Re: Group policy and File Replication Service

Oh one other thing. so given that the replication partners causing the erros
are offline, is that error really what's resulting in the group policy
failure? I'm just trying really hard to connect the dots. I assumed on
initial glance at the logs, that these file rep service errors had to the
source of the problem, but now i'm not sure...now that i know they aren't
even online. then there's the issue of there being 2 other DC's across the
country and connected over a vpn tunnel. ugh. What if I went into dfs and
took those replication partners offline... the ones that are up/down all the
time??

"Amanda" wrote:

> I agree with you. I'm sure it does cause problems but alas... The situation
> is this, the company that I work for designs software and some of the
> developers require laptops running server and configured as DC's. Honestly I
> think some of them are no longer in use period. I'm new onboard and have been
> trying to determine what's up with the group policy not working.
>
> "Darren Mar-Elia (MVP)" wrote:
>
> > Yikes, they really promise it in the Technet subscription? Wow, that's
> > pretty amazing!
> >
> > Anyway, to your problem. The periodically offline DCs are only a problem if,
> > when they are online, clients are trying to authenticate to them and they
> > don't have SYSVOL properly shared out. In that case, GP processing will
> > fail. May I ask why they are periodically offline? That causes other
> > problems as you may know, because changes made to AD since the last time
> > they were online won't necessarily replicate out in a timely manner. I would
> > think that you're just asking for trouble with that kind of situation.
> >
> > Darren
> > --
> > Darren Mar-Elia
> > MS-MVP-Windows Server--Group Policy
> > Check out http://www.gpoguy.com -- The Windows Group Policy Information Hub:
> > FAQs, Whitepapers and Utilities for all things Group Policy-related
> > And, the Windows Group Policy Guide is out from Microsoft Press!!! Check it
> > out at http://www.microsoft.com/mspress/books/8763.asp
> > GPOGUY Blog: http://blogs.dirteam.com/blogs/gpoguy
> >
> >
> >
> > "Amanda" <Amanda@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> > news:EE5EAE06-5EB0-44E0-8936-D84EC6CD4E5A@xxxxxxxxxxxxxxxx
> > > thank you for your response. The "response by next biz day" that I was
> > > referring to...this is what I was told when I bought my technet
> > > subscription.
> > >
> > > Anyway, does it matter that the frs errors I'm seeing on the DC are for
> > > machines that are not always on the network? Isn't this behavior expected
> > > when some of the other DC's it's trying to replicate with are offline?
> > > Would
> > > that still cause a problem with group policies for the users? I really
> > > appreciate your help on this. I'm confused!!!
> > >
> > > "Darren Mar-Elia (MVP)" wrote:
> > >
> > >> Amanda,
> > >> Alas, there is no "SLA" on public newsgroups--at least, not that I know
> > >> of.
> > >> But, with respect to your problem, yes, the inability for some DCs to
> > >> enable
> > >> SYSVOL replication will prevent clients from getting GP correctly. Every
> > >> DC
> > >> needs to have shared Netlogon and SYSVOL. If they are not, you will have
> > >> GP
> > >> problems because clients read GP settings from the SYSVOL portion of a
> > >> GPO.
> > >> So, your first order of business is to fix FRS replication between all
> > >> your
> > >> DCs. There are a lot of KB articles on FRS problems, but I would
> > >> recommend
> > >> starting with this one:
> > >> http://support.microsoft.com/kb/290762/en-us
> > >>
> > >> --
> > >> Darren Mar-Elia
> > >> MS-MVP-Windows Server--Group Policy
> > >> Check out http://www.gpoguy.com -- The Windows Group Policy Information
> > >> Hub:
> > >> FAQs, Whitepapers and Utilities for all things Group Policy-related
> > >> And, the Windows Group Policy Guide is out from Microsoft Press!!! Check
> > >> it
> > >> out at http://www.microsoft.com/mspress/books/8763.asp
> > >> GPOGUY Blog: http://blogs.dirteam.com/blogs/gpoguy
> > >>
> > >>
> > >>
> > >> "Amanda" <Amanda@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> > >> news:37E15644-6781-4602-AA57-77E5C0762FE8@xxxxxxxxxxxxxxxx
> > >> >I thought that these posts are supposed to be receive a response by next
> > >> > business day?
> > >> >
> > >> > "Amanda" wrote:
> > >> >
> > >> >> Hello,
> > >> >> I'm having a problem with Group policy. We have 5 DC's on our network.
> > >> >> The
> > >> >> problem is that some of them are only online part time. I'm seeing
> > >> >> lots
> > >> >> of
> > >> >> rile replication and kerberos errors in the event log on the PDC. The
> > >> >> servers
> > >> >> that that Server1 is having trouble connecting to are the ones that
> > >> >> are
> > >> >> offline part time. So it isn't surprising to me that these errors are
> > >> >> showing
> > >> >> up. The problem is that along with the errors there is an issue with a
> > >> >> very
> > >> >> important group policy replicating to all the clients. A popup is
> > >> >> supposed to
> > >> >> occur when clients logon to the network and that is not happening on
> > >> >> most
> > >> >> machines. How do I go about fixing this and are these issues all
> > >> >> related?
> > >> >> Below is one of the errors I'm getting:
> > >> >>
> > >> >> Event Type: Warning
> > >> >> Event Source: NtFrs
> > >> >> Event Category: None
> > >> >> Event ID: 13508
> > >> >> Date: 1/19/2005
> > >> >> Time: 8:20:43 AM
> > >> >> User: N/A
> > >> >> Computer: Server1
> > >> >> Description:
> > >> >> The File Replication Service is having trouble enabling replication
> > >> >> from
> > >> >> Server2 to Server1 for drive:\winnt\sysvol\domain using the DNS name
> > >> >> Server2.domainname.suffix FRS will keep retrying.
> > >> >> Following are some of the reasons you would see this warning.
> > >> >>
> > >> >> [1] FRS can not correctly resolve the DNS name
> > >> >> martin.here.bates.ctc.edu
> > >> >> from this computer.
> > >> >> [2] FRS is not running on server2.domainname.suffix.
> > >> >> [3] The topology information in the Active Directory for this replica
> > >> >> has
> > >> >> not yet replicated to all the Domain Controllers.
> > >> >>
> > >> >> This event log message will appear once per connection, After the
> > >> >> problem
> > >> >> is fixed you will see another event log message indicating that the
> > >> >> connection has been established.
> > >> >>
> > >>
> > >>
> > >>
> >
> >
> >
.

Relevant Pages

  • Re: Cant change offline folders disk space usage
    ... Modify the Group Policy Object: ... The registry value is set before the cache size operation. ... This newsgroup only focuses on SBS technical issues. ... In other words, when I tell a network folder to be available offline, only ...
    (microsoft.public.windows.server.sbs)
  • Re: Working offline on laptop - slow logon
    ... We have Windows XP clients, ... We let them log on to their laptops offline with AD's cached ... This can be fed to clients via a group policy from a Windows 2000 ...
    (microsoft.public.windowsxp.general)
  • Re: Working offline on laptop - slow logon
    ... We have Windows XP clients, ... We let them log on to their laptops offline with AD's cached ... and a copy/cache of the server profile locally. ... This can be fed to clients via a group policy from a Windows 2000 ...
    (microsoft.public.windowsxp.general)
  • Re: Group policy Management delegation
    ... No offense but I've been watching the posts you've been making on this list and by and large they provide no real value in terms of solving Group Policy problems but rather are predominantly pitches for your company's products, which in most cases are unecessary to the problem and not helpful. ... When focused on a GPO, choose the Delegation tab and you can grant your GP Admins group modify rights there. ... Offline Repository. ...
    (microsoft.public.windows.group_policy)
  • Re: MS ADAM/AD: Absolute simplest repl/sync solution for MS ADAM on 2 or more WinXP machines?
    ... The ITB solution is replication as part of a configuration set, ... if the replication partners are going to be offline for significant ... "Michael Herman " ...
    (microsoft.public.windows.server.active_directory)
Loading