Changing Two Way Replication to One Way in DFSR on RODC

In my earlier post, we discussed about how to configure One-Way Replication and Two-Way Replication in DFSR on Windows m2008 R2 Server (Even though the post were related to RODC, but they do apply the same even on a writable domain controllers)

Configuring One Way Replication in RODC
http://www.adshotgyan.com/2012/07/configuring-one-way-replication-in-rodc.html

Configuring Two Way Replication in RODC
http://www.adshotgyan.com/2012/08/configuring-two-way-replication-in-rodc.html

In this post, we will dicuss what if we want to change Two way replication (Already configured) to a One Way Replication

So Guys.... What are we waiting for.... Let`s get started :)

Lab

1. One Writable Domain Controller - MyDC
2. One Read Only Domain Controller - MyRODC

3. One Replication Group - Two Way Replication
4. One Replicated Folder - Two Way Data

Currently, we have a RG named Two Way Replication which has a RF named Two Way Data. The RG consist of two servers involved in Replication - MyDC and MyRODC

Looking at the Volume_.XML File on the server "MyDC", We can clearly see that the server MyDC for the RF "One Way Data" has a writable connection since its ReadOnly Attribute in the XML file is set to FALSE

Also, looking at the Volume_.XML File on the server "MyRODC", We can see that the server MyRODC for the RF "One Way Data" has a Read Only connection since its ReadOnly Attribute in the XML file is set to FALSE

Let`s the game begin....

We are now going to change the connection from Read Write to Read Only for the Server "MyRODC" for the RF "Two Way Data"

Done...

I know... As usual, You don't believe me.... You want a Proof?

Let`s go into the XML File on MyRODC and Lets check the value of "ReadOnly" attribute (Remember this value was earlier set to FALSE as this connection was Read Write)

Cool... So the RedOnly Attribute is Set to TRUE... Which means, this connection is Read Only

U still dont trust me... (Trust... hmm.... Its really tough to trust somebody....Just trust yourself...)

Coming back to DFSR :)

To prove my point, let me try to create a file in the folder which is now Read Only on the Server MyRODC

YES.... Again... RHS=LHS (I am unable to create a file since the folder is Read Only)

WAIT.... If you think that its over, then you are mistaken.... You have made a mistake in the above configuration, now rectify it by reading the following post... (Skip Reading this Post if you can afford to loose your data :))

Want to Change Read Only to Read Write in DFSR??? Really???
http://www.adshotgyan.com/2012/08/want-to-change-read-only-to-read-write.html

Changing One Way Replication to Two Way in DFSR on RODC

In my earlier post, we discussed about how to configure One-Way Replication and Two-Way Replication in DFSR on Windows m2008 R2 Server (Even though the post were related to RODC, but they do apply the same even on a writable domain controllers)

Configuring One Way Replication in RODC
http://www.adshotgyan.com/2012/07/configuring-one-way-replication-in-rodc.html

Configuring Two Way Replication in RODC
http://www.adshotgyan.com/2012/08/configuring-two-way-replication-in-rodc.html

In this post, we will dicuss what if we want to change One way replication (Already configured) to a Two Way Replication

So Guys.... What are we waiting for.... Let`s get started :)

Lab

1. One Writable Domain Controller - MyDC
2. One Read Only Domain Controller - MyRODC

3. One Replication Group - One Way Replication
4. One Replicated Folder - One Way Data

Currently, we have a RG named One way Replication which has a RF named One Way Data. The RG consist of two servers involved in Replication - MyDC and MyRODC

Looking at the Volume_.XML File on the server "MyDC", We can clearly see that the server MyDC for the RF "One Way Data" has a writable connection since its ReadOnly Attribute in the XML file is set to FALSE

Whereas looking at the Volume_.XML File on the server "MyRODC", We can see that the server MyRODC for the RF "One Way Data" has a Read Only connection since its ReadOnly Attribute in the XML file is set to TRUE

Let`s the game begin....

We are now going to change the connection from Read Only to Read Write for the Server "MyRODC" for the RF "One Way Data"

Done...

I know... As usual, You don't believe me.... You want a Proof?

So let me create a file on MyRODC and since this has been now set as "Read Write", it should allow me to create a file which it did not allowed earlier as it was "Read Only" (Configuring One Way Replication in RODC: http://www.adshotgyan.com/2012/07/configuring-one-way-replication-in-rodc.html)

Yupiiiiiiiii...... Hence Proved (RHS = LHS)....:)

And my dear file got replicated to the other server....

WAIT.... If you think that its over, then you are mistaken.... You have made a mistake in the above configuration, now rectify it by reading the following post... (Skip Reading this Post if you can afford to loose your data :))

Want to Change Read Only to Read Write in DFSR??? Really???

http://www.adshotgyan.com/2012/08/want-to-change-read-only-to-read-write.html

Configuring Two Way Replication in DFSR on RODC

In my previous post, we saw how can we configure 1-Way Replication in DFSR on RODC... "RODC - The Story of One Way Replication" (http://www.adshotgyan.com/2012/07/rodc-one-way-replication-story.html)

But does that means that we cannot have a 2-Way Replication in DFSR on RODC?

Don't you remember in an earlier post "Configuring One Way Replication in RODC" (http://www.adshotgyan.com/2012/07/configuring-one-way-replication-in-rodc.html) we saw that by default when we configure Replication in DFSR on a RODC, It is always a 2-Way Replication

 So, In this post, We will see how can we configure a 2-Way Replication in DFSR on RODC

My Lab:-

One Writable Domain Controller: MyDC
One Read Only Domain Controller: MyRODC

Replicated Folder: Two Way Data
Replicated Group: Two Way Replication

The Folder "Two Way Data" has been created on the writable domain controller "MyDC"

The same folder "Two Way Data" has also been created on the read only domain controller

Please remember the fact that the folder name need NOT be the same. I have kept the folder name just for ease

Creating the Replication Group

Added the Servers involved in Replication

Path for the folder to be replicated being defined on the writable domain controller "MyDC"

Defining the path of the folder being replicated on the read only server "MyRODC"

The Turning Point: The selection of "Make the Selected Replicated Folder on the Member Read Only". If we want to configure a 2-Way Replication, then do NOT select this check box. But just in case you wants to enable 1-Way Replication, then you need to select this check box

So the key to 1-Way / 2-Way Replication is this Check Box

The Replicated Group is now Created... And its a 2-Way Replication Group....



Let`s create a file in the Replicated Folder on the writable domain controller "MyDC"

And the file has got replicated on to the read only domain controller "MyRODC"

The main test begins now.... Let`s keep our fingers cross

We are now going to take off.... :).... Creating a file on the read only domain controller "MyRODC"....

Remember that earlier when we configured 1-Way Replication and then tried creating a file on the read only domain controller "MyRODC" then it didn't allowed us to do so.. Gave us an error "You do not have Permissions"

Wow.... This time we were able to create a file on the read only domain controller

And the file got replicated as well... :)

Configuring One Way Replication in DFSR on RODC

In this post, We will see how can create a Replication Group that will have 1-Way Replication between a Writable Domain Controller and a Read Only Domain Controller just as we have 1-Way Replication for SYSVOL

On the Writable Domain Controller "MyDC", We have created a Folder Named "One Way Data"

Created the same folder named "One Way Replication" on the Read Only Domain Controller "MyRODC"

Creating the Replication Group

Added the servers "MyDC and "MyRODC"

Selecting the folder to be replicated "C:\One Way Data" on the server "MyDC" which is a writable domain controller

Now comes the main point... The Read Only Domain Controller

The same folder "One Way Data" is also specified on the Read Only Domain Controller "MyRODC"... Wait... Don't you think that we did the same thing in the last post while creating a Replication Group for 2-Way Replication... So where lies the difference... huh

The difference lies in the small check box which says "Make the selected Replicated Folder on the member read only"

And we are done....

Here comes the Replication Group with 1-Way Replication Enabled.... Don`t miss the "Read-Only" tag that is mentioned in front the server "MyRODC"

Let`s do further testings...

Let me create a file named "From MyDC"on the writable server "MyDC" in the Replicated Folder

And as expected the file has replicated from MyDC to MyRODC

Let me create a file on the Read Only Domain Controller Server in the Replicated Folder "One Way Data"... Ideally, It should not replicate the file that I will create on the RODC Server... Lets see...

Oops....  Whats this... It didn't let me create the file... Yes... That is 1-Way Replication my dear friends.... Forget about if RODC will allow the file to replicate or not, It will not even allow you to create a file in that folder which is replicating 1-Way... :)

And then I started my Journey to see where lies the "Difference"

Check the Permissions on the Folder on the the Read Only Domain Controller

 Now check the permissions on the Writable Domain Controller

And my dear friends, you will be surprised to know that the permissions for the folder on both the servers will be exactly the same.... EXACTLY THE SAME
So the question is... Where lies the difference... hmm... Let me get some almonds for myself... :)

I looked into Active Directory and then  Registry, Ran a couple of tests and even Procmon... But didn't found anything relevant... And then.... The Almonds worked....

The answer lies in the "Heart" of DFSR Configuration... And if you thought that the heart is Active Directory, then you were wrong... The Heart is "System Volume Information" and the data that is stored under this folder

NOTE:- Guys, By default you do not have permissions on the "System Volume Information" folder... I took the ownership of the folder just to show you the data inside it... Do not play with this folder in production environment...

The Main Configuration Files for DFSR

And the files which we will require

Every Volume (Logical Volumes) will have a XML File in this folder. We need to select the file which corresponds to the volume which is hosting our data. In this case, It as simple as we had only one volume, so only one XML file

Let`s open the XML File.... And Browse to the Information related to the Replication Group that we have created for 1-Way Replication

(In the XML File, You will find different sections, One section per Replication Group)

For the Replicated Group "One Way Data", the Attribute "ReadOnly" Is set to "FALSE"

Remember the fact that currently we are on the writable domain controller "MyDC"

Now let`s move our concentration towards the Read Only Domain Controller

The same XML File... Volume....

The same section... Replication Group : One Way Replication

And the same Attribute: ReadOnly : TRUE

Ahhh... Here lies the difference.... the attribute is set to "TRUE"

You don't believe me... huh... I will Prove it....
Remember the RG that we created earlier which had 2-Way Replication Enabled....

For that RG, the value of "ReadOnly" is False on the Writable Domain Controller

And on the Read Only Domain Controller....

The value is also False

So, the bottom line Is... That for this Replication Group, Since the value of "ReadOnly" is set to FALSE on both the servers, hence fourth, It will replicate both ways... (2-Way)