The default settings for Sysvol should work just fine, something else is
going wrong here. The 3 week period sounds like you could be running into
secure channel problems - that's about the exact time that your passwords
would get completely out of synchronization if the DCs could not
communicate.
I assume all was working well until you implemented changes, so what
security changes have you made?
You will see me post this repeatedly because this document, if you read it,
will answer almost every question you have about FRS. It has sections
providing an FRS Overview, Best Practies, and Troubleshooting.
The FRS Monitoring Help File can be found at the following location:
http://www.microsoft.com/windowsserver2003/technologies/fileandprint/file/df
s/tshootfrs.mspx
To search for a particular issue, download the compiled html file (called
ultrasound.chm) and open it. Under the Contents tab you'll find everything
I mentioned above and more.
David Pharr, (e-mail address removed)
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Content-Class: urn:content-classes:message
| From: "Mike Newman" <
[email protected]>
| Sender: "Mike Newman" <
[email protected]>
| Subject: File Replication Failure
| Date: Mon, 1 Dec 2003 12:48:24 -0800
| Lines: 16
| Message-ID: <
[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="iso-8859-1"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
| thread-index: AcO4THaQU3MYvXxYRuu+dO5zmqgnUA==
| Newsgroups: microsoft.public.win2000.active_directory
| Path: cpmsftngxa06.phx.gbl
| Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.active_directory:58080
| NNTP-Posting-Host: tk2msftngxa12.phx.gbl 10.40.1.164
| X-Tomcat-NG: microsoft.public.win2000.active_directory
|
| When we try to apply specific security settings to any of
| our Domain Controllers, File Replication fails after an
| undetermined amount of time. The DC's run fine for up to 3
| weeks and then all of a sudden, we get an "ACCESS DENIED"
| error.
|
| When it comes to security settings, we have given the
| EVERYONE GROUP Full Control over the SYSVOL folder and or
| ACCESS THIS COMPUTER FROM A NETWORK but it all ends with
| the same result. The system will run fine for awhile and
| then boom, FRS stops working.
|
| We have 3 DC's located at the same site so everything is
| internal with no traffic going outside of a firewall.
|
| Mike Newman
|
