sysvol is not shared but it is replicated

Question

I promoted a new domain controller, but netlogon and sysvol were missing, I check this: ![210397-image.png][1] there is an event id 4604 indicating that replication has already started, I created a couple of GPOs an they were replicated between all three domain controllers, the rest of GPOs were also replicated, repadmin was not showwing any errors, I changed a SysvolReady registry, I perfomed a D2 restoration but still SYSVOL and netlogon were not shared on this DC. Can I just shared as a normal folder? [1]: /api/attachments/210397-image.png?platform=QnA

Answer 1

Hello

Thank you for your question and reaching out. I can understand you are having issues related to SYSVOL folder not sharing.

It can be issue with network connections that blocking Traffic of AD . Disable any Antivirus program or Windows firewall you may have for temporary purpose.

Please try to force an authoritative, or non-authoritative synchronization for DFSR-replicated SYSVOL (like "D4/D2" for FRS)
https://learn.microsoft.com/en-US/troubleshoot/windows-server/group-policy/force-authoritative-non-authoritative-synchronization

Please verify on new DC ip should be of Health DC and not of your Firewall or Router ip.
https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/troubleshoot-missing-sysvol-and-netlogon-shares

-------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept as answer--

Answer 2

Might try demoting, reboot, promo it again.

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 3

Hi again,

I applied the steps you recommended, and I also checked: 4604 indicating that replication has already started, I created a couple of GPOs an they were replicated between all three domain controllers, I deleted the two GPOs created (no problem showed), the rest of GPOs were also replicated, repadmin was not showing any errors, SYSVOL and Netlogon folders were shared.

Before promoting the DC again, I renamed the sysvol folder and I got this message just once: Local path of replicated folder SYSVOL Share does not match the newly configured local path.
Affected replicated folders: SYSVOL Share
Description: The DFS Replication service detected that the local path of a replicated folder C:\Windows\SYSVOLOLD\domain in its database does not match the newly configured local path C:\Windows\SYSVOL\domain of the replicated folder SYSVOL Share. The service will replicate the new path, and the old replicated folder path in the database will no longer be tracked as a replicated folder. Event ID: 6406

I have been testing and I do not see any errors, can I monitor this behavior and maybe ignore the message since after this, the event ID 4604 appeared.

Answer 4

I renamed the sysvol folder and I got this message

If it were me I'd get rid of this one, then confirm the domain health is 100% before attempting to add another.

--please don't forget to upvote and Accept as answer if the reply is helpful--