adprep /domainprep

Discussion in 'Active Directory' started by Grant Stevenson, Feb 4, 2004.

  1. Having spent hours going through all articles, newsgroups etc, I am totally stuck

    One policy does have adm folder under sysvol, the other doesn't. As there has been no configuration of GPO, can I just copy the folder over

    The error I am getting is unable to locate sysvol share. I have followed all of the kb articles in the threads here and all latest service packs/hotfixes are installed, although I haven't yet been able to find ntfrsutl.exe anywhere.
     
    Grant Stevenson, Feb 4, 2004
    #1
    1. Advertisements

  2. Grant Stevenson

    Simon Geary Guest

    Don't manually copy anything from one sysvol folder to another, that will
    only cause more FRS replication and will make things worse. You need to
    concentrate on the root problem which seems to be a missing sysvol share.
    Once this is corrected your FRS should hopefully sort itself out.

    You may have seen these KB's before but I'll list them just in case. Have
    you tried the troubleshooting steps here? If you have, where do you get
    stuck and are there any error messages or relevant event log entries?

    http://support.microsoft.com/?id=257338
    http://support.microsoft.com/?id=327781

    Run a dcdiag /v and netdiag /v on your domain controllers and post back any
    errors, this might also yield some useful information as to the cause.

    You can find ntfrsutl in the Windows 2000\2003 Support tools that can be
    installed from the CD. I think it's also in the resource kit.

    has been no configuration of GPO, can I just copy the folder over?
    all of the kb articles in the threads here and all latest service
    packs/hotfixes are installed, although I haven't yet been able to find
    ntfrsutl.exe anywhere.
     
    Simon Geary, Feb 4, 2004
    #2
    1. Advertisements

  3. Grant Stevenson

    Simon Geary Guest

    The guid number folders in \winnt\sysvol\sysvol\domain-name\policies should
    be identical on all DC's, as should the contents. If the content of these
    folders is different that would indicate an FRS problem. Is this what you
    mean? What command were you running with ntfrsutl and I'll check it on my
    network to see what the output should be. Remember that each DC also has a
    GUID in DNS, perhaps this is what is being reported.

    One thing to check, in your Policies folder do you have any folders that
    include _NTFRS in the folder name?

    in sysvol share via navigating on local drive and through ad users and
    computers, I noticed that those policy giuds don't seem to correspond to
    anything reported in ntfrsutl - should they, and to which?
     
    Simon Geary, Feb 4, 2004
    #3
  4. Posted this reply once about 30 mins ago but still hasn't appeared so I apologise if it does now;

    Thanks Simon

    I have followed the kb articles and have no errors, and there are no errors in event logs, however..

    I have noticed that the guid's for the 2 policies listed in active directory users and computers snap in do not seem to match any of those in the output from ntfrsutil ds. Should they, and if so which, and what can be done to resolve this?
     
    Grant Stevenson, Feb 4, 2004
    #4
  5. The guid's are identical on pdc and bdc in \winnt\sysvol\sysvol\domain-name\policies
    There are no folders named _ntfrs

    I ran ntfrsutl ds "nameofdc" against both. What I am saying is that none of the guid's appearing in the results correspond to the guid's appearing in \winnt\sysvol\sysvol\domain-name\policies.
     
    Grant Stevenson, Feb 4, 2004
    #5
  6. I suggest downloading the Group Policy Management Console:
    http://www.microsoft.com/downloads/...4F-50CE-42C7-A401-30BE1EF647EA&displaylang=en
    Group Policy Management Console with Service Pack 1

    you should read the white paper:
    http://www.microsoft.com/windowsserver2003/gpmc/gpmcwp.mspx
    Administering Group Policy with the GPMC


    GMPC has some nice features that will allow you to check the consistancy of
    your Group Policies across your entire domain.

    tx

    --
    Jeromy Statia [MSFT]

    This posting is provided "AS IS" with no warranties, and confers no rights.


    errors in event logs, however..
    directory users and computers snap in do not seem to match any of those in
    the output from ntfrsutil ds. Should they, and if so which, and what can be
    done to resolve this?
     
    Jeromy Statia [MSFT], Feb 4, 2004
    #6
  7. This package will not install on 2000 server
     
    Grant Stevenson, Feb 5, 2004
    #7
  8. I'm tring to find a white paper on how to use GPMC to triage the group
    policy failures... but having no luck. There should be a tool which you
    can run that will search through AD extract all the group policies and then
    check the sysvol share of all your Domain controllers to ensure the group
    policy objects are configured properly that comes with GPMC.msc

    tx

    --
    Jeromy Statia [MSFT]

    This posting is provided "AS IS" with no warranties, and confers no rights.


    resolved the issue
     
    Jeromy Statia [MSFT], Feb 5, 2004
    #8
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.