NTFRS and Burflags Registry Change

10 Apr 2006 1:33 PM

Timzy

Hi Paul Williams

Been reading the posts on this issue, I am having similar issues.

We have a 2003 Domain, and last week we made a system time change on both
our PDC and DC, this is what I think caused our problems , Our Dc does not
contain all the folders under sysvol, (Missing syvol Default Share) nor can I
access the netlogon share on the DC.

We initially noticed our PDC was giving us access issues when editing Group
Policys (kb 253268) so I fixed the problem Policys and manually created the
missing folders,

I am not sure if this was a result of our time change or a seperate issue,

Only a few days later did we pick up Ntfrs Errors and then picked up
problems on the DC, and verified Sysvol and Netlogon Shares,Folders were
missing,

Now I know your solution says on the problem

Stop Ntfrs on DC
Set Burflags Reg to D2
Start Ntfrs on DC (To make the DC Non - Authoritive)

According to KB 315457 that in your posts we must refer to it says the Bur
Flags setting is changed in the following key (Page 6 of kb)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NtFrs\Parameters\Cumulative Replica Sets\GUID

Which differs from your sugggestion,
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process atStartup\BurFlags

Do I change both settings?

As per the kb it does say the above setting applies to DCs that do not
participate in DFS replication (I do not have DFS setup)

My confusion comes in here

Do I change the corresponding setting on the working PDC to D4 (Authoritive)
in this senario?

How do I verify that the Sysvol Contents on my PDC are working?

I am just a little concerned as I do not want to make changes to a working
Sysvol and then I have bigger problems than before,

Currently on the existing PDC the Burflags Reg Value is set to 0 and not D4

Confirm must the Burflags setting be D4 or must the value Data of the
Burflags key be 4, the wording in the kb and what I have in my reg is
confusing

10 Apr 2006 1:44 PM

Harj

Hi,

The Burflags should be 0 as after you change the burrflags to either D2
or D4 the value changes back to 0 after starting the NTFRS by default
You need to determine which machine has the correct information in the
sysvol. This machine will be authoritative and the reg key does not
have to be changed here.
You need to change the burflags to D2 on the machines that do not have
the correct information within it's sysvol.
So, we need to stop NTFRS, set the burrflag key to D2, and then start
NTFRS.
We will then have to wait for the folder to populate from it's
connecting partner.
So what you are doing here is actually a Nonauthoritative restore as
you are setting it to D2.

Using the BurFlags registry key to reinitialize File Replication
Service replica sets
http://support.microsoft.com/kb/290762

Harj Singh
"Power Your Active Directory Investment"
www.specopssoft.com