Thursday 18 October 2012

Missing sysvol and netlogon on Windows 2003/2008 server

What:

Domain controller on Windows 2003/2008 server

Problem:

I had few issues upgrading DC.
After following some advice from event log and forums I created new registry key in
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtFrs\Parameters
new DWORD value "Enable Journal Wrap Automatic Restore" and set it to 1

Restarted ntfrs service and after some time. sysvol and netlogon folders disappeared.

Solution:

Log in with your local account to the server you should see that policies and scripts were moved to
C:\WINDOWS\SYSVOL\sysvol\domain\NtFrs_PreExisting___See_EventLog folder
Take a copy of that and keep it in a save place.

Restore FRS replicas with BurFlags

The global BurFlags registry key contains REG_DWORD values, and is located in the following location in the registry:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup
The most common values for the BurFlags registry key are:

* D2, also known as a nonauthoritative mode restore
* D4, also known as an authoritative mode restore

Use D2 value and restart ntfrs service, sysvol folder should be back and users should be able to log on, but netlogon folder might be still missing. Recreate netlogon scripts from a copy and restart netlogon service.

More information about BurFlags
http://support.microsoft.com/kb/290762

No comments:

Post a Comment