restore sysvol

9 Mar 2006 5:07 PM

jason sigurdur

Hi, we have 15 2000 dc's in our domain. Someone accidently deleted the
sysvol folder on one server. This replicated to all of the domain
controllers.

We tried to copy a backed up copy of the missing sysvol to the server where
it was deleted.This caused FRS errors, and now our exchange 2003 server is
no working properly.

We do have a system state backup of a week prior. Is it possible to just
restore sysvol or must I do a authoritive restore.

I am confused there are 3 or 4 different methods mentioned, and I am not
sure which one is best.

thx jason

9 Mar 2006 8:14 PM

Paul Williams [MVP]

If you have s 3rd party tool such as Backup Exec there's an option in there
to mark the folders in such a way that they are authorative. If not, or you
don't fancy that method, restore the SYSVOL (System State) and set the
BurFlags value to D4.

BurFlags is a registry value underneath this key:

HKLM\ SYSTEM\ CurrentControlSet\ Services\ NtFrs\ Parameters\
Backup/Restore\ Process at Startup

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net

16 Mar 2006 4:05 PM

jason sigurdur

Hi, we did copied the backup of sysvol to a dc and did the d4 and d2. This
worked except for that the copied sysvol had readonly permissions.
Now my client systems are getting readonly copies of the GPO in which they
cannot delete to accept a new one.
Also, we are having problems with exchange 2003 and
the domain Group policy 'manage auditing and security logs'. I keep running
setup /domainprep to update the GPO, but after a few hours everything
reverts back.

Would it be possible to stop frs on all domain controllers, run 'attrib -r'
in the sysvol/sysvol/mydomain/policies folder
on all the domain controllers, then restart frs?

thx jason
Show quoteHide quote

"Paul Williams [MVP]" <ptw2***@hotmail.com> wrote in message
news:OxwvAY7QGHA.4976@TK2MSFTNGP11.phx.gbl...
> If you have s 3rd party tool such as Backup Exec there's an option in
> there
> to mark the folders in such a way that they are authorative. If not, or
> you
> don't fancy that method, restore the SYSVOL (System State) and set the
> BurFlags value to D4.
>
> BurFlags is a registry value underneath this key:
>
> HKLM\ SYSTEM\ CurrentControlSet\ Services\ NtFrs\ Parameters\
> Backup/Restore\ Process at Startup
>
> --
> Paul Williams
> Microsoft MVP - Windows Server - Directory Services
> http://www.msresource.net | http://forums.msresource.net
>
>

17 Mar 2006 8:34 AM

Paul Williams [MVP]

> Would it be possible to stop frs on all domain controllers, run
> 'attrib -r' in the sysvol/sysvol/mydomain/policies folder on all the
> domain controllers, then restart frs?

No need. Stop FRS on one, set the attributes as necessary, then set
burflags to D4 and start.

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net

17 Mar 2006 9:11 AM

Jorge de Almeida Pinto [MVP]

if you do a D4 on one DC, you need to do a D2 on all others in the same
domain

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------

-----------------------------------------------------------------------------

Show quoteHide quote

"Paul Williams [MVP]" <ptw2***@hotmail.com> wrote in message
news:%23rOKO2ZSGHA.5900@tk2msftngp13.phx.gbl...
>> Would it be possible to stop frs on all domain controllers, run
>> 'attrib -r' in the sysvol/sysvol/mydomain/policies folder on all the
>> domain controllers, then restart frs?
>
> No need. Stop FRS on one, set the attributes as necessary, then set
> burflags to D4 and start.
>
> --
> Paul Williams
> Microsoft MVP - Windows Server - Directory Services
> http://www.msresource.net | http://forums.msresource.net
>
>

9 Mar 2006 9:24 PM

Jorge de Almeida Pinto [MVP]

can you please specify the name of the folder (and path) that was deleted?

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------

-----------------------------------------------------------------------------

Show quoteHide quote

"jason sigurdur" <jason.sigur***@aspenview.org> wrote in message
news:ucPhzv5QGHA.6084@TK2MSFTNGP14.phx.gbl...
> Hi, we have 15 2000 dc's in our domain. Someone accidently deleted the
> sysvol folder on one server. This replicated to all of the domain
> controllers.
>
> We tried to copy a backed up copy of the missing sysvol to the server
> where it was deleted.This caused FRS errors, and now our exchange 2003
> server is no working properly.
>
> We do have a system state backup of a week prior. Is it possible to just
> restore sysvol or must I do a authoritive restore.
>
> I am confused there are 3 or 4 different methods mentioned, and I am not
> sure which one is best.
>
> thx jason
>