Answered by:
SYSVOL and NETLOGON Share is missing

-
I have done Primary Domain Controller restore test using NetBackup in my Lab. But after restore i found that sysvol and Netlogon shares are missing.Then i followed the article and changed the following registry value.
- In the Command box, type net stop ntfrs.
- Locate the following subkey in the registry:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup
- In the right pane, double click BurFlags.
- In the Edit DWORD Value dialog box, type D4 and then click OK.
- Run
net start ntfrs
After this Sysvol Folder comes up without any script or any content in that. Netlogon also missing. How to restore this.
Question
Answers
-
Problem Has been resolved after doing the below procedure.
Sysvol and Netlogon shares will be missing do not work
Run the following command on all domain controllers in the forest.
Net Stop NTFRS (stop the file replication service)
Go Into Registry Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup
Change the BurFlags DWORD to = D4 on the Primary Domain Controller and change to D2 on all of the backup domain controllers.
Start the NTFRS service again by using Net Start NTFRS command
On the server where you edited the BurFlags DWORD to D4 copy the folders in the folder NtFrs_PreExisting___See_EventLog to C:\WINDOWS\SYSVOL\sysvol\yourdomain.localIn the Command box on the server where you set the DWORD to D4, type net start ntfrs.
Start the Net Logon Service
- Marked as answer by shehimkannur Wednesday, February 15, 2017 8:05 AM
All replies
-
> 4. In the Edit DWORD Value dialog box, type D4 and then click OK.If you restored this DC, you should have transferred all FSMO roles to another DC. And in this case, you MUST NOT use D4, but D2...> After this Sysvol Folder comes up without any script or any content in that. Netlogon also missing. How to restore this.Restore from backup.
-
-
Hello,
When you say "lab" I assume that this restored DC is the only domain controller existing there. Right?
Are you sure your SYSVOL is replicated using NtFrs and not DFS? DFS replicated SYSVOL requireds other restore procedure, that is described here: https://kx.cloudingenium.com/microsoft/servers/windows-servers/force-authoritative-non-authoritative-synchronization-dfsr-replicated-sysvol-like-d4d2-frs/ (Please note, that as this is not Microsoft resource, it can change at any time, so you are using it at your own risk).
/Bulat
-
-
In short: dfsrmig.exe /getglobalstate
The first chapter of the following article contains more detailed information on determining whether it is NtFrs and DFS: https://msdn.microsoft.com/en-us/library/windows/desktop/cc507518%28v=vs.85%29.aspx?f=255&MSPPError=-2147217396
/Redards
-
Depending on the server version you're running as your DC, you can check the event logs --> applications and services logs --> DFS Replication.
You can also type this command in: dfsrmig.exe /getglobalstate
If it states: DFSR migration has not yet initialized then you're running FRS. If it says "Eliminated" then your DC is using DFS-R.
This is the utility used in migrating replication from NTFRS to DFS-R which DFS-R is what server 2008 and above have moved too. MS has moved away from NTFRS.
What server version are you running (2008, 2008 R2, 20102, etc)?
JB
- Edited by JBerg712 Tuesday, January 24, 2017 3:59 PM Added more info.
-
the only way to verify Sysvol replication is to check the policy count and error event
Regards,
Ganesamoorthy.S
www.windowstricks.in) -
-
-
-
Hi,
Regarding this error, please refer to: https://support.microsoft.com/en-us/help/947022/the-netlogon-share-is-not-present-after-you-install-active-directory-domain-services-on-a-new-full-or-read-only-windows-server-2008-based-domain-controller
Best regards,
WendyPlease remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com. -
When i go to sysvol i can see a folder created and all script exist there c:\windows\sysvol\domain\NtFrs_PreExisting___See_EventLog.
- Edited by shehimkannur Wednesday, February 1, 2017 10:03 AM
-
Hi,
Just checking in to see if the information provided was helpful. Have you tried the suggested method regarding that error? Any result?
Best Regards,
Wendy
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com. -
Problem Has been resolved after doing the below procedure.
Sysvol and Netlogon shares will be missing do not work
Run the following command on all domain controllers in the forest.
Net Stop NTFRS (stop the file replication service)
Go Into Registry Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup
Change the BurFlags DWORD to = D4 on the Primary Domain Controller and change to D2 on all of the backup domain controllers.
Start the NTFRS service again by using Net Start NTFRS command
On the server where you edited the BurFlags DWORD to D4 copy the folders in the folder NtFrs_PreExisting___See_EventLog to C:\WINDOWS\SYSVOL\sysvol\yourdomain.localIn the Command box on the server where you set the DWORD to D4, type net start ntfrs.
Start the Net Logon Service
- Marked as answer by shehimkannur Wednesday, February 15, 2017 8:05 AM
-
Hi,
Thank you for the great share, it will be greatly helpful to others who have the same question.
Best regards,
WendyPlease remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com. -
shehimkannur's solution did it for me. I didn't understand the last part that involves copying some folder to another folder. I haven't done it yet but my dcdiag is passing so I think my problem might be solved. Bookmarking just in case. Thx.