none
Group Policy SYSVOL replication + health status

    Question

  • Is there a way for me to programmatically check the health status of a specific GPO in SYSVOL across all Domain Controllers?

    How do I force a "Good" copy of a GPO to all other DC's?

    • Changed type raydlevel5 Wednesday, January 28, 2015 5:40 PM
    Wednesday, January 28, 2015 5:40 PM

Answers

  • Hi,

    >>How do I force a "Good" copy of a GPO to all other DC's?

    As Alex suggested, we can do a non-authoritative restore for Sysvol on un-healthy domain controllers to make them sync their Sysvol from a healthy one.

    Regarding how to perform non-authoritative restore for Sysvol, this depends on what replication mechanism we use for replicating Sysvol.
    If Sysvol is replicated by FRS, we can follow the procedure described in the following article to do a non-authoritative restore.

    Using the BurFlags registry key to reinitialize File Replication Service replica sets

    http://support.microsoft.com/kb/290762?wa=wsignin1.0

    If Sysvol is replicated by DFSR, we can follow the procedure described in the following article to do a non-authoritative restore.

    How to force an authoritative and non-authoritative synchronization for DFSR-replicated SYSVOL (like "D4/D2" for FRS)

    http://support.microsoft.com/kb/2218556

    >>Is there a way for me to programmatically check the health status of a specific GPO in SYSVOL across all Domain Controllers?

    We can check event logs in Event Viewer on domain controllers. If something goes wrong with Sysvol replication, error events will be logged under Applications and Services Logs\FRS or DFSR Replication.

    Best regards,
    Frank Shen


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.



    Wednesday, February 04, 2015 3:11 AM
    Moderator

All replies

  • you will need to do a non authoritative restore if you have sysvol replication issues.

    heres a handy GP health tool also https://sdmsoftware.com/group-policy-blog/cool-new-group-policy-software-products/the-return-of-group-policy-health-reporter/

    Wednesday, January 28, 2015 8:09 PM
  • Hi,

    >>How do I force a "Good" copy of a GPO to all other DC's?

    As Alex suggested, we can do a non-authoritative restore for Sysvol on un-healthy domain controllers to make them sync their Sysvol from a healthy one.

    Regarding how to perform non-authoritative restore for Sysvol, this depends on what replication mechanism we use for replicating Sysvol.
    If Sysvol is replicated by FRS, we can follow the procedure described in the following article to do a non-authoritative restore.

    Using the BurFlags registry key to reinitialize File Replication Service replica sets

    http://support.microsoft.com/kb/290762?wa=wsignin1.0

    If Sysvol is replicated by DFSR, we can follow the procedure described in the following article to do a non-authoritative restore.

    How to force an authoritative and non-authoritative synchronization for DFSR-replicated SYSVOL (like "D4/D2" for FRS)

    http://support.microsoft.com/kb/2218556

    >>Is there a way for me to programmatically check the health status of a specific GPO in SYSVOL across all Domain Controllers?

    We can check event logs in Event Viewer on domain controllers. If something goes wrong with Sysvol replication, error events will be logged under Applications and Services Logs\FRS or DFSR Replication.

    Best regards,
    Frank Shen


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.



    Wednesday, February 04, 2015 3:11 AM
    Moderator
  • well written the links are very useful for me

    http://support.microsoft.com/kb/290762

    http://support.microsoft.com/kb/2218556

    Thanks

    www.IttechPoint.com




    • Edited by pwnkmr Friday, December 11, 2015 11:02 AM
    Friday, December 11, 2015 11:01 AM