DFSR service down ID 7031

fegume xx 6 Reputation points
2022-03-18T11:02:54.053+00:00

Hello.

I have one issue with the replication DCs with DFSR.

I run DCDIAG:

Starting test: Services
DFSR service stopped on [SRV-DC-1]
......................... SRV-DC-1 failed the Services test
Starting test: SystemLog
Error event. Event ID: 0xC0001B77
Creation time: 03/18/2022 10:14:30
Chain of events:
The DFS Replication service terminated unexpectedly. This has been repeated 1 times. The following corrective action will be taken in 1800000 milliseconds: Restart the service.
Error event. Event ID: 0xC0001B77
Creation Time: 03/18/2022 10:44:34
Chain of events:
The DFS Replication service terminated unexpectedly. This has been repeated 1 times. The following corrective action will be taken in 1800000 milliseconds: Restart the service.
Error event. Event ID: 0xC0001B77
Creation time: 03/18/2022 10:51:27
Chain of events:
The DFS Replication service terminated unexpectedly. This has been repeated 2 times. The following corrective action will be taken in 1800000 milliseconds: Restart the service.
......................... SRV-DC-1 failed SystemLog test

The Event View show:

ID 7031 Source Sercice Control Manager

I have two DCs SRV-DC-1 and SRV-DC-2.
The problem is only with SRV-DC-1. DFSR service is down. I try to start, but seconds later it drops again.

I think the problem is permissions on C:\windows\SYSVOL

I try a test copy with my admin user on \srv-dc-1\netlogon and it tells me I don't have permissions.. this same test on \srv-dc-2\netlogon is fine.

Finally, I see that you are not reading the read group permissions, just the users... the share right and NTFS is the administrators group. I try to add my user in this folder and I can copy data in this folder but with admin group it doesn't work... only on SRV-DC-1. With the SRV-DC-2 it's fine, same setup.

all AD Roles are on SRV-DC-1.

Please, any ideas?

Greetings!

Windows for business | Windows Client for IT Pros | Directory services | Active Directory
Windows for business | Windows Server | User experience | Other
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Thameur-BOURBITA 36,266 Reputation points Moderator
    2022-03-18T11:06:31.433+00:00

    Hi,

    Do you see any errors in vent viewer on impacted Domain controller ?

    Please don't forget to mark helpful reply as answer

    0 comments No comments

  2. fegume xx 6 Reputation points
    2022-03-18T12:55:12.307+00:00

    I think that all right:

    C:\Windows\System32>dcdiag

    Directory Server Diagnostics

    Performing initial installation:
    Trying to find the main server...
    Primary server = SRV-DC-1
    * AD forest identified.
    Compilation of initial information completed.

    Performing Initial Required Tests

    Testing server: Default-first-site-name\SRV-DC-1
    Starting Test: Connectivity
    ......................... SRV-DC-1 passed Connectivity test

    Performing main tests

    Testing server: Default-first-site-name\SRV-DC-1
    Starting test: Advertising
    ......................... SRV-DC-1 passed Advertising test
    Starting test: FrsEvent
    ......................... SRV-DC-1 passed FrsEvent test
    Starting test: DFSREvent
    ......................... SRV-DC-1 passed DFSREvent test
    Starting test: SysVolCheck
    ......................... SRV-DC-1 passed SysVolCheck test
    Starting test: KccEvent
    ......................... SRV-DC-1 passed KccEvent test
    Starting test: KnowsOfRoleHolders
    ......................... SRV-DC-1 passed KnowsOfRoleHolders test
    Starting test: MachineAccount
    ......................... SRV-DC-1 passed MachineAccount test
    Starting test: NCSecDesc
    ......................... SRV-DC-1 passed NCSecDesc test
    Starting test: NetLogons
    ......................... SRV-DC-1 passed NetLogons test
    Starting test: ObjectsReplicated
    ......................... SRV-DC-1 passed the ObjectsReplicated test
    Starting test: Replications
    ......................... SRV-DC-1 passed Replications test
    Starting test: RidManager
    ......................... SRV-DC-1 passed RidManager test
    Starting test: Services
    DFSR service stopped on [SRV-DC-1]
    ......................... SRV-DC-1 failed the Services test
    Starting test: SystemLog
    Error event. Event ID: 0xC0001B77
    Creation time: 03/18/2022 12:51:42
    Chain of events:
    The DFS Replication service terminated unexpectedly. This has been repeated 22 times. The following corrective action will be taken in 1800000 milliseconds: Restart the service.
    Error event. Event ID: 0xC0001B77
    Creation time: 03/18/2022 12:52:21
    Chain of events:
    The DFS Replication service terminated unexpectedly. This has been repeated 23 times. The following corrective action will be taken in 1800000 milliseconds: Restart the service.
    Error event. Event ID: 0xC0001B77
    Creation Time: 03/18/2022 12:53:40
    Chain of events:
    The DFS Replication service terminated unexpectedly. This has been repeated 24 times. The following corrective action will be taken in 1800000 milliseconds: Restart the service.
    Error event. Event ID: 0xC0001B77
    Creation time: 03/18/2022 13:02:27
    Chain of events:
    The DFS Replication service terminated unexpectedly. This has been repeated 25 times. The following corrective action will be taken in 1800000 milliseconds: Restart the service.
    Warning event. Event ID: 0x000727A5
    Creation time: 03/18/2022 13:13:04
    Chain of Events: The WinRM service is not listening for requests from WS-Management.
    Warning event. Event ID: 0x00001796
    Creation time: 03/18/2022 13:13:54
    Chain of events:
    Microsoft Windows Server has detected that NTLM authentication is currently being used between clients and this server. This event occurs once per server startup the first time a client uses NTLM with this server.
    Error event. Event ID: 0xC0001B77
    Creation time: 03/18/2022 13:14:03
    Chain of events:
    The DFS Replication service terminated unexpectedly. This has been repeated 1 times. The following corrective action will be taken in 1800000 milliseconds: Restart the service.
    Error event. Event ID: 0xC0001B61
    Creation time: 03/18/2022 13:15:11
    Chain of events:
    Connection to Web Account Manager service timed out (30000ms).
    Error event. Event ID: 0xC0001B58
    Creation time: 03/18/2022 13:15:11
    Chain of Events: The Web Account Manager service failed to start due to the following error:
    Error event. Event ID: 0x00002715
    Creation time: 03/18/2022 13:15:11
    Chain of events:
    DCOM error "1053" when
    try to start the TokenBroker service with "Not available" arguments to run the server:
    Error event. Event ID: 0x0000271A
    Creation time: 03/18/2022 13:15:12
    Chain of events:
    The server {A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D} did not register with DCOM within the required timeout.
    Error event. Event ID: 0xC0001B77
    Creation time: 03/18/2022 13:44:07
    Chain of events:
    The DFS Replication service terminated unexpectedly. This has been repeated 1 times. The following corrective action will be taken in 1800000 milliseconds: Restart the service.
    Error event. Event ID: 0xC0001B77
    Creation time: 03/18/2022 13:47:37
    Chain of events:
    The DFS Replication service terminated unexpectedly. This has been repeated 2 times. The following corrective action will be taken in 1800000 milliseconds: Restart the service.
    ......................... SRV-DC-1 failed SystemLog test
    Starting test: VerifyReferences
    ......................... SRV-DC-1 passed VerifyReferences test

    Running partition tests on: DomainDnsZones
    Starting test: CheckSDRefDom
    ......................... DomainDnsZones passed the CheckSDRefDom test
    Starting test: CrossRefValidation
    ......................... DomainDnsZones passed the CrossRefValidation test

    Running partition tests on: ForestDnsZones
    Starting test: CheckSDRefDom
    ......................... ForestDnsZones passed the CheckSDRefDom test
    Starting test: CrossRefValidation
    ......................... ForestDnsZones passed the CrossRefValidation test

    Running partition tests on: Schema
    Starting test: CheckSDRefDom
    ......................... Schema passed CheckSDRefDom test
    Starting test: CrossRefValidation
    ......................... Schema passed CrossRefValidation test

    Running partition tests in: Configuration
    Starting test: CheckSDRefDom
    ......................... Configuration passed CheckSDRefDom test
    Starting test: CrossRefValidation
    ......................... Configuration passed the CrossRefValidation test

    Running partition tests on: domainTT2
    Starting test: CheckSDRefDom
    ......................... domainTT2 passed the CheckSDRefDom test
    Starting test: CrossRefValidation
    ......................... domainTT2 passed the CrossRefValidation test

    Running enterprise tests on: domainTT2.oa
    Starting test: LocatorCheck
    ......................... domainTT2.oa passed the LocatorCheck test
    Starting test: Intersite
    ......................... domainTT2.oa passed the Intersite test

    My DCs is Windows 2019--> Microsoft Windows [Versión 10.0.17763.2565]

    Do you need send any log o command report?

    Thanks!

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.