). If the migration state is "Eliminated," FRS is not in use, and this article is not applicable.
The SYSVOL folder hierarchy, present on all DCs, is used to store two important sets of data:
\\SYSVOL\<domain>\Policies
.\\SYSVOL\<domain>\scripts
.
This data is replicated among DCs, but SYSVOL replication takes place separately from Active Directory replication. It is possible for one to fail while the other is fully functional. In some situations, SYSVOL replication may fail and be unable to resume without manual intervention. The following steps perform a non-authoritative sync of SYSVOL. In a non-authoritative sync, an affected DC copies all the SYSVOL data from another DC in the environment.
Important: If there is only one DC in the domain, a non-authoritative cannot succeed, since there is no other DC from which to copy SYSVOL data. In that situation, an authoritative sync should be performed instead. Instructions for performing an authoritative sync can be found in How to Perform an Authoritative Sync of SYSVOL Data Using the File Replication Service (FRS).
Before beginning this procedure, ensure that another DC exists in the environment and that its copy of the SYSVOL data is up to date. This requires browsing the SYSVOL folder hierarchy located by default at %systemroot%\SYSVOL
to check the modified dates of Group Policy template files and script files.
To perform the non-authoritative sync of SYSVOL, follow these steps on the affected domain controller (that is, the DC with outdated or nonexistent SYSVOL data):
HKLM\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup
BurFlags
entry and set it to a hexadecimal value of D2.
net share
command and confirm the presence of the SYSVOL and NETLOGON shares in the output.The following video demonstrates the above procedure:
Duration: 07:51