none
DC Windows 2008 R2 Event id 13568 - File Replication Service RRS feed

  • Domanda

  • Buongiorno a tutti,

    a seguito di un blackout, da ieri su un DC Windows 2008 ho trovato il seguente event ID:

    13568

     ########################################

    The File Replication Service has detected that the replica set "DOMAIN SYSTEM VOLUME (SYSVOL SHARE)" is in JRNL_WRAP_ERROR. 

     Replica set name is    : "DOMAIN SYSTEM VOLUME (SYSVOL SHARE)" 
     Replica root path is   : "c:\windows\sysvol\domain" 
     Replica root volume is : "\\.\C:" 
     A Replica set hits JRNL_WRAP_ERROR when the record that it is trying to read from the NTFS USN journal is not found.  This can occur because of one of the following reasons. 

     [1] Volume "\\.\C:" has been formatted. 
     [2] The NTFS USN journal on volume "\\.\C:" has been deleted. 
     [3] The NTFS USN journal on volume "\\.\C:" has been truncated. Chkdsk can truncate the journal if it finds corrupt entries at the end of the journal. 
     [4] File Replication Service was not running on this computer for a long time. 
     [5] File Replication Service could not keep up with the rate of Disk IO activity on "\\.\C:". 
     Setting the "Enable Journal Wrap Automatic Restore" registry parameter to 1 will cause the following recovery steps to be taken to automatically recover from this error state. 
     [1] At the first poll, which will occur in 5 minutes, this computer will be deleted from the replica set. If you do not want to wait 5 minutes, then run "net stop ntfrs" followed by "net start ntfrs" to restart the File Replication Service. 
     [2] At the poll following the deletion this computer will be re-added to the replica set. The re-addition will trigger a full tree sync for the replica set. 

    WARNING: During the recovery process data in the replica tree may be unavailable. You should reset the registry parameter described above to 0 to prevent automatic recovery from making the data unexpectedly unavailable if this error condition occurs again. 

    To change this registry parameter, run regedit. 

    Click on Start, Run and type regedit. 

    Expand HKEY_LOCAL_MACHINE. 
    Click down the key path: 
       "System\CurrentControlSet\Services\NtFrs\Parameters" 
    Double click on the value name 
       "Enable Journal Wrap Automatic Restore" 
    and update the value. 

    If the value name is not present you may add it with the New->DWORD Value function under the Edit Menu item. Type the value name exactly as shown above.

     ########################################

    La nostra architettura AD è composta da n. 05 DC, due di FE e tre di BE; il problema si è verificato su un DC di BE.

    Per risolvere, ho trovato le seguenti note:

    https://support.microsoft.com/en-us/kb/290762

    https://social.technet.microsoft.com/Forums/windowsserver/en-US/83ee47a4-1b34-41dd-bd70-66fdb349022a/domain-system-volume-sysvol-share-is-in-jrnlwraperror?forum=winserverDS

    https://blogs.technet.microsoft.com/instan/2009/07/14/what-happens-in-a-journal-wrap/

    Si parla di:

    • D2, also known as a nonauthoritative mode restore
    • D4, also known as an authoritative mode restore

    Credo, che nel mio caso sia sufficiente applicare il parametro BurFlags   = D2 , riavviare il servizio File Replication ed attendere il sync con il DC partner.

    Su gli altri DC, non ho rilevato errori; quindi è isolato solo su questo DC.

    Posso avere un Vs parere tecnico?

    Grazie per il supporto e buona giornata.


    • Modificato SysAdmin_IT venerdì 28 ottobre 2016 07:38
    venerdì 28 ottobre 2016 07:01

Risposte

  • Allora,

    logica e la seguente:

    Si fa D2 per dire all dominio- ho il server In questione con NETLOGON e SYSVOL incomplete

    D4 si fa su un altro server  per dire all domino- Aggiorna mi il server problematico(quello che necessita di D2) prendendo informazione /coppiare sysvol e netlogon folders/ da questo server.

    Spero di essermi spiegato :)

    Saluti ,Nikola


    venerdì 28 ottobre 2016 08:58
    Moderatore

Tutte le risposte