Re: Backup of GPO

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



Hi Puchatek,

For the error: "The File Replication Service has detected that the replica
set "DOMAIN SYSTEM VOLUME (SYSVOL SHARE)" is in JRNL_WRAP_ERROR.", the
issue should caused by that the File Replication service (FRS) does not run
correctly.

>From the error information, it appears that the domain controller is in
journal wrap, so setting the registry key and doing an automatic recovery
as mentioned in the event text is no longer recommended. Please make the
following changes to the registry to resolve this issue.
--------------------------------------------
WARNING: If you use Registry Editor incorrectly, you may cause serious
problems that may require you to reinstall your operating system. Please
backup the Registry Editor first so that any unexpected thing happened, you
can restore it back.
--------------------------------------------

1. Stop FRS. (Net Stop ntfrs)

2. Start Registry Editor (Regedt32.exe).

3. Locate and click the following key in the registry:


HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NtFrs\Parameters\Ba
ckup/Restore/Process at Startup

4. On the Edit menu, click Add Value, and then add the following registry
value:

Value name: BurFlags

Data type: REG_DWORD

Radix: Hexadecimal

Value data: D2

5. Quit Registry Editor.

6. Restart FRS. (Net Start ntfrs)

After performing the above steps, please try to monitor and test your
server again. how about the result?

And also you can take look of the following KB article:

315457 How to Rebuild SYSVOL and Its Content in a Domain
http://support.microsoft.com/?id=315457

Using the Dcgpofix.exe tool to restore security settings in the Default
Domain Controller Policy to the same state will leads to some potential
problem to the SBS server box. And the Dcgpofix tool should be used in
disaster recovery scenarios. Please refer to the following KB article to
get more detail information:

833783 The Dcgpofix tool does not restore security settings in the Default
http://support.microsoft.com/?id=833783

What is more, I have mailed you the default GPO by mail.

I appreciate your time! I am happy to be assistance of you and look forward
to hearing from you.

Have a nice day!

Sincerely,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>From: "puchatek" <stumilowylas@xxxxxxxxx>
>Newsgroups: microsoft.public.windows.server.sbs
>Subject: Re: Backup of GPO
>Date: 15 Nov 2005 01:12:14 -0800
>Organization: http://groups.google.com
>Lines: 16
>Message-ID: <1132045934.506079.217670@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
>References: <1131981228.966149.100490@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
> <kgGWFJZ6FHA.832@xxxxxxxxxxxxxxxxxxxxx>
> <#4xF8VZ6FHA.3892@xxxxxxxxxxxxxxxxxxxxx>
>NNTP-Posting-Host: 80.53.90.10
>Mime-Version: 1.0
>Content-Type: text/plain; charset="iso-8859-1"
>X-Trace: posting.google.com 1132045939 26771 127.0.0.1 (15 Nov 2005
09:12:19 GMT)
>X-Complaints-To: groups-abuse@xxxxxxxxxx
>NNTP-Posting-Date: Tue, 15 Nov 2005 09:12:19 +0000 (UTC)
>In-Reply-To: <#4xF8VZ6FHA.3892@xxxxxxxxxxxxxxxxxxxxx>
>User-Agent: G2/0.2
>X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1;
NET CLR 1.1.4322),gzip(gfe),gzip(gfe)
>X-HTTP-Via: 1.1 XL
>Complaints-To: groups-abuse@xxxxxxxxxx
>Injection-Info: g47g2000cwa.googlegroups.com; posting-host=80.53.90.10;
> posting-account=9S0LJg0AAAC3uK-oLAlA4qVqhPHg826A
>Path:
TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
ne.de!news.glorb.com!postnews.google.com!g47g2000cwa.googlegroups.com!not-fo
r-mail
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:222366
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Hi,
>
>Thank you, please send it to puchatek(at)compart.pl
>
>I had a problem with NTFRS (Event ID: 13561)
>"The File Replication Service has detected that the replica set "DOMAIN
>SYSTEM VOLUME (SYSVOL SHARE)" is in JRNL_WRAP_ERROR."
>Now my SYSVOL directory is empty. I was using Dcgpofix.exe to recreate
>standart policies, but it creates only windows 2003 server policies,
>not sbs 2003.
>
>thank you
>
>--
>puchatek
>
>

.



Relevant Pages

  • Re: AD - Master domain controller
    ... Did you perform and authoritative restore? ... http://support.microsoft.com?kbid=216243 "Authoritative Restore of Active Directory and Impact on Trusts and Computer Accounts" ... http://support.microsoft.com?kbid=266679 "Pre-staging the File Replication Service Replicated Files on SYSVOL and Distributed File System Shares for Optimal Synchronization" ... http://support.microsoft.com?kbid=290762 "FRS Using the BurFlags Registry Key to Reinitialize File Replication Service Replica Sets" ...
    (microsoft.public.win2000.active_directory)
  • Re: SYSVOL Replication Problem
    ... Recovering missing FRS objects and FRS attributes in Active Directory ... and errors encountered by File Replication Service while polling the ... Controller Bethune.epmgpc.com for FRS replica set configuration ...
    (microsoft.public.windows.server.active_directory)
  • Re: event id:13552
    ... The File Replication Service is having trouble enabling replication from DC2 ... FRS can not correctly resolve the DNS name dc2.domainname.com from this ... more file updates every hour for the last 3 hours because the updates did not ... Suppression of updates can be disabled by running regedit. ...
    (microsoft.public.win2000.active_directory)
  • Re: dcdiag er
    ... is booting the frs isn't started so shows up the 1st message, ... The File Replication Service Event log test ... No record of File Replication System, SYSVOL started. ...
    (microsoft.public.win2000.active_directory)
  • Re: FRS Failure
    ... Start Registry Editor. ... On the Edit menu, click Add Value, and then add the following ... Data type: REG_DWORD ... Restart FRS. ...
    (microsoft.public.windows.server.active_directory)