none
Is there any way to replicate SYSVOL immediately ? RRS feed

  • 질문

  • Is there any way to replicate SYSVOL immediately ?

    And if it's replicated SYSVOL folder modifed time is updated ?

    2012년 7월 5일 목요일 오전 5:36

답변

  • Hi,

    Sorry for the delay!

    For password policy, one domain only could have one password policy. So we suggest you only configure password policy on the default domain policy. If you have other requirement for password policy, please upgrade your domain to Windows 2008 so that you can set the FGPP.

    If there is anything with your other GPO, please create a new thread in the Group Policy forum, so that all members  in  that forum could see your thread.

    Regards,

    Yan Li


    Yan Li

    TechNet Community Support

    • 답변으로 제안됨 Sandesh Dubey 2012년 8월 3일 금요일 오후 10:07
    • 답변으로 표시됨 Yan Li_Moderator 2012년 8월 6일 월요일 오전 1:45
    2012년 8월 3일 금요일 오전 7:44
    중재자
  • Agreed with Yan Li by default Windows 2003 can have only One Password Policy per Domain and the same should be deployed in domain Password policy and if you want your Users to get a different one then Upgrade to Windows 2008.If you have deployed multiple password policy in Win2003 domain remove the same as it will not work and deploy only one password policy at domain level.

    Enforcing Strong Password Usage Throughout Your Organization
    http://technet.microsoft.com/library/cc875814.aspx

    Fine-Grained Password Policy requirements
    http://technet.microsoft.com/en-us/library/cc770842.aspx
    http://blogs.technet.com/b/seanearp/archive/2007/10/06/windows-server-2008-fine-grained-password-policy-walkthrough.aspx

    Hope this helps


    Best Regards,

    Sandesh Dubey.

    MCSE|MCSA:Messaging|MCTS|MCITP:Enterprise Adminitrator | My Blog

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    • 답변으로 표시됨 Yan Li_Moderator 2012년 8월 6일 월요일 오전 1:45
    2012년 8월 3일 금요일 오후 10:10

모든 응답

  • Have look at below link for sysvol force replication.
    http://www.windowstricks.in/2009/11/force-sysvol-replication.html


    Best Regards,

    Sandesh Dubey.

    MCSE|MCSA:Messaging|MCTS|MCITP:Enterprise Adminitrator | My Blog

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    • 답변으로 제안됨 VenkatSP 2012년 7월 5일 목요일 오후 3:59
    2012년 7월 5일 목요일 오전 5:47
  • Hi,

    Check below links:
    Quick TIP: Force FRS replication
    http://blogs.technet.com/b/justinturner/archive/2007/04/27/quick-tip-force-frs-replication.aspx

    Force sysvol replication
    http://www.windowstricks.in/2009/11/force-sysvol-replication.html


    Best Regards,

    Abhijit Waikar.
    MCSA 2003 | MCSA:Messaging | MCTS | MCITP:Server Administrator | Microsoft Community Contributor | My Blog

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    • 답변으로 제안됨 VenkatSP 2012년 7월 5일 목요일 오후 3:58
    2012년 7월 5일 목요일 오전 5:49
  • Are you facing any sysvol content miss match issue on DC.If you have defined the policy wait for sometime for replication to take place.But still if there is sysvol mismatch issue on DC's  you need to perfrom auth and non auth restore of sysvol.
    Reference link:http://support.microsoft.com/kb/290762/

    Hope this helps

    Best Regards,

    Sandesh Dubey.

    MCSE|MCSA:Messaging|MCTS|MCITP:Enterprise Adminitrator | My Blog

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    2012년 7월 5일 목요일 오전 6:18
  • Sysvol replication is carried out by FRS or DFS-R method. it wont depend on repadmin command line.

    http://social.technet.microsoft.com/wiki/contents/articles/8548.sysvol-and-netlogon-share-importance-in-active-directory.aspx

    Regards,

    _Prashant_


    MCSA|MCITP SA|Microsoft Exchange 2003 Blog - http://prashant1987.wordpress.com Disclaimer: This posting is provided AS-IS with no warranties/guarantees and confers no rights.

    2012년 7월 5일 목요일 오전 6:20
  • Thank you.

    ADsite&service and repadmin /syncall do not replicate GroupPolicy change ?


    Hi,

    There are two parts in Group Policy replication, Group Policy Template replication and Group Policy Container replication.

    Group Policy Template :This is a part of SYSVOL replication  by FRS or DFSR, the portion of the GPO that stores the settings into one or more files is the Group Policy Template (GPT). This portion of the GPO and the related files are stored on domain controllers under the Sysvol.

    Group Policy Container : This is a part of AD replication, the Group Policy Container (GPC) portion of the GPO is stored in Active Directory.

    Read this article:
    Understanding Group Policy Replication
    http://www.windowsnetworking.com/articles_tutorials/understanding-group-policy-replication.html

    The Group Policy container and Group Policy template are each assigned version numbers, which are incremented when the GPO is modified. Use GPOTool to verify that the versions are synchronized.

    Also read this for troubleshooting Group Policy replication issues: http://technet.microsoft.com/en-us/library/cc786241(v=ws.10).aspx


    Best Regards,

    Abhijit Waikar.
    MCSA 2003 | MCSA:Messaging | MCTS | MCITP:Server Administrator | Microsoft Community Contributor | My Blog

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.



    • 편집됨 Abhijit Waikar 2012년 7월 5일 목요일 오전 6:33
    • 답변으로 제안됨 VenkatSP 2012년 7월 5일 목요일 오후 3:58
    2012년 7월 5일 목요일 오전 6:32
  • If You are using DFS service for replication SYSVOL, You can use dfsrdiag command with SyncNow subcommand:

    dfsrdiag syncnow /RGName:"Domain System Volume" /Partner:OTHER_DC /Time:15 /v
    PS. You must run dfsrdiag command on the one DC, parameter /Partner points to the another DC.


    Сергей Панченко


    • 편집됨 Daemon-GTC 2012년 7월 5일 목요일 오전 7:22
    2012년 7월 5일 목요일 오전 7:20
  • Thank you .

    Problem I have now is password policy.

    I have two domain policy which is Default Domain Policy and other is Our Domain Policy both liked to our domain.

    We change password lengh,complexity policy, but end PC does not reflect policy change after gpupdate /force and PC restart.

    Our domain Policy is priority 1 and Default Domain Policy is priority 2.

    Result of gpresult /z display both Domain policy.

    Result of GPMC wizard meet our policy change ,but when we actually change DC policy, it does not meet our policy change. It was problem.

    If its windows 2003, you can't apply two different password or account lockout policy. If its multiple domain, then password policy using FGPP is applied on groups not on OU. In order to apply password policy, you need to reboot the machine & it might take 4 hours to update policy on the local machine.

    http://technet.microsoft.com/library/cc875814.aspx

    http://blogs.technet.com/b/askds/archive/2009/05/19/understanding-password-policies.aspx


    Awinish Vishwakarma - MVP - Directory Services

    My Blog: awinish.wordpress.com

    Disclaimer This posting is provided AS-IS with no warranties/guarantees and confers no rights.

    2012년 7월 5일 목요일 오전 9:56
    중재자
  • We use win2003 domain.

    If we had two password policy linked to domain, it cause trouble ?

    I thought higher priority password policy will be applied.

    MS support says SYSVOL replication looks fine(relicated to all DC successfully by update time and version).

    and they say about password policy, it is applied in server side compared to other policy.

    and our some DC is password policy applied , some are not applied.

    Yes, that is the issue. Since, windows 2003 AD supports single password & account lockout policy & when you configure two there is conflict between them. Configure & apply single password policy & that should be applied only at the domain level. Refer the link posted earlier.

    http://technet.microsoft.com/en-us/library/cc781633%28WS.10%29.aspx


    Awinish Vishwakarma - MVP - Directory Services

    My Blog: awinish.wordpress.com

    Disclaimer This posting is provided AS-IS with no warranties/guarantees and confers no rights.

    2012년 7월 5일 목요일 오후 2:32
    중재자
  • Hi,

    Fine Grained Password Policy is for Windows 2008 and above server.

    For details about how to configure FGPP on windows 2008, please refer to the below link:

    Windows Server 2008 - Fine Grained Password Policy Walkthrough

    http://blogs.technet.com/b/seanearp/archive/2007/10/06/windows-server-2008-fine-grained-password-policy-walkthrough.aspx

    Regards,

    Yan Li


    Yan Li

    TechNet Community Support

    2012년 7월 6일 금요일 오전 2:10
    중재자
  • You can have ONLY ONE password and account lockout policy in ANY 2003 AD Domain.In Windows Server 2008 introduces multiple password and account lockout policies through PSOs when the DFL = at least w2k8.

    AD DS Fine-Grained Password and Account Lockout Policy Step-by-Step Guide
    http://technet.microsoft.com/en-us/library/cc770842.aspx

    AD DS: Fine-Grained Password Policies
    http://technet.microsoft.com/en-us/library/cc770394(v=ws.10).aspx

    More on Fine - Grained Password policy Windows 2008
    http://social.technet.microsoft.com/Forums/pl-PL/winserverDS/thread/4ba40c5c-6eb8-4f3f-af22-7a28e9f9280c

    Hope this helps


    Best Regards,

    Sandesh Dubey.

    MCSE|MCSA:Messaging|MCTS|MCITP:Enterprise Adminitrator | My Blog

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    2012년 7월 6일 금요일 오전 2:45
  • Hi,

    Issue is occuring due to the two password policies which are set in the domain. By default,  in Windows server 2000/03 Active Directory domains, only one password policy and account lockout policy could be applied to all users in the domain. These policies were specified in the Default Domain Policy for the domain.

    As others said, different password policies are possible in Window Server 2008. In this operating system provides organizations with a way to define different password and account lockout policies for different sets of users in a domain.

    AD DS: Fine-Grained Password Policies
    http://technet.microsoft.com/en-us/library/cc770394(v=ws.10).aspx


    Best Regards,

    Abhijit Waikar.
    MCSA 2003 | MCSA:Messaging | MCTS | MCITP:Server Administrator | Microsoft Community Contributor | My Blog

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    2012년 7월 6일 금요일 오전 3:19
  • Hi,

    Sorry for the delay!

    For password policy, one domain only could have one password policy. So we suggest you only configure password policy on the default domain policy. If you have other requirement for password policy, please upgrade your domain to Windows 2008 so that you can set the FGPP.

    If there is anything with your other GPO, please create a new thread in the Group Policy forum, so that all members  in  that forum could see your thread.

    Regards,

    Yan Li


    Yan Li

    TechNet Community Support

    • 답변으로 제안됨 Sandesh Dubey 2012년 8월 3일 금요일 오후 10:07
    • 답변으로 표시됨 Yan Li_Moderator 2012년 8월 6일 월요일 오전 1:45
    2012년 8월 3일 금요일 오전 7:44
    중재자
  • HEllo,

    how is the link order if you configure a new GPO on domain level for the password policy, DDP first or yours? If you have multiple GPOs on the same level the link order must be correct so they are applied logical.


    Best regards

    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/

    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

    2012년 8월 3일 금요일 오전 8:20
  • Agreed with Yan Li by default Windows 2003 can have only One Password Policy per Domain and the same should be deployed in domain Password policy and if you want your Users to get a different one then Upgrade to Windows 2008.If you have deployed multiple password policy in Win2003 domain remove the same as it will not work and deploy only one password policy at domain level.

    Enforcing Strong Password Usage Throughout Your Organization
    http://technet.microsoft.com/library/cc875814.aspx

    Fine-Grained Password Policy requirements
    http://technet.microsoft.com/en-us/library/cc770842.aspx
    http://blogs.technet.com/b/seanearp/archive/2007/10/06/windows-server-2008-fine-grained-password-policy-walkthrough.aspx

    Hope this helps


    Best Regards,

    Sandesh Dubey.

    MCSE|MCSA:Messaging|MCTS|MCITP:Enterprise Adminitrator | My Blog

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    • 답변으로 표시됨 Yan Li_Moderator 2012년 8월 6일 월요일 오전 1:45
    2012년 8월 3일 금요일 오후 10:10
  • I had this problem. I resolves with this link https://youtu.be/qVqzJr7LHPk
    2020년 4월 1일 수요일 오전 2:53