Windows Server 2003 - AD SYSVOL FRS 'Broken'

Discussion in 'File Systems' started by Jon Kloske, May 14, 2007.

  1. Jon Kloske

    Jon Kloske Guest

    Seeing this in the event logs on all Domain Controllers (and they all
    started at the same time):

    Startup information event 13501, 13516 1 second later, then immediately:
    ------------------
    Event Type: Error
    Event Source: NtFrs
    Event Category: None
    Event ID: 13506
    Date: 14/05/2007
    Time: 8:49:08 AM
    User: N/A
    Computer: DOMCTRLB
    Description:
    The File Replication Service failed a consistency check
    (QKey != QUADZERO)
    in "QHashInsertLock:" at line 696.

    The File Replication Service will restart automatically at a later time. If
    this problem persists a subsequent entry in this event log describes the
    recovery procedure.
    For more information about the automatic restart right click on My Computer
    and then click on Manage, System Tools, Services, File Replication Service,
    and Recovery.

    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.
    -------------------------

    Then we see the generic NtFrs 13555 error and 13502 information event
    immediately after the above, and finally 16 seconds later the 13505 error
    (and this is where FRS is stopped.)


    This happened around the time I used 7-Zip to compress a folder on the
    SYSVOL share of DOMCTRLA. We're running Symantec Antivirus on all DCs, and
    we have them fully updated with windows updates (but no hotfixes outside
    this update path as far as I'm aware.)

    We've seen a LOT of information about this error for Win2000, but everything
    seems to indicate this error is fixed in Win2K SP3, and Windows2003.

    I also saw somewhere else where someone had a similar problem to us and MS
    was looking at doing a root cause analysis.

    If anyone has any experience with this or knows something clever to try and
    is willing to offer assistance (or if MS wants any info we can provide - we
    have frsdiag output, but can't see where it highlight anything more than
    what the event logs told us...) feel free to reply to this but I'd
    appreciate being cc'd if possible as well.

    Regards,
    Jon.
     
    Jon Kloske, May 14, 2007
    #1
    1. Advertisements

  2. Jon Kloske

    Jon Kloske Guest

    This happened around the time I used 7-Zip to compress a folder on the
    Errr, that should have read "...a subfolder of the NETLOGON share..."
     
    Jon Kloske, May 14, 2007
    #2
    1. Advertisements

  3. Jon Kloske

    Jon Kloske Guest

    Apologies, but in the absence of an overwhelming response, we've just gone
    ahead and done a D4/D2* restore (it's only a couple of hundred megs) and the
    problem appears to have gone away.

    Regards,
    Jon.
     
    Jon Kloske, May 14, 2007
    #3
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.