Home All Groups Group Topic Archive Search About

Strage....lost domain policies

Author
11 Mar 2006 2:55 PM
Teto
Hi all,

I've found a strange things. I've got two win2k3 server. One is SBS and
so has 5 AD roles. BTW I get into domain policies snap-in and I get
error message that's not possible to open object, details: specified
path not found.

In fact, in %SYSTEMROOT%\SYSVOL\sysvol\mydomain there's no more
'Policies' folder. How can i solve? I've looked on microsoft web and
found a tool called gpfixtool but want to change my domain and dns....
It's save?

Or any other idea?

thanks
Stefano

Author
13 Mar 2006 8:15 AM
Paul Williams [MVP]
You need to use DCGPOFIX to resolve this issue.  Resolve the GPO problem
before making further changes.

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net
Author
13 Mar 2006 8:30 PM
Teto
Ok, Done. Now seems to work. But I have to run it also on second DC?

I see in event log that event id 13508 persists.

Now, i've checked on second DC and dcdiag not passes all tests, more
precisely not found netlogons shares and has ntfrs errors.

dcdiag on first DC (where ran dcgpofix) is ok.

It's safe to run on second DC?

Thanks
Ste
Author
14 Mar 2006 8:24 AM
Paul Williams [MVP]
Yes, but you don't need to.  The fixed policies will replicate.  If they are
not replicating, you have FRS issues.  Quickest way to fix this is as
follows (on the second DC):

net stop ntfrs
Set BurFlags to "D2" (without the quotes)
net start ntfrs


BurFlags is a registry value under this key:

HKLM\ SYSTEM\ CurrentControlSet\ Services\ NtFrs\ Parameters\
Backup/Restore\ Process at Startup


--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net