Re: Receiving a File Replication Service error on 2 DC's.



We have not had issues with AD replication being disabled and no issues with
netlogon service being paused. We just applied windwos 2003 service pack 2
on all domain controllers last week. I will check for USN Rollbacks. I
think we might have a sysvol issue and I'm not able to attach the gpotools
sys_health logs as they are too large. How do I get them out to you?

"Jorge de Almeida Pinto [MVP - DS]" wrote:

How to detect and recover from a USN rollback in Windows 2000 Server
http://support.microsoft.com/?id=885875

How to detect and recover from a USN rollback in Windows Server 2003
http://support.microsoft.com/?id=875495

If I remember correctly you said you had w2k3 SP1. Do you have the above
hotfix installed? You can use NETDIAG to check for the installed hotfxes.

Have you, or collegues, experienced the following on ANY DC:
* AD replication being disabled
* netlogon service being paused

if the answer = NO for both, and looking at what you told me, my feeling is
that you did not experience USN rollbacks. However, I do suspect that the
cloning screwed up the SYSVOL replication.

use the GPOTOOL to perform a check on the SYSVOL on all DCs

GPOTOOL /Checkacl /verbose > SYSVOL_HEALTH.TXT

report back the output WITHOUT changes

also run:
NETDOM QUERY DC >DC.TXT
NETDOM QUERY FSMO > FSMO.TXT


--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"Eric Guzman" <EricGuzman@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:0974EBC5-2250-44EA-B09A-EE6160F8852E@xxxxxxxxxxxxxxxx
These are the instruction that I followed.

Version 1.40 of the SMP – P2P application supports migration of domain
controllers. To migrate a domain controller, reboot the server, press F8
to
boot to Directory Services Restore Mode (DSRM), and launch the SMP – P2P
Agent. The migration runs in Directory Services Restore Mode instead of
booting into SMP Agent Mode. As a result, CHKDSK does not run before the
migration of domain controllers. For more information about preparing a
migration of domain controllers, see your HP account manager for the white
paper Performing physical to ProLiant application migrations with the HP
ProLiant Essentials Server Migration Pack – Physical to ProLiant Edition

Thanks,
Eric

"Jorge de Almeida Pinto [MVP - DS]" wrote:

so for the other DCs the cloned/imaged DC did not "change" after the
creation of the image and before the restoration of the image. If that is
true, that is important an my guess is then that USN rollbacks are not
the
case here.

USN rollbacks are the case if the following would have happened:
DC1, DC2, DC3, DC4 --> all up and running
DC1 is shutdown, image is created, DC1 (the priginal one) is booted and
because of that changes occur (although YOU do not make ANY, but AD
itself
does!)
DC1 is shutdown again, the image is restored to other hardware and
booted.
For the other DCs the DC1 (the cloned) went back in time while still
having
the same identity (invocation ID) and THAT'S when USN rollbacks occur

wait a second.....you said SAFE MODE.... which safe mode?
1 safe mode
2 safe mode with networking
3 directory services restore mode

if 3, then you should be OK, If 1 or 2 then USN rollbacks might have
occured

do you understand what I'm saying?



--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"Eric Guzman" <EricGuzman@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:B4C8A7B4-0A6C-46D6-A742-037964849F04@xxxxxxxxxxxxxxxx
The HP Imaging software reboots the source DC server into safemode (so
I
believe this would be considered Offline). After the Image is
completed
it
then dumps the image into the new server hardware and at this time the
source
DC is shutdown. After the Image has completed loading on the
destination
DC
Server then drivers are loaded and then it comes up online after a
reboot.


"Jorge de Almeida Pinto [MVP - DS]" wrote:

when a server has been imaged/cloned. what happens to it? Is it
shutdown
or
is it rebooted to normal mode?

trying to determine if you may have experienced USN rollbacks or not.
Depending on that conclusion a path for a solution can be chosen

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test ANY suggestion in a test environment before
implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"Eric Guzman" <EricGuzman@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:FCBD91A4-539E-4FBC-8282-D40948599650@xxxxxxxxxxxxxxxx
We used the HP Server Migration Pack. Proliant edition.

For the domain controllers, the application boots the server into a
safe
mode and then copies the OS. Reboots the new server and then
injects
the
new
drivers.


"Jorge de Almeida Pinto [MVP - DS]" wrote:

stop focussing on the solution without even knowing what is going
on

explain the process of the P2P tool. what happens. is the server
imaged
while it is down (offline) or online?

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services
#

BLOG (WEB-BASED)-->
http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers
no
rights!
* Always test ANY suggestion in a test environment before
implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"Eric Guzman" <EricGuzman@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message
news:3B94E76F-4F99-4055-BCF6-C8A2768BF142@xxxxxxxxxxxxxxxx
for example: he said CLONING. my question is: WHEN? before or
after
the
promotion? and of course HOW was it done?
1000 possibilities here.

There is a total of 4 domain controllers and all were cloned back
in
November 2007 using an HP product that perfroms P2P (It basically
images
from
one phsyical server to another physical server). Only one of the
servers
was
demoted and then promoted after the conversion and it now only
gives
out
NTFRS warning messages in the event logs and the others give out
actually
NTFRS errors. So maybe demoting and promoting the problematic
ones
might
also work you think?

"Jorge de Almeida Pinto [MVP - DS]" wrote:

answer the questions I asked

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory
Services

BLOG (WEB-BASED)-->
http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)-->
http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question -->
http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and
confers
no
rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"Eric Guzman" <EricGuzman@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message
news:19037ACA-173F-4F9D-95CC-A95472E8B7AF@xxxxxxxxxxxxxxxx
O.K. so should I first detect and recover from a USN rollback
and
if
that
doesn't resolve my issue then perform a non-authoritative
restore
of
my
sysvol on all the domain controllers? Will this cause any
downtime?


"Paul Bergson [MVP-DS]" wrote:

I must have missed something Jorge, I couldn't find anything
although
it
does make sense that this is what happened.

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the
NewsGroup
This posting is provided "AS IS" with no warranties, and
confers
no
rights.

"Jorge de Almeida Pinto [MVP - DS]"
.



Relevant Pages

  • Re: Receiving a File Replication Service error on 2 DCs.
    ... To migrate a domain controller, reboot the server, press F8 ... boot to Directory Services Restore Mode, and launch the SMP - P2P ... migration of domain controllers, see your HP account manager for the ...
    (microsoft.public.windows.server.active_directory)
  • Re: Receiving a File Replication Service error on 2 DCs.
    ... List of domain controllers with accounts in the domain: ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... * This posting is provided "AS IS" with no warranties and confers no rights! ... Server then drivers are loaded and then it comes up online after a reboot. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Receiving a File Replication Service error on 2 DCs.
    ... The HP Imaging software reboots the source DC server into safemode (so I ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... For the domain controllers, the application boots the server into a safe ... you have to shut off replication). ...
    (microsoft.public.windows.server.active_directory)
  • Re: Receiving a File Replication Service error on 2 DCs.
    ... migration of domain controllers. ... migration of domain controllers, see your HP account manager for the white ... ProLiant Essentials Server Migration Pack... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ...
    (microsoft.public.windows.server.active_directory)
  • Re: DHCP service after migrate to win2k3
    ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... there will be two AD domain controllers at ... locations as logon server as well as provide network services like DNS, ... plus a backup DNS, how about DHCP service? ...
    (microsoft.public.windows.server.migration)

Loading