Missing SYSVOL and Netlogon shares

BD-6573 35 Reputation points
2023-07-05T08:42:03.7266667+00:00

Hello

We have 4 domain controllers in our domain:

  1. SERVER1 - old domain controller running on Windows 2012
  2. SERVER2 - old domain controller running on Windows 2012
  3. SERVER3 - new domain controller running on Windows 2019
  4. SERVER4 - new domain controller running on Windows 2019

For some reason only SERVER1 has SYSVOL and Netlogon shares. All other domain controllers are missing these shares.

C:\Windows\system32>For /f %i IN ('dsquery server -o rdn') do @echo %i && @(net view \\%i | find "SYSVOL") & echo

SERVER1

SYSVOL Disk Logon server share

ECHO is on.

SERVER2

ECHO is on.

SERVER3

ECHO is on.

SERVER4

ECHO is on.

C:\Windows\system32>

All servers are in state 2 (Initial Sync) - looks like we do not have a single domain controller in state 4 (Normal)

C:\Windows\system32>For /f %i IN ('dsquery server -o rdn') do @echo %i && @wmic /node:"%i" /namespace:\\root\microsoftdfs path dfsrreplicatedfolderinfo WHERE replicatedfoldername='SYSVOL share' get replicationgroupname,replicatedfoldername,state

SERVER1

ReplicatedFolderName ReplicationGroupName State

SYSVOL Share Domain System Volume 2

SERVER2

ReplicatedFolderName ReplicationGroupName State

SYSVOL Share Domain System Volume 2

SERVER3

ReplicatedFolderName ReplicationGroupName State

SYSVOL Share Domain System Volume 2

SERVER4

ReplicatedFolderName ReplicationGroupName State

SYSVOL Share Domain System Volume 2

How we can fix this problem?

Should we follow https://learn.microsoft.com/en-GB/troubleshoot/windows-server/group-policy/force-authoritative-non-authoritative-synchronization

If so, should we perform a non-authoritative OR authoritative synchronization of DFSR-replicated sysvol replication?

Thanks!

Windows for business | Windows Client for IT Pros | Directory services | Active Directory
Windows for business | Windows Client for IT Pros | User experience | Other
{count} votes

Accepted answer
  1. Anonymous
    2023-07-06T12:01:37.4933333+00:00

    Ok, gotcha. You could try an authoritative sync

    https://learn.microsoft.com/en-GB/troubleshoot/windows-server/group-policy/force-authoritative-non-authoritative-synchronization#how-to-perform-an-authoritative-synchronization-of-dfsr-replicated-sysvol-replication-like-d4-for-frs

    to clear up any errors on server1. The others you may need to demote, reboot and promo again but not until all is good with server1.

    --please don't forget to upvote and Accept as answer if the reply is helpful--

    1 person found this answer helpful.

4 additional answers

Sort by: Most helpful
  1. Anonymous
    2023-07-05T13:06:02.2366667+00:00

    You can try a non-authoritative sync on the problematic ones.

    https://learn.microsoft.com/en-GB/troubleshoot/windows-server/group-policy/force-authoritative-non-authoritative-synchronization#how-to-perform-a-non-authoritative-synchronization-of-dfsr-replicated-sysvol-replication-like-d2-for-frs

    or you can also try move roles off, demote problematic one, reboot, promo it again.

    --please don't forget to upvote and Accept as answer if the reply is helpful--

    0 comments No comments

  2. BD-6573 35 Reputation points
    2023-07-05T13:20:22.3133333+00:00

    @Anonymous Thanks for the quick reply, I appreciate it!

    Quick question - can you explain why we should do non-authoritative sync instead of authoritative sync, please?

    Thanks!


  3. Anonymous
    2023-07-06T10:31:37.59+00:00

    One more quick question please - can you confirm if I should non-authoritative sync on SERVER1 as well?

    No, not on this one.

    This server has both shares available (SYSVOL and Netlogon shares) but it's in state 2 (Initial Sync) just like all other domain controllers.

    This doesn't sound good. Might check the System and DFS/FRS Replication event logs for more clues.


  4. Anonymous
    2023-07-06T11:03:03.0833333+00:00

    Is there any way how we can move SERVER1 (primary domain controller with all FSMO roles and shares available) from state 2 (Initial Sync) to state 4 (Normal)?

    Do you have any details? Where is this presented?


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.