Hello
We have 4 domain controllers in our domain:
- SERVER1 - old domain controller running on Windows 2012
- SERVER2 - old domain controller running on Windows 2012
- SERVER3 - new domain controller running on Windows 2019
- SERVER4 - new domain controller running on Windows 2019
For some reason only SERVER1 has SYSVOL and Netlogon shares. All other domain controllers are missing these shares.
C:\Windows\system32>For /f %i IN ('dsquery server -o rdn') do @echo %i && @(net view \\%i | find "SYSVOL") & echo
SERVER1
SYSVOL Disk Logon server share
ECHO is on.
SERVER2
ECHO is on.
SERVER3
ECHO is on.
SERVER4
ECHO is on.
C:\Windows\system32>
All servers are in state 2 (Initial Sync) - looks like we do not have a single domain controller in state 4 (Normal)
C:\Windows\system32>For /f %i IN ('dsquery server -o rdn') do @echo %i && @wmic /node:"%i" /namespace:\\root\microsoftdfs path dfsrreplicatedfolderinfo WHERE replicatedfoldername='SYSVOL share' get replicationgroupname,replicatedfoldername,state
SERVER1
ReplicatedFolderName ReplicationGroupName State
SYSVOL Share Domain System Volume 2
SERVER2
ReplicatedFolderName ReplicationGroupName State
SYSVOL Share Domain System Volume 2
SERVER3
ReplicatedFolderName ReplicationGroupName State
SYSVOL Share Domain System Volume 2
SERVER4
ReplicatedFolderName ReplicationGroupName State
SYSVOL Share Domain System Volume 2
How we can fix this problem?
Should we follow https://learn.microsoft.com/en-GB/troubleshoot/windows-server/group-policy/force-authoritative-non-authoritative-synchronization
If so, should we perform a non-authoritative OR authoritative synchronization of DFSR-replicated sysvol replication?
Thanks!