sysvol replication 6002

sysvol replication 6002

Greetings -

Ran into a bit of an issue while doing some overzealous troubleshooting of DFS. I have somehow deleted the Domain System Volume replication in DFS Management.

I am now encountering the follow error message in Event Viewer:

Error   DFSR    6002    None

The DFS Replication service detected invalid msDFSR-Subscriber object data while polling for configuration information.

Additional Information:
Object DN: CN=Domain System Volume,CN=DFSR-LocalSettings,CN=XXXXXXX,OU=Domain Controllers,DC=XXXXXXX,DC=local
Attribute Name: msDFSR-MemberReference
Domain Controller: XXXXXX.local
Polling Cycle: 60 minutes

The sysvol appears to be still intact;

C:\Users\administrator.xxxxxxx>DCDIAG /Test:sysvolcheck

Directory Server Diagnosis

Performing initial setup:
   Trying to find home server...
   Home Server = xxxxxxx
   * Identified AD Forest.
   Done gathering initial info.

Doing initial required tests

   Testing server: xxxxxxx\xxxxxxx
      Starting test: Connectivity
         ......................... xxxxxxx passed test Connectivity

Doing primary tests

   Testing server: xxxxxxx\xxxxxxx
      Starting test: SysVolCheck
         ......................... xxxxxxx passed test SysVolCheck

   Running partition tests on : ForestDnsZones

   Running partition tests on : DomainDnsZones

   Running partition tests on : Schema

   Running partition tests on : Configuration

   Running partition tests on : xxxxxxx

   Running enterprise tests on : xxxxxxx.local

I have followed the steps located on these sites without success.

https://community.spiceworks.com/topic/2463191-error-6002-dfsr#:~:text=The%20DFS%20Replication%20service%20detected,while%20polling%20for%20configuration%20information.

https://www.experts-exchange.com/questions/29164999/Missing-Expected-Value-SYSVOL-Sync-fail.html

https://www.experts-exchange.com/dashboard/#/questions/29164999

Here are the results of  DCDIAG /c /v /e /q

C:\Users\administrator.xxxxxx>DCDIAG /c /v /e /q
         [xxxxxx] No security related replication errors were found on this DC!  To target the connection to a
         specific source DC use /ReplSource:<DC>.
         There are warning or error events within the last 24 hours after the SYSVOL has been shared.  Failing SYSVOL
         replication problems may cause Group Policy problems.
         ......................... xxxxxxx failed test DFSREvent
         ** Did not run Outbound Secure Channels test because /testdomain: was not entered
         The following problems were found while verifying various important DN references.  Note, that  these problems
         can be reported because of latency in replication.  So follow up to resolve the following problems, only if
         the same problem is reported on all DCs for a given domain or if  the problem persists after replication has
         had reasonable time to replicate changes.
            [1] Problem: Missing Expected Value
             Base Object: CN=xxxxxxx,OU=Domain Controllers,DC=xxxxxxx,DC=local
             Base Object Description: "DC Account Object"
             Value Object Attribute Name: msDFSR-ComputerReferenceBL
             Value Object Description: "SYSVOL FRS Member Object"
             Recommended Action: See Knowledge Base Article: Q312862

            LDAP Error 0x5e (94) - No result present in message.
         ......................... xxxxxxx failed test VerifyEnterpriseReferences
         Some objects relating to the DC xxxxxxx have problems:
            [1] Problem: Missing Expected Value
             Base Object:
            CN=NTDS Settings,CN=xxxxxxx,CN=xxxxxxx,CN=xxxxxxx,CN=Sites,CN=Configuration,DC=xxxxxxx,DC=local
             Base Object Description: "DSA Object"
             Value Object Attribute Name: serverReferenceBL
             Value Object Description: "SYSVOL FRS Member Object"
             Recommended Action: See Knowledge Base Article: Q312862

            [1] Problem: Missing Expected Value
             Base Object: CN=xxxxxxx,OU=Domain Controllers,DC=xxxxxxx,DC=local
             Base Object Description: "DC Account Object"
             Value Object Attribute Name: msDFSR-ComputerReferenceBL
             Value Object Description: "SYSVOL FRS Member Object"
             Recommended Action: See Knowledge Base Article: Q312862

         ......................... xxxxxxx failed test VerifyReferences

The referenced KB Q312862 did not get me very far.

I have also tried to restore the sysvol from ldp.exe Expanding base 'CN=Domain System Volume\0ADEL:5a33d907-f6c9-4006-8b1d-03d40ed79f23,CN=Deleted Objects,DC=XXXXXXX,DC=local'...

Getting 1 entries:

Dn: CN=Domain System Volume\0ADEL:5a33d907-f6c9-4006-8b1d-03d40ed79f23,CN=Deleted Objects,DC=XXXXXXX,DC=local

cn: Domain System Volume

DEL:5a33d907-f6c9-4006-8b1d-03d40ed79f23; 

distinguishedName: CN=Domain System Volume\0ADEL:5a33d907-f6c9-4006-8b1d-03d40ed79f23,CN=Deleted Objects,DC=XXXXXXX,DC=local; 

instanceType: 0x4 = ( WRITE ); 

isDeleted: TRUE; 

isRecycled: TRUE; 

lastKnownParent: CN=DFSR-LocalSettings,CN=SERVER1,OU=Domain Controllers,DC=XXXXXXX,DC=local; 

name: Domain System Volume

DEL:5a33d907-f6c9-4006-8b1d-03d40ed79f23; 

objectClass (2): top; msDFSR-Subscriber; 

objectGUID: 5a33d907-f6c9-4006-8b1d-03d40ed79f23; 

uSNChanged: 148340; 

uSNCreated: 16398; 

whenChanged: 11/14/2023 11:35:15 AM Eastern Standard Time; 

whenCreated: 9/5/2023 4:00:39 PM Eastern Standard Time;

However from what I've dug up on other forums - the isRecycled: TRUE attribute might be the nail in the coffin.

***Call Modify...

ldap_modify_ext_s(ld, 'CN=Domain System Volume\0ADEL:5a33d907-f6c9-4006-8b1d-03d40ed79f23,CN=Deleted Objects,DC=xxxxxxx,DC=local',[2] attrs, SvrCtrls, ClntCtrls);

Error: Modify: Object Class Violation. <65>

Server error: 0000207C: UpdErr: DSID-03151CEB, problem 6002 (OBJ_CLASS_VIOLATION), data 0

Error 0x207C A required attribute is missing.

I have a feeling that, short of demoting and promoting the server, I'm up the creek. Did I happen to mention that it is the only DC in the domain, which consists of just that DC and no other servers.

Any thoughts/input would be greatly appreciated. Thank you.