R
Rich S.
Hello,
In my environment, I have 2 domain controllers at HQ, and 1 DC at each of 3
remote offices.
I forget the correct win2k term, but my master/primary DC at HQ is getting
the following events in the FRS log:
- 13555
- 13552
These errors are occurring roughly every 5 minutes.
On my remote DCs, I get a corresponding EventID 13508. These occur roughly
1 time every 24 hours.
I have followed the procedure from www.eventid.net for the 13555 w/o
success.
Q-articles have led me to ntfrs_000x files located in c:\winnt\debug.
A few errors are popping up here:
********************** Excerpts from c:\winnt\debug\ntfrs_0005.??? (Not
sure of the extension) ****************
[System\CurrentControlSet\Services\NtFrs\Parameters\SysVol] "SysVol
Information is Committed". WStatus: ERROR_FILE_NOT_FOUND
*** from here to the end of the file ******
2344: 10423: S0: 13:11:16> :S: Replica subsystem has started.
<RcsHasReplicaRootPathMoved: 3332: 8730: S0: 13:11:16> ERROR - Replica
root guid mismatch for Replica Set (DOMAIN SYSTEM VOLUME (SYSVOL SHARE))
<RcsHasReplicaRootPathMoved: 3332: 8733: S0: 13:11:16> ERROR - Replica
root guid (FS) (37980576-b2f9-4217-95d29caaac9c2aff)
<RcsHasReplicaRootPathMoved: 3332: 8736: S0: 13:11:16> ERROR - Replica
root guid (DB) (b369457b-27a1-4c99-94814295ccc8b2e4)
<RcsHasReplicaRootPathMoved: 3332: 8738: S0: 13:11:16> ERROR - Replica
Set (DOMAIN SYSTEM VOLUME (SYSVOL SHARE)) is marked to be deleted
<FrsPrintEvent: 3332: 606: S0: 13:11:16> :E: Eventlog
written for EVENT_FRS_ROOT_HAS_MOVED (13559) severity: Error at: Tue, Aug
12 2003 13:11:16
<FrsPrintEvent: 3332: 609: S0: 13:11:16> :E: STRINGS:
<FrsPrintEvent: 3332: 612: S0: 13:11:16> :E: 0 : 'DOMAIN
SYSTEM VOLUME (SYSVOL SHARE)'
<FrsPrintEvent: 3332: 612: S0: 13:11:16> :E: 1 :
'c:\winnt\sysvol\domain'
<FrsPrintEvent: 3332: 612: S0: 13:11:16> :E: 2 :
'c:\winnt\sysvol\domain'
<FrsPrintEvent: 3332: 612: S0: 13:11:16> :E: 3 : '5'
<RcsStartReplicaSetMember: 3332: 9034: S0: 13:11:16> ERROR Command
file not found at the new root
c:\winnt\sysvol\domain\NTFRS_CMD_FILE_MOVE_ROOT. Can not move root.
<FrsHashCalcString: 2216: 4777: S0: 13:12:11> Name =
S-1-5-21-1258624081-142609888-2068054413-2143
<SERVER_FrsRpcSendCommPkt: 2216: 436: S0: 13:12:11> ++ ERROR -
Invalid Partner: AuthClient:13_MILE\BACKUP$,
AuthSid:S-1-5-21-1258624081-142609888-2068054413-2143
<FrsHashCalcString: 2216: 4777: S0: 13:12:14> Name =
S-1-5-21-1258624081-142609888-2068054413-2143
Can anyone help me figure this out. I'm really confused.
TIA,
Rich
In my environment, I have 2 domain controllers at HQ, and 1 DC at each of 3
remote offices.
I forget the correct win2k term, but my master/primary DC at HQ is getting
the following events in the FRS log:
- 13555
- 13552
These errors are occurring roughly every 5 minutes.
On my remote DCs, I get a corresponding EventID 13508. These occur roughly
1 time every 24 hours.
I have followed the procedure from www.eventid.net for the 13555 w/o
success.
Q-articles have led me to ntfrs_000x files located in c:\winnt\debug.
A few errors are popping up here:
********************** Excerpts from c:\winnt\debug\ntfrs_0005.??? (Not
sure of the extension) ****************
[System\CurrentControlSet\Services\NtFrs\Parameters\SysVol] "SysVol
Information is Committed". WStatus: ERROR_FILE_NOT_FOUND
*** from here to the end of the file ******
2344: 10423: S0: 13:11:16> :S: Replica subsystem has started.
<RcsHasReplicaRootPathMoved: 3332: 8730: S0: 13:11:16> ERROR - Replica
root guid mismatch for Replica Set (DOMAIN SYSTEM VOLUME (SYSVOL SHARE))
<RcsHasReplicaRootPathMoved: 3332: 8733: S0: 13:11:16> ERROR - Replica
root guid (FS) (37980576-b2f9-4217-95d29caaac9c2aff)
<RcsHasReplicaRootPathMoved: 3332: 8736: S0: 13:11:16> ERROR - Replica
root guid (DB) (b369457b-27a1-4c99-94814295ccc8b2e4)
<RcsHasReplicaRootPathMoved: 3332: 8738: S0: 13:11:16> ERROR - Replica
Set (DOMAIN SYSTEM VOLUME (SYSVOL SHARE)) is marked to be deleted
<FrsPrintEvent: 3332: 606: S0: 13:11:16> :E: Eventlog
written for EVENT_FRS_ROOT_HAS_MOVED (13559) severity: Error at: Tue, Aug
12 2003 13:11:16
<FrsPrintEvent: 3332: 609: S0: 13:11:16> :E: STRINGS:
<FrsPrintEvent: 3332: 612: S0: 13:11:16> :E: 0 : 'DOMAIN
SYSTEM VOLUME (SYSVOL SHARE)'
<FrsPrintEvent: 3332: 612: S0: 13:11:16> :E: 1 :
'c:\winnt\sysvol\domain'
<FrsPrintEvent: 3332: 612: S0: 13:11:16> :E: 2 :
'c:\winnt\sysvol\domain'
<FrsPrintEvent: 3332: 612: S0: 13:11:16> :E: 3 : '5'
<RcsStartReplicaSetMember: 3332: 9034: S0: 13:11:16> ERROR Command
file not found at the new root
c:\winnt\sysvol\domain\NTFRS_CMD_FILE_MOVE_ROOT. Can not move root.
<FrsHashCalcString: 2216: 4777: S0: 13:12:11> Name =
S-1-5-21-1258624081-142609888-2068054413-2143
<SERVER_FrsRpcSendCommPkt: 2216: 436: S0: 13:12:11> ++ ERROR -
Invalid Partner: AuthClient:13_MILE\BACKUP$,
AuthSid:S-1-5-21-1258624081-142609888-2068054413-2143
<FrsHashCalcString: 2216: 4777: S0: 13:12:14> Name =
S-1-5-21-1258624081-142609888-2068054413-2143
Can anyone help me figure this out. I'm really confused.
TIA,
Rich