{"id":502,"date":"2019-01-17T23:51:17","date_gmt":"2019-01-18T05:51:17","guid":{"rendered":"http:\/\/zewwy.ca\/?p=502"},"modified":"2019-01-17T23:51:17","modified_gmt":"2019-01-18T05:51:17","slug":"make-sure-your-dfsr-is-working","status":"publish","type":"post","link":"https:\/\/zewwy.ca\/index.php\/2019\/01\/17\/make-sure-your-dfsr-is-working\/","title":{"rendered":"Make Sure your DFSR is working!"},"content":{"rendered":"<p>This one is kind of interesting. I use a replicated test environment to validate things, it works great. I was using the domains sysvol to quickly copy some text between member servers, however to my amazement I was not seeing the same contents from two different member servers even though both of them validated their security with my domain (nltest \/sc_verify:domain)&#8230;<\/p>\n<p>It wasn&#8217;t until I checked both DC&#8217;s that I noticed one member server was seeing a SYSVOL from DC 1 and the other member server was seeing contents from SYSVOL from DC2.<\/p>\n<p>Now, all DC&#8217;s have the same SYSVOl contents right?! So what gives?<\/p>\n<p>You may have already guessed it, DFSR issues&#8230;. if you know the title didn&#8217;t give anything away&#8230;<\/p>\n<p>Which lead me to this nice <a href=\"https:\/\/support.microsoft.com\/en-ca\/help\/2958414\/dfs-replication-how-to-troubleshoot-missing-sysvol-and-netlogon-shares\">MS support page<\/a>.<\/p>\n<p>The most important line from it is this&#8230;<\/p>\n<pre class=\"sbody-pre x-hidden-focus\">For \/f %i IN ('dsquery server -o rdn') do @echo %i &amp;&amp; @wmic \/node:\"%i\" \/namespace:\\\\root\\microsoftdfs path dfsrreplicatedfolderinfo WHERE replicatedfoldername='SYSVOL share' get replicationgroupname,replicatedfoldername,state<\/pre>\n<p>with this my DC&#8217;s reported a state of 2 (well that could explain the diff I was seeing)<\/p>\n<p>which lead me to this nice <a href=\"https:\/\/support.microsoft.com\/en-ca\/help\/2218556\/how-to-force-an-authoritative-and-non-authoritative-synchronization-fo\">MS Support<\/a> page. \ud83d\ude42 These are usually better than most I&#8217;ll admit. I followed the steps on &#8220;<strong>How to perform an authoritative synchronization of DFSR-replicated SYSVOL (like &#8220;D4&#8243; for FRS)&#8221;<\/strong><\/p>\n<p>Until I realized that core doesn&#8217;t come with DFSR mgmt tools, even if you install the AD role&#8230; So for the most part I skipped the steps stating run &#8220;DFSRDIAG POLLAD&#8221; <a href=\"https:\/\/social.technet.microsoft.com\/Forums\/windowsserver\/en-US\/6552eb9b-12ab-4f36-b85e-7413d3ffbfea\/where-is-dfsrdiag?forum=winserverManagement#6552eb9b-12ab-4f36-b85e-7413d3ffbfea\">cause it&#8217;ll fail to run, as it does not exist<\/a>&#8230;<\/p>\n<p>Maybe some one out there is smart enough to know the answer&#8230;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>This one is kind of interesting. I use a replicated test environment to validate things, it works great. I was using the domains sysvol to quickly copy some text between member servers, however to my amazement I was not seeing the same contents from two different member servers even though both of them validated their &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/zewwy.ca\/index.php\/2019\/01\/17\/make-sure-your-dfsr-is-working\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Make Sure your DFSR is working!&#8221;<\/span><\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"sfsi_plus_gutenberg_text_before_share":"","sfsi_plus_gutenberg_show_text_before_share":"","sfsi_plus_gutenberg_icon_type":"","sfsi_plus_gutenberg_icon_alignemt":"","sfsi_plus_gutenburg_max_per_row":"","footnotes":""},"categories":[8],"tags":[143,24,141,142],"class_list":["post-502","post","type-post","status-publish","format-standard","hentry","category-server-administration","tag-ad","tag-core","tag-dfsr","tag-windows-server-2016"],"_links":{"self":[{"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/posts\/502","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/comments?post=502"}],"version-history":[{"count":1,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/posts\/502\/revisions"}],"predecessor-version":[{"id":503,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/posts\/502\/revisions\/503"}],"wp:attachment":[{"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/media?parent=502"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/categories?post=502"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/tags?post=502"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}