none
Burflags Query... RRS feed

  • Question

  • Hi,

    I 'm looking to know the best way to authoritatively restore the Sysvol in the domain (1st DC in the Domain).

    Whether to set the burflags to d4 here: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NtFrs\Parameters\Cumulative Replica Sets\GUID

    Or,

    Whether to set the burflags to d4 here: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup

    Also, what is the difference between these two options.

    TIA


    - thestriver

    Wednesday, May 30, 2012 2:25 PM

Answers

  • The “D2/D4" key can be set two places in registry:

    Global re-initialization:
    HKLM\SYSTEM\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup

    or

    Replica set specific re-initialization:
    HKLM\System\CurrentControlSet\Services\NtFrs\Parameters\Cumulative Replica Sets\GUID

    If you’re using DFS replica sets that holds a large amount of data that is healthy, go for the “Replica set specific re-initialization”. If you set the Global Burflags, FRS will re-initialize all replica sets, including the DFS namespace the member holds.If they hold a large amount of data… that might take some time.

    In short if you are using DFS use below key
    HKLM\System\CurrentControlSet\Services\NtFrs\Parameters\Cumulative Replica Sets\GUID

    To find the GUID of SYSVOL, look for the “Replica Set Name” named “Domain System Volume (SYSVOL SHARE)” under the subkey “HKLM\..\..\Replica Sets”:

    Reference link:
    http://support.microsoft.com/kb/315457
    http://adfordummiez.com/?p=61

    1) Normally for an Authoritative Restore you stop at NTFRS services on all DCs.
    2) Set burflags to D4 on a known good sysvol (or at this time restore sysvol data from backup then set burflags to D4) then start NTFRS on this server.  You may want to rename the old folders with .old extensions prior to restoring good data.
    3) Clean up the folders on all the remaining servers (Policies, Scripts, etc) - renamed them with .old extensions.
    4) Set burflags to D2 on all remaining servers and start NTFRS.
    5) Wait for FRS to replicate.
    6) Clean up the .old stuff if things look good.

    This is probably what you need to do to get it back.

    Note :
    *Take the backup of policies and script folder from 2003/2008DC and copy the same to alternate location before you proceed.

    * If you have single DC then perfrom d4 only.

    Hop this helps


    Best Regards,

    Sandesh Dubey.

    MCSE|MCSA:Messaging|MCTS|MCITP:Enterprise Adminitrator | My Blog

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    • Marked as answer by thestriver Thursday, May 31, 2012 7:05 AM
    Thursday, May 31, 2012 4:40 AM
  • Also, what is the difference between these two options.

    Simply put, basically the difference is, is the D4 is the source DC (the good DC), and D2 would go on the bad DC, which tells it to pull from the source DC (D4).

    Therefore, if you have a good DC and a bad DC, on the good DC, you set the burflag to D4, and on the BAD DC you would set the burflag to D2. The D2 option on the bad DC will do two things:

    1. Copies current stuff in the Sysvol folder and puts it in a folder called "Pre-existing." That folder is exactly what it says it is, it is your current data. This way if you have to revert back to it, you can use the data in this folder.
    2. Then it replicates (copies) good data from a GOOD DC (D4).

    .

    In another example, if you set Burflags to D4 on a single domain controller and set Burflags to D2 on all other domain controllers in that domain, you can rebuild the SYSVOL from that specific D4 DC (the source DC).  

    .

    More specifics:

    Using the BurFlags registry key to reinitialize File Replication
    http://support.microsoft.com/kb/290762

    .

    Another option is to force demote it, then re-promote it.

    I've also heard of admins manually copying the Sysvol folder, then set the Burflag options as mentioned, which works too. But no, I haven't tested it. That would be a for a lab on another day. :-)

    .


    Ace Fekay
    MVP, MCT, MCITP EA, MCTS Windows 2008/R2, Exchange 2007 & Exchange 2010, Exchange 2010 EA, MCSE & MCSA 2003/2000, MCSA Messaging 2003
    Microsoft Certified Trainer
    Microsoft MVP - Directory Services
    Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php

    This post is provided AS-IS with no warranties or guarantees and confers no rights.

    FaceBookTwitterLinkedIn


    • Edited by Ace Fekay [MCT] Thursday, May 31, 2012 5:15 AM - syntax and clarification
    • Proposed as answer by Meinolf Weber Thursday, May 31, 2012 6:12 AM
    • Marked as answer by thestriver Thursday, May 31, 2012 7:05 AM
    Thursday, May 31, 2012 5:13 AM
  • You can find my comments in bold which option to use. Preferably second option is used.

    • Whether to set the burflags to d4 here: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NtFrs\Parameters\Cumulative Replica Sets\GUID\

          This is basically used, if you have DFS running & with large amount of data considered to be healthy and pushed to other DFS servers. It will reset all the    DFS namespace along with sysvol data and you might face slowness due to large amount of data replication.

    • Whether to set the burflags to d4 here: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup

      Normally, this option is used to reset the burflag value .

    Refer this article in the Jorge's blog "Restoring The SYSVOL (Non-)Authoritatively When Either Using NTFRS Or DFS-R".

    http://jorgequestforknowledge.wordpress.com/blog-post-series/


    Awinish Vishwakarma - MVP - Directory Services

    My Blog: awinish.wordpress.com

    Disclaimer This posting is provided AS-IS with no warranties/guarantees and confers no rights.

    • Marked as answer by thestriver Thursday, May 31, 2012 7:05 AM
    Thursday, May 31, 2012 6:26 AM
    Moderator
  • Hi,

    > I'm looking to know the best way to authoritatively restore the Sysvol in the domain (1st DC in the
    > Domain).

    I’d like to confirm what’s the OS version for your DC and what’s the domain function level?

    Since Distributed File System (DFS) Replication is a replication service that is available for replicating SYSVOL to all domain controllers in domains that have the Windows Server 2008 domain functional level. However, on domain controller that are running Windows Server 2003 R2, SYSVOL replication is performed by the File Replication Service (FRS).

    > what is the difference between these two options.

    If other replica sets are represented on the domain controller and you want to update only SYSVOL, set the value of the replica-set-specific BurFlags (REG_DWORD) entry under

    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtFrs\Parameters\Cumulative Replica Sets\SYSVOL GUID

    To initiate a restart of SYSVOL when it is the only replica set that is represented on the domain controller, set the value of the global BurFlags (REG_DWORD) entry under

    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup

    For more information please refer to following MS articles:

    Prepare a domain controller for nonauthoritative SYSVOL restart
    http://technet.microsoft.com/en-us/library/cc778345(v=ws.10)
    Relocating SYSVOL Manually (for Windows server 2003)
    http://technet.microsoft.com/en-us/library/cc786035(v=ws.10)
    Relocating SYSVOL Manually (for Windows Server 2008 or 2008 R2)
    http://technet.microsoft.com/en-us/library/cc816594(v=ws.10)

    Hope this helps!

    TechNet Subscriber Support

    If you areTechNet Subscription user and have any feedback on our support quality, please send your feedback here.


    Lawrence

    TechNet Community Support

    • Marked as answer by thestriver Thursday, May 31, 2012 7:05 AM
    Thursday, May 31, 2012 6:39 AM
    Moderator

All replies

  • The “D2/D4" key can be set two places in registry:

    Global re-initialization:
    HKLM\SYSTEM\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup

    or

    Replica set specific re-initialization:
    HKLM\System\CurrentControlSet\Services\NtFrs\Parameters\Cumulative Replica Sets\GUID

    If you’re using DFS replica sets that holds a large amount of data that is healthy, go for the “Replica set specific re-initialization”. If you set the Global Burflags, FRS will re-initialize all replica sets, including the DFS namespace the member holds.If they hold a large amount of data… that might take some time.

    In short if you are using DFS use below key
    HKLM\System\CurrentControlSet\Services\NtFrs\Parameters\Cumulative Replica Sets\GUID

    To find the GUID of SYSVOL, look for the “Replica Set Name” named “Domain System Volume (SYSVOL SHARE)” under the subkey “HKLM\..\..\Replica Sets”:

    Reference link:
    http://support.microsoft.com/kb/315457
    http://adfordummiez.com/?p=61

    1) Normally for an Authoritative Restore you stop at NTFRS services on all DCs.
    2) Set burflags to D4 on a known good sysvol (or at this time restore sysvol data from backup then set burflags to D4) then start NTFRS on this server.  You may want to rename the old folders with .old extensions prior to restoring good data.
    3) Clean up the folders on all the remaining servers (Policies, Scripts, etc) - renamed them with .old extensions.
    4) Set burflags to D2 on all remaining servers and start NTFRS.
    5) Wait for FRS to replicate.
    6) Clean up the .old stuff if things look good.

    This is probably what you need to do to get it back.

    Note :
    *Take the backup of policies and script folder from 2003/2008DC and copy the same to alternate location before you proceed.

    * If you have single DC then perfrom d4 only.

    Hop this helps


    Best Regards,

    Sandesh Dubey.

    MCSE|MCSA:Messaging|MCTS|MCITP:Enterprise Adminitrator | My Blog

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    • Marked as answer by thestriver Thursday, May 31, 2012 7:05 AM
    Thursday, May 31, 2012 4:40 AM
  • Also, what is the difference between these two options.

    Simply put, basically the difference is, is the D4 is the source DC (the good DC), and D2 would go on the bad DC, which tells it to pull from the source DC (D4).

    Therefore, if you have a good DC and a bad DC, on the good DC, you set the burflag to D4, and on the BAD DC you would set the burflag to D2. The D2 option on the bad DC will do two things:

    1. Copies current stuff in the Sysvol folder and puts it in a folder called "Pre-existing." That folder is exactly what it says it is, it is your current data. This way if you have to revert back to it, you can use the data in this folder.
    2. Then it replicates (copies) good data from a GOOD DC (D4).

    .

    In another example, if you set Burflags to D4 on a single domain controller and set Burflags to D2 on all other domain controllers in that domain, you can rebuild the SYSVOL from that specific D4 DC (the source DC).  

    .

    More specifics:

    Using the BurFlags registry key to reinitialize File Replication
    http://support.microsoft.com/kb/290762

    .

    Another option is to force demote it, then re-promote it.

    I've also heard of admins manually copying the Sysvol folder, then set the Burflag options as mentioned, which works too. But no, I haven't tested it. That would be a for a lab on another day. :-)

    .


    Ace Fekay
    MVP, MCT, MCITP EA, MCTS Windows 2008/R2, Exchange 2007 & Exchange 2010, Exchange 2010 EA, MCSE & MCSA 2003/2000, MCSA Messaging 2003
    Microsoft Certified Trainer
    Microsoft MVP - Directory Services
    Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php

    This post is provided AS-IS with no warranties or guarantees and confers no rights.

    FaceBookTwitterLinkedIn


    • Edited by Ace Fekay [MCT] Thursday, May 31, 2012 5:15 AM - syntax and clarification
    • Proposed as answer by Meinolf Weber Thursday, May 31, 2012 6:12 AM
    • Marked as answer by thestriver Thursday, May 31, 2012 7:05 AM
    Thursday, May 31, 2012 5:13 AM
  • Hi let know number of DCs present the domain also please refer below articles.

    http://support.microsoft.com/kb/290762
    Thursday, May 31, 2012 5:17 AM
  • You can find my comments in bold which option to use. Preferably second option is used.

    • Whether to set the burflags to d4 here: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NtFrs\Parameters\Cumulative Replica Sets\GUID\

          This is basically used, if you have DFS running & with large amount of data considered to be healthy and pushed to other DFS servers. It will reset all the    DFS namespace along with sysvol data and you might face slowness due to large amount of data replication.

    • Whether to set the burflags to d4 here: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup

      Normally, this option is used to reset the burflag value .

    Refer this article in the Jorge's blog "Restoring The SYSVOL (Non-)Authoritatively When Either Using NTFRS Or DFS-R".

    http://jorgequestforknowledge.wordpress.com/blog-post-series/


    Awinish Vishwakarma - MVP - Directory Services

    My Blog: awinish.wordpress.com

    Disclaimer This posting is provided AS-IS with no warranties/guarantees and confers no rights.

    • Marked as answer by thestriver Thursday, May 31, 2012 7:05 AM
    Thursday, May 31, 2012 6:26 AM
    Moderator
  • Hi,

    > I'm looking to know the best way to authoritatively restore the Sysvol in the domain (1st DC in the
    > Domain).

    I’d like to confirm what’s the OS version for your DC and what’s the domain function level?

    Since Distributed File System (DFS) Replication is a replication service that is available for replicating SYSVOL to all domain controllers in domains that have the Windows Server 2008 domain functional level. However, on domain controller that are running Windows Server 2003 R2, SYSVOL replication is performed by the File Replication Service (FRS).

    > what is the difference between these two options.

    If other replica sets are represented on the domain controller and you want to update only SYSVOL, set the value of the replica-set-specific BurFlags (REG_DWORD) entry under

    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtFrs\Parameters\Cumulative Replica Sets\SYSVOL GUID

    To initiate a restart of SYSVOL when it is the only replica set that is represented on the domain controller, set the value of the global BurFlags (REG_DWORD) entry under

    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup

    For more information please refer to following MS articles:

    Prepare a domain controller for nonauthoritative SYSVOL restart
    http://technet.microsoft.com/en-us/library/cc778345(v=ws.10)
    Relocating SYSVOL Manually (for Windows server 2003)
    http://technet.microsoft.com/en-us/library/cc786035(v=ws.10)
    Relocating SYSVOL Manually (for Windows Server 2008 or 2008 R2)
    http://technet.microsoft.com/en-us/library/cc816594(v=ws.10)

    Hope this helps!

    TechNet Subscriber Support

    If you areTechNet Subscription user and have any feedback on our support quality, please send your feedback here.


    Lawrence

    TechNet Community Support

    • Marked as answer by thestriver Thursday, May 31, 2012 7:05 AM
    Thursday, May 31, 2012 6:39 AM
    Moderator
  • Thanks to all, my query was answered profoundly.

    Lawrence: FYI...its a w2k3 domain. Thanks!

    Ace: I tested copying sysvol folder and it works fine at least in my case. Thanks!


    - thestriver



    • Edited by thestriver Thursday, May 31, 2012 7:10 AM
    Thursday, May 31, 2012 7:05 AM
  • Thanks to all, my query was answered profoundly.

    We "strive" to provide everyone with the best possible assistance!

    .

    Lawrence: FYI...its a w2k3 domain. Thanks!

    Ace: I tested copying sysvol folder and it works fine at least in my case. Thanks!

    Cool. Great to hear! :-)

    .


    Ace Fekay
    MVP, MCT, MCITP EA, MCTS Windows 2008/R2, Exchange 2007 & Exchange 2010, Exchange 2010 EA, MCSE & MCSA 2003/2000, MCSA Messaging 2003
    Microsoft Certified Trainer
    Microsoft MVP - Directory Services
    Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php

    This post is provided AS-IS with no warranties or guarantees and confers no rights.

    FaceBook Twitter LinkedIn

    Thursday, May 31, 2012 3:03 PM
  • Hi,

    Very glad to know you have resolved this issue, any further questions please feel free to contact us.

    Have a nice day.

    TechNet Subscriber Support

    If you areTechNet Subscription user and have any feedback on our support quality, please send your feedback here.


    Lawrence

    TechNet Community Support

    Friday, June 1, 2012 1:43 AM
    Moderator