25 November, 2010

How To Recreate SYSVOL Structure

Sysvol Structure: C:\Windows\Sysvol

- Domain
        - Policies
        - Scripts
- Staging
        - Domain
- Staging Areas
        - <Domain Name>
- Sysvol
        - <Domain Name>

For more information, http://www.adshotgyan.com/search/label/FRS


Currently, SYSVOL is shared, with the complete structure and we are getting Event ID 13516 (NTFRS)


We need to stop the ntfrs service before deleting the folders in SYSVOL




Before making any changes in SYSVOL, always take a backup of the complete SYSVOL content




Once the folders in SYSVOL are deleted, and the NTFRS service is restarted, We will get the Event ID 13539, 13552, 13555 stating that the SYSVOL directory is either missing or has an invalid entry in AD




We now have to create the complete SYSVOL Structure which comprises of the following Folders

C:\Windows\SYSVOL
1. domain
2. staging
3. staging areas
4. sysvol

C:\Windows\SYSVOL\domain
1. Policies
2. Scripts





Once the root folders are created, we need to create the Junction Points
To create Junction Points, we will use "Linkd" which is a part of Windows 2003 Resource Kit


Junction Points in SYSVOL

- Domain
        - Policies
        - Scripts
- Staging
        - Domain
- Staging Areas
        - Contoso.com (This is a Junction Point that points to the domain folder in C:\Windows\Sysvol\Staging)
- Sysvol
        - Contoso.com (This is a Junction Point that points to the domain folder in C:\Windows\Sysvol)

* Contoso.com is an example here. In you scenario, you will use the name of your domain





Once the Junction Points are created, then start the NTFRS Service


Sysvol should be now Shared

* To get the Policies, you either have to recreate the default policies by running the command dcgpofix (2003)/ RecreateDefPol (2000) or if you have a backup then you can restore the content of SYSVOL from the backup

* Running dcgpofix/RecreateDefPol has adverse effects on CA/Exchange/SQL. Please make sure that you run this only under guidance


Check the Event Viewer for the Event ID 13516 (NTFRS)