This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(160, 28.000000000000004%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERB%3C/text%3E%3C/svg%3E)
Hi,
I recently upgraded our domain from 2008 to 2016 however I had some issues with replication on the Sysvol. Initially it was ACL which I found out where related to a duplicated "Domain Admins" created when upgraded. I have resolved that but now on the PDC (holding the PDC, RID and Infrastructure master roles) it is showing the "modification date" is different from the "Basline" which is showing a date from two years ago. However another of the DC's is showing the replication is fine between them.
DCDiag Error:
A warning event occurred. EventID: 0x00000087
Repladmin:
No Errors - Successfully in Sync
Dfsdiag /testdcs:
No Errors
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Not clear of the issues. The event logs may provide more details, then this one may also help.
https://learn.microsoft.com/en-us/troubleshoot/windows-server/group-policy/force-authoritative-non-authoritative-synchronization
--please don't forget to Accept as answer if the reply is helpful--
Thanks.
I did try both a non-authoritative restore and an authoritative restore. I now get an issue on the "ACL" which has reverted back to all the permissions being wrong in the SYSVOL on this DC only. Strange as the other one is fine and the PDC is fine.
I am debating to decommission this DC and recreate a new 2019 DC this one is a 2016 DC.
That may be the safer / simpler solution. Stand up a new one for replacement.
--please don't forget to Accept as answer if the reply is helpful--
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 28.999999999999996%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVW%3C/text%3E%3C/svg%3E)
Hi,
Just checking in to see if the information provided was helpful.
Please let us know if you would like further assistance.
Best Regards,
Vicky
Hi Vicky,
No it is still not resolved even by building a new DC - it is now showing as inaccessible.
Thanks
Ricky
it is now showing as inaccessible
Did you mean sysvol / netlogon missing?
FRS
https://support.microsoft.com/en-us/help/257338/troubleshooting-missing-sysvol-and-netlogon-shares-on-windows-domain-c
DFS
https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/troubleshoot-missing-sysvol-and-netlogon-shares
--please don't forget to Accept as answer if the reply is helpful--