I added a Server 2012 to our domain back a couple months back and I've just noticed that the \\domain.local\SYSVOL\domain.local\Policies isn't being synchronized
We have 6 x 2008 DCs, 1 x 2008 R2 & 1 x 2012
I did a test and created a test file in \\domain.local\SYSVOL\domain.local\ on each of the servers i.e. dc1.txt, dc2.txt etc
Each of the 7 older servers ended up with all 7 test files, but the new 2012 server only contains the text file I created on this server.
I can confirm active directory is replicating fine.
I've checked the event log on the new DC and it isn't showing any errors in the DFS Replication event log.
I ran GPOTOOL.EXE and it is showing what I was expecting:
Example 1, new GPO not in policies folder on older DCs
Policy {4EB455D8-030C-4F5F-BC0C-3937946D1970}
Friendly name: Install - Test GPO Replication
Error: Cannot access \\DC1.domain.local\sysvol\domain.local\policies\{4EB455D8-030C-4F5F-BC0C-3937946D1970}, error 2
Error: Cannot access \\DC2.domain.local\sysvol\domain.local\policies\{4EB455D8-030C-4F5F-BC0C-3937946D1970}, error 2
Error: Cannot access \\DC3.domain.local\sysvol\domain.local\policies\{4EB455D8-030C-4F5F-BC0C-3937946D1970}, error 2
Error: Cannot access \\DC4.domain.local\sysvol\domain.local\policies\{4EB455D8-030C-4F5F-BC0C-3937946D1970}, error 2
Error: Cannot access \\DC5.domain.local\sysvol\domain.local\policies\{4EB455D8-030C-4F5F-BC0C-3937946D1970}, error 2
Error: Cannot access \\DC6.domain.local\sysvol\domain.local\policies\{4EB455D8-030C-4F5F-BC0C-3937946D1970}, error 2
Error: Cannot access \\DC7.domain.local\sysvol\domain.local\policies\{4EB455D8-030C-4F5F-BC0C-3937946D1970}, error 2
Example 2, out of date version
Friendly name: Internet Explorer - v8 Settings
Error: Version mismatch on DC1.domain.local, DS=3538947, sysvol=2490371
Error: Version mismatch on DC2.domain.local, DS=3538947, sysvol=2490371
Error: Version mismatch on DC3.domain.local, DS=3538947, sysvol=2490371
Error: Version mismatch on DC4.domain.local, DS=3538947, sysvol=2490371
Error: Version mismatch on DC5.domain.local, DS=3538947, sysvol=2490371
Error: Version mismatch on DC6.domain.local, DS=3538947, sysvol=2490371
Error: Version mismatch on DC7.domain.local, DS=3538947, sysvol=2490371
I actually tried this (Step 1: Check Group Policy infrastructure health)
And when I click detect it pops up the error
"A processing error occurred collecting data using this base domain controller. Please change the base domain controller and try again"
Update:
I found a post that talks about checking the userAccountControl attribute in ADSIEdit. I found that the new DC is set to 532512 and all the rest are 532480.
Looking at this page
http://support.microsoft.com/kb/305144
I'm guessing this means it has PASSWD_NOTREQD enabled where as the others don't
Not sure if this has anything to do with it?
Please help :)
Thanks