SYSVOL seems to be messed after promoting a new DC

Question

I promoted a new DC, but after that I am not totally sure if SYSVOL is working properly. I looked for the warnings/errors but they have different possible solutions and I do not know what to do. Below are the warnings/error I have found:

There are warning or error events within the last 24 hours after the SYSVOL has been shared. Failing SYSVOL
replication problems may cause Group Policy problems.
......................... VSRVMDC01 failed test DFSREvent
An error event occurred. EventID: 0xC0001B81

20220521 20:54:37.742 9744 INCO 7114 InConnection::RestartSession Retrying establish contentset session. connId:{C328CDFF-0A65-4180-8250-7B6A27750081} csId:{C5CAE082-A025-459D-A976-21D1C8B97A86} csName:SYSVOL Share
20220521 20:54:37.742 9744 INCO 1021 [WARN] SessionTask::Step (Ignored) Failed, should have already been processed. Error:

• [Error:9027(0x2343) InConnection::TransportEstablishSession inconnection.cpp:7701 9744 C A failure was reported by the remote partner]
• [Error:9027(0x2343) DownstreamTransport::EstablishSession downstreamtransport.cpp:4076 9744 C A failure was reported by the remote partner]
• [Error:9027(0x2343) DownstreamTransport::EstablishSession downstreamtransport.cpp:4055 9744 C A failure was reported by the remote partner]
• [Error:9051(0x235b) DownstreamTransport::EstablishSession downstreamtransport.cpp:4055 9744 C The content set is not ready]

DFS Report:

The last DFS replication logs on event viewer show IDs like 6806, 1210, 1206, 6102, 5004, so I do not know if I can just ignore messages.

Hope you can help me.

Answer 1

Can you please post the results of the following commands: dcdiag /v /e > C:\dcdiag.txt & repadmin /showrepl * > C:\repl.txt. Also what OS is the DC running? Is it in a remote site?

Answer 2

Hi,

The files are attached204289-dcdiag.txt204298-repl.txt

2 Dcs are running on Windows server 2012 and one server (the one I promoted 2 days ago is running on Windows 2019). Three servers are on the same site.

Answer 3

Are the sysvol and netlogon shares visible on new DC? Which one is new DC?

Answer 4

Yes, they are. The new DC is VSRVMDC03

Answer 5

5002 is somewhat generic
https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-dfsrh/5e8dd1e4-bae9-4af0-8405-4d18fc7688f0

you could check the event details for more clues. Also could try a non-authoritative sync
https://learn.microsoft.com/en-US/troubleshoot/windows-server/group-policy/force-authoritative-non-authoritative-synchronization

--please don't forget to upvote and Accept as answer if the reply is helpful--