windwos server

How to rebuild SYSVOL share and NETLOGON share

SYSVOL refers to a set of files and folders that reside on the local hard disk of each domain controller in a domain environment and that are replicated by the File Replication service (FRS).
Here is a quick guide on how to rebuild the windows server sysvol

Step 1:
Copy the whole SYSVOL folder from the current SYSVOL folder to a backup location.

a.) Run “net stop ntfrs” to stop the FRS service

b.) Copy the SYSVOL folder back to the Windows Server  Root Dir C:WindowsSYSVOL

Make sure the whole SYSVOL folder structure is correct. You may compare with a working DC or refer to the SYSVOL directory structure per this KB http://support.microsoft.com/kb/257338.

If some files are missing or the folder is empty take note and proceed

Step 2:
Ensure to share the folder %windir%sysvolsysvol. The share name of it is sysvol. Also, share the folder %windir%sysvolsysvolscripts. The share name is NetLogon.

Step 3: 
Recreating NetLogon
Set the SysvolReady Flag registry value to “0” and then back to “1” in the registry.

Click Start, click Run, type regedit, and then click OK.
Locate the following subkey in Registry Editor:

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesNetlogonParameters]

In the details pane, right-click SysvolReady Flag, and then click Modify.
In the Value data box, type 0 and then click OK.  (You can close if you want and then reopen)
Again in the details pane, right-click SysvolReady Flag, and then click Modify.
In the Value data box, type 1, and then click OK.

Then run NET SHARE and see if the SYSVOL and NETLOGON share is present.

Step 4: 
Perform D4 on the Win2K8 DC to reinitialize FRS set

Click Start, and then click Run.
In the Open box, type cmd and then press ENTER.
In the Command box, type net stop ntfrs.
Click Start, and then click Run.
In the Open box, type regedit and then press ENTER.
Locate the following subkey in the registry:
[HKEY_LOCAL_MACHINESystemCurrentControlSetServicesNtFrsParametersBackup/RestoreProcess at Startup]

In the right pane, double click BurFlags.
In the Edit DWORD Value dialog box, type D4 and then click OK.
Quit Registry Editor, and then switch to the Command box.
In the Command box, type net start ntfrs.
Quit the Command box.

Step 5: 
Use net share command to check the Sysvol and Netlogon share out.
Also run dcgpofix /ignoreschema. Ignoreschema option for 2008 or later forest functional level.

At this point a failed domain related issues will have been sorted. Check your system event log for errors that you can peacefully.

Click here for more information on working with domains

Archtectatonic lensesview

Post Author: lensesview

Lensesview is founded on a simple premise: honest reviews for the Zambian electronic consumer. Guide to tech trends and cybersecurity.