Quantcast
Channel: Group Policy forum
Viewing all articles
Browse latest Browse all 19997

Group Policy Objects / Templates not replicating since adding Server 2012 DC to domain.

$
0
0

I added a Server 2012 to our domain back a couple months back and I've just noticed that the \\domain.local\SYSVOL\domain.local\Policies isn't being synchronized

We have 6 x 2008 DCs, 1 x 2008 R2 & 1 x 2012

I did a test and created a test file in \\domain.local\SYSVOL\domain.local\ on each of the servers i.e. dc1.txt, dc2.txt etc

Each of the 7 older servers ended up with all 7 test files, but the new 2012 server only contains the text file I created on this server.

I can confirm active directory is replicating fine. 

I've checked the event log on the new DC and it isn't showing any errors in the DFS Replication event log. 


I ran GPOTOOL.EXE and it is showing what I was expecting:

Example 1, new GPO not in policies folder on older DCs

Policy {4EB455D8-030C-4F5F-BC0C-3937946D1970}
Friendly name: Install - Test GPO Replication
Error: Cannot access \\DC1.domain.local\sysvol\domain.local\policies\{4EB455D8-030C-4F5F-BC0C-3937946D1970}, error 2
Error: Cannot access \\DC2.domain.local\sysvol\domain.local\policies\{4EB455D8-030C-4F5F-BC0C-3937946D1970}, error 2
Error: Cannot access \\DC3.domain.local\sysvol\domain.local\policies\{4EB455D8-030C-4F5F-BC0C-3937946D1970}, error 2
Error: Cannot access \\DC4.domain.local\sysvol\domain.local\policies\{4EB455D8-030C-4F5F-BC0C-3937946D1970}, error 2
Error: Cannot access \\DC5.domain.local\sysvol\domain.local\policies\{4EB455D8-030C-4F5F-BC0C-3937946D1970}, error 2
Error: Cannot access \\DC6.domain.local\sysvol\domain.local\policies\{4EB455D8-030C-4F5F-BC0C-3937946D1970}, error 2
Error: Cannot access \\DC7.domain.local\sysvol\domain.local\policies\{4EB455D8-030C-4F5F-BC0C-3937946D1970}, error 2

Example 2, out of date version

Friendly name: Internet Explorer - v8 Settings
Error: Version mismatch on DC1.domain.local, DS=3538947, sysvol=2490371
Error: Version mismatch on DC2.domain.local, DS=3538947, sysvol=2490371
Error: Version mismatch on DC3.domain.local, DS=3538947, sysvol=2490371
Error: Version mismatch on DC4.domain.local, DS=3538947, sysvol=2490371
Error: Version mismatch on DC5.domain.local, DS=3538947, sysvol=2490371
Error: Version mismatch on DC6.domain.local, DS=3538947, sysvol=2490371
Error: Version mismatch on DC7.domain.local, DS=3538947, sysvol=2490371

I actually tried this (Step 1: Check Group Policy infrastructure health)

And when I click detect it pops up the error

"A processing error occurred collecting data using this base domain controller. Please change the base domain controller and try again"

Update:

I found a post that talks about checking the userAccountControl attribute in ADSIEdit. I found that the new DC is set to 532512 and all the rest are 532480. 

Looking at this page

http://support.microsoft.com/kb/305144

I'm guessing this means it has PASSWD_NOTREQD enabled where as the others don't

Not sure if this has anything to do with it? 

Please help :)

Thanks








Viewing all articles
Browse latest Browse all 19997

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>