RE: [ActiveDir] sysvol replication

2006-10-22 Thread Almeida Pinto, Jorge de
ah yes, very true...
 
In Longhorn, once Domain Functional Level is reached (i.e. all DCs in a 
domain run Longhorn Server and the switch to DFL 3 has been made), the DCs 
will switch to leveraging the new DFSR replication mechanism (which is 
basically what was made available with Win2003 R2). This is a very efficient 
for replicating files as it only replicates the actual changes - incl. 
ACEs.

the changes only are due to RDC (Remote Differencial Compression)
read more here:
http://technet2.microsoft.com/WindowsServer/en/library/f9b98a0f-c1ae-4a9f-9724-80c679596e6b1033.mspx?mfr=true
search for : Remote Differential Compression details
 
Met vriendelijke groeten / Kind regards,
Ing. Jorge de Almeida Pinto
Senior Infrastructure Consultant
MVP Windows Server - Directory Services
 
LogicaCMG Nederland B.V. (BU RTINC Eindhoven)
(   Tel : +31-(0)40-29.57.777
(   Mobile : +31-(0)6-26.26.62.80
*   E-mail : see sender address



From: [EMAIL PROTECTED] on behalf of Grillenmeier, Guido
Sent: Fri 2006-10-20 00:45
To: ActiveDir@mail.activedir.org; ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] sysvol replication



my reply was a little hurried - so what I meant was that in 2k/2k3 the NTFS 
permission/ACL changes will actually trigger a full replication of all files 
and folders that have been affected by the change of permissions (i.e. when the 
changes are applied at the top level, all files will be replicated). This is 
due to a limitation in the current version of FRS which always replicates the 
whole file for any change that happens to the files (and an ACL change is just 
seen as any other change).

In Longhorn, once Domain Functional Level is reached (i.e. all DCs in a domain 
run Longhorn Server and the switch to DFL 3 has been made), the DCs will switch 
to leveraging the new DFSR replication mechanism (which is basically what was 
made available with Win2003 R2). This is a very efficient for replicating files 
as it only replicates the actual changes - incl. ACEs.

and yes the SYSVOL replication follows your site-link schedules - however, 
since Win2k3 SP1 (and Win2k SP4) you can also (finally) trigger it manually via 
the NTFRSUTL tool. Also I've seen ocations where SYSVOL actually replicated 
outside the site-link schedule window - can't tell you right now under which 
circumstances this is the case.

/Guido




From: [EMAIL PROTECTED] on behalf of Almeida Pinto, Jorge de
Sent: Thu 10/19/2006 8:24 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] sysvol replication


won't change until you deploy Longhorn and switch to LH DFL

Guido, can you explain what you mean with this?

(I know SYSVOL will be replicated with DFSR as soon as DFL=W2K7 is reached)

thanks
jorge

Met vriendelijke groeten / Kind regards,
Ing. Jorge de Almeida Pinto
Senior Infrastructure Consultant
MVP Windows Server - Directory Services

LogicaCMG Nederland B.V. (BU RTINC Eindhoven)
(   Tel : +31-(0)40-29.57.777
(   Mobile : +31-(0)6-26.26.62.80
*   E-mail : see sender address



From: [EMAIL PROTECTED] on behalf of Grillenmeier, Guido
Sent: Thu 2006-10-19 19:25
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] sysvol replication



Yes, not only for Win2k, but also for Win2k3 (won't change until you deploy 
Longhorn and switch to LH DFL)

/Guido

---
sent wirelessly using iPAQ 6900

-Original Message-
From: Graham Turner [EMAIL PROTECTED]
To: activedir@mail.activedir.org activedir@mail.activedir.org
Sent: 10/19/06 5:29 PM
Subject: [ActiveDir] sysvol replication

Just a quick query on sysvol replication

we have put in place strategy for delegation of directory shared as netlogon by 
way
of adding an ACE to the NTFS permissions

is it correct that on DC's running Windows 2000 SP4 that a change in the NTFS
permissions will generate the change notifications such that the NTFS permission
change is replicated to all DC's ??

in terms of schedule for sysvol does it use the schedule as determined by site 
link
configuration ??

Thanks







List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx


List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/




This e-mail and any attachment is for authorised use by the intended 
recipient(s) only. It may contain proprietary material, confidential 
information and/or be subject to legal privilege. It should not be copied, 
disclosed to, retained or used by, any other party. If you are not an intended 
recipient then please promptly delete this e-mail

RE: [ActiveDir] sysvol replication

2006-10-19 Thread Grillenmeier, Guido
Yes, not only for Win2k, but also for Win2k3 (won't change until you deploy 
Longhorn and switch to LH DFL)

/Guido

--- 
sent wirelessly using iPAQ 6900 

-Original Message-
From: Graham Turner [EMAIL PROTECTED]
To: activedir@mail.activedir.org activedir@mail.activedir.org
Sent: 10/19/06 5:29 PM
Subject: [ActiveDir] sysvol replication

Just a quick query on sysvol replication

we have put in place strategy for delegation of directory shared as netlogon by 
way
of adding an ACE to the NTFS permissions

is it correct that on DC's running Windows 2000 SP4 that a change in the NTFS
permissions will generate the change notifications such that the NTFS permission
change is replicated to all DC's ??

in terms of schedule for sysvol does it use the schedule as determined by site 
link
configuration ??

Thanks







List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx


RE: [ActiveDir] sysvol replication

2006-10-19 Thread Almeida Pinto, Jorge de
The addition/change of an ACE on a folder or file is like the addition/change 
of file/folder...
 
within a site it will replicate immediately and between sites according to the 
schedule as soon as the replication window opens
 
Met vriendelijke groeten / Kind regards,
Ing. Jorge de Almeida Pinto
Senior Infrastructure Consultant
MVP Windows Server - Directory Services
 
LogicaCMG Nederland B.V. (BU RTINC Eindhoven)
(   Tel : +31-(0)40-29.57.777
(   Mobile : +31-(0)6-26.26.62.80
*   E-mail : see sender address



From: [EMAIL PROTECTED] on behalf of Graham Turner
Sent: Thu 2006-10-19 17:01
To: activedir@mail.activedir.org
Subject: [ActiveDir] sysvol replication



Just a quick query on sysvol replication

we have put in place strategy for delegation of directory shared as netlogon by 
way
of adding an ACE to the NTFS permissions

is it correct that on DC's running Windows 2000 SP4 that a change in the NTFS
permissions will generate the change notifications such that the NTFS permission
change is replicated to all DC's ??

in terms of schedule for sysvol does it use the schedule as determined by site 
link
configuration ??

Thanks







List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx




This e-mail and any attachment is for authorised use by the intended 
recipient(s) only. It may contain proprietary material, confidential 
information and/or be subject to legal privilege. It should not be copied, 
disclosed to, retained or used by, any other party. If you are not an intended 
recipient then please promptly delete this e-mail and any attachment and all 
copies and inform the sender. Thank you.
winmail.dat

RE: [ActiveDir] sysvol replication

2006-10-19 Thread Almeida Pinto, Jorge de
won't change until you deploy Longhorn and switch to LH DFL
 
Guido, can you explain what you mean with this?
 
(I know SYSVOL will be replicated with DFSR as soon as DFL=W2K7 is reached)
 
thanks
jorge
 
Met vriendelijke groeten / Kind regards,
Ing. Jorge de Almeida Pinto
Senior Infrastructure Consultant
MVP Windows Server - Directory Services
 
LogicaCMG Nederland B.V. (BU RTINC Eindhoven)
(   Tel : +31-(0)40-29.57.777
(   Mobile : +31-(0)6-26.26.62.80
*   E-mail : see sender address



From: [EMAIL PROTECTED] on behalf of Grillenmeier, Guido
Sent: Thu 2006-10-19 19:25
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] sysvol replication



Yes, not only for Win2k, but also for Win2k3 (won't change until you deploy 
Longhorn and switch to LH DFL)

/Guido

---
sent wirelessly using iPAQ 6900

-Original Message-
From: Graham Turner [EMAIL PROTECTED]
To: activedir@mail.activedir.org activedir@mail.activedir.org
Sent: 10/19/06 5:29 PM
Subject: [ActiveDir] sysvol replication

Just a quick query on sysvol replication

we have put in place strategy for delegation of directory shared as netlogon by 
way
of adding an ACE to the NTFS permissions

is it correct that on DC's running Windows 2000 SP4 that a change in the NTFS
permissions will generate the change notifications such that the NTFS permission
change is replicated to all DC's ??

in terms of schedule for sysvol does it use the schedule as determined by site 
link
configuration ??

Thanks







List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx




This e-mail and any attachment is for authorised use by the intended 
recipient(s) only. It may contain proprietary material, confidential 
information and/or be subject to legal privilege. It should not be copied, 
disclosed to, retained or used by, any other party. If you are not an intended 
recipient then please promptly delete this e-mail and any attachment and all 
copies and inform the sender. Thank you.
winmail.dat

RE: [ActiveDir] sysvol replication

2006-10-19 Thread David Adner
If you're asking about applying ACLs via GPO against SYSVOL then yes, it
will cause SYSVOL to replicate.  However, this should only happen once.
When the GPO is re-applied FRS should suppress replication of the files
since nothing is actually changing (unless, of course, someone had actually
changed an ACL in between GPO refreshes).  Check KB315045 and/or search for
Event ID 13567.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Graham Turner
Sent: Thursday, October 19, 2006 10:02 AM
To: activedir@mail.activedir.org
Subject: [ActiveDir] sysvol replication

Just a quick query on sysvol replication

we have put in place strategy for delegation of directory shared as netlogon
by way
of adding an ACE to the NTFS permissions

is it correct that on DC's running Windows 2000 SP4 that a change in the
NTFS
permissions will generate the change notifications such that the NTFS
permission
change is replicated to all DC's ??

in terms of schedule for sysvol does it use the schedule as determined by
site link
configuration ??

Thanks







List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx


RE: [ActiveDir] sysvol replication

2006-10-19 Thread Grillenmeier, Guido
my reply was a little hurried - so what I meant was that in 2k/2k3 the NTFS 
permission/ACL changes will actually trigger a full replication of all files 
and folders that have been affected by the change of permissions (i.e. when the 
changes are applied at the top level, all files will be replicated). This is 
due to a limitation in the current version of FRS which always replicates the 
whole file for any change that happens to the files (and an ACL change is just 
seen as any other change).
 
In Longhorn, once Domain Functional Level is reached (i.e. all DCs in a domain 
run Longhorn Server and the switch to DFL 3 has been made), the DCs will switch 
to leveraging the new DFSR replication mechanism (which is basically what was 
made available with Win2003 R2). This is a very efficient for replicating files 
as it only replicates the actual changes - incl. ACEs.
 
and yes the SYSVOL replication follows your site-link schedules - however, 
since Win2k3 SP1 (and Win2k SP4) you can also (finally) trigger it manually via 
the NTFRSUTL tool. Also I've seen ocations where SYSVOL actually replicated 
outside the site-link schedule window - can't tell you right now under which 
circumstances this is the case.
 
/Guido

 


From: [EMAIL PROTECTED] on behalf of Almeida Pinto, Jorge de
Sent: Thu 10/19/2006 8:24 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] sysvol replication


won't change until you deploy Longhorn and switch to LH DFL
 
Guido, can you explain what you mean with this?
 
(I know SYSVOL will be replicated with DFSR as soon as DFL=W2K7 is reached)
 
thanks
jorge
 
Met vriendelijke groeten / Kind regards,
Ing. Jorge de Almeida Pinto
Senior Infrastructure Consultant
MVP Windows Server - Directory Services
 
LogicaCMG Nederland B.V. (BU RTINC Eindhoven)
(   Tel : +31-(0)40-29.57.777
(   Mobile : +31-(0)6-26.26.62.80
*   E-mail : see sender address



From: [EMAIL PROTECTED] on behalf of Grillenmeier, Guido
Sent: Thu 2006-10-19 19:25
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] sysvol replication



Yes, not only for Win2k, but also for Win2k3 (won't change until you deploy 
Longhorn and switch to LH DFL)

/Guido

---
sent wirelessly using iPAQ 6900

-Original Message-
From: Graham Turner [EMAIL PROTECTED]
To: activedir@mail.activedir.org activedir@mail.activedir.org
Sent: 10/19/06 5:29 PM
Subject: [ActiveDir] sysvol replication

Just a quick query on sysvol replication

we have put in place strategy for delegation of directory shared as netlogon by 
way
of adding an ACE to the NTFS permissions

is it correct that on DC's running Windows 2000 SP4 that a change in the NTFS
permissions will generate the change notifications such that the NTFS permission
change is replicated to all DC's ??

in terms of schedule for sysvol does it use the schedule as determined by site 
link
configuration ??

Thanks







List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx


List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir@mail.activedir.org/


Re: [ActiveDir] SYSVOl - replication

2004-07-06 Thread Manjeet
This looks like a volume configuration issue - looks like FRS is not replicate for some reason - is there anything different about the replica root, volume, staging etc. on this DC?
To rectify the FRS replication you can use Ultra Sound Monitor tool.

Please visit the below link

www.microsoft.com/technet/community/ chats/trans/windowsnet/wnet0204.mspx 


Thanks and Regards
Manjeet
System/Email Administrator


"Tashildar, Dinesh (Cognizant)" [EMAIL PROTECTED] wrote:


Suddenly one of my Domain controllers SYSVOL folder has become empty. Now I can only view \SYSVOL\domainname.com folder without any files. As well Netlogon share is missing.
Any thought, why this has happened ? And how to slove this issue? 
Thanks in advance. 
Regards, Dinesh Tashildar Cognizant Technology Solutions India Pvt. Ltd. Tel : 91-20-4062600 Extn : 3119 Vnet : 23119 This e-mail and any files transmitted with it are for the sole use of the intended recipient(s) and may contain confidential and privileged information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. Any unauthorised review, use, disclosure, dissemination, forwarding, printing or copying of this email or any action taken in reliance on this e-mail is strictly prohibited and may be unlawful.Visit us at http://www.cognizant.com
		Do you Yahoo!?
New and Improved Yahoo! Mail - Send 10MB messages!

RE: [ActiveDir] SYSVOl - replication

2004-07-06 Thread Rutherford, Robert
Title: Message



Does a 
dcdiag give any clues? EventLog?

You 
could try a restore... if the DC is just a DC and you have more, then I'd just 
go for a DCPROMO down and then up again.

  
  -Original Message-From: Tashildar, 
  Dinesh (Cognizant) [mailto:[EMAIL PROTECTED] Sent: 06 July 
  2004 07:47To: [EMAIL PROTECTED]Subject:
  [ActiveDir] SYSVOl - replication
  Suddenly one of my Domain controllers 
  SYSVOL folder has become empty. Now I can only view \SYSVOL\domainname.com 
  folder without any files. As well Netlogon share is missing.
  Any thought, why this has happened ? And 
  how to slove this issue? 
  Thanks in advance. 
  Regards, Dinesh Tashildar Cognizant Technology Solutions India Pvt. Ltd. Tel : 91-20-4062600 Extn : 3119 
  Vnet : 23119 
This e-mail and the information it contains are confidential and may be privileged. If you have received this e-mail in error please notify the sender immediately and delete the material from any computer. Unless you are the intended recipient, you should not copy this e-mail for any purpose, or disclose its contents to any other person. The MCPS-PRS Alliance is not responsible for the completeness or accuracy of this communication as it has been transmitted over a public network. Whilst the MCPS-PRS Alliance monitors all communications for potential viruses, we accept no responsibility for any loss or damage caused by this e-mail and the information it contains.It is the recipient's responsibility to scan this e-mail and any attachments for viruses. Any e-mails sent to and from the MCPS-PRS Alliance servers may be monitored for quality control and other purposes.The MCPS-PRS Alliance Limited is a limited company registered in England under company number 03444246 whose registered office is at c/o 29-33 Berners Street, London, W1T 3AB.


RE: [ActiveDir] SYSVOl - replication

2004-07-06 Thread Tashildar, Dinesh (Cognizant)



Below tools gives monitoring ability than fixing a problem. 
I would like to fix my SYSvol problem.
How do I restore all files under SYSVOL, is it ok to just 
copy and paste contents from another DC? Again I am not sure replication would 
occur after this..


From: Manjeet [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, July 06, 2004 12:34 PMTo: 
[EMAIL PROTECTED]Subject: Re: [ActiveDir] SYSVOl - 
replication

This looks like a volume configuration issue - looks like FRS is not 
replicate for some reason - is there anything different about the replica root, 
volume, staging etc. on this DC?
To rectify the FRS replication you can use Ultra Sound Monitor 
tool.

Please visit the below link

www.microsoft.com/technet/community/ 
chats/trans/windowsnet/wnet0204.mspx 


Thanks and Regards
Manjeet
System/Email Administrator


"Tashildar, Dinesh (Cognizant)" 
[EMAIL PROTECTED] wrote:

  
  Suddenly one of my Domain controllers 
  SYSVOL folder has become empty. Now I can only view \SYSVOL\domainname.com 
  folder without any files. As well Netlogon share is missing.
  Any thought, why this has happened ? And 
  how to slove this issue? 
  Thanks in advance. 
  Regards, Dinesh Tashildar Cognizant Technology Solutions India Pvt. Ltd. Tel : 91-20-4062600 Extn : 3119 
  Vnet : 23119 This 
  e-mail and any files transmitted with it are for the sole use of the intended 
  recipient(s) and may contain confidential and privileged information. If 
  you are not the intended recipient, please contact the sender by reply e-mail 
  and destroy all copies of the original message. Any unauthorised review, use, 
  disclosure, dissemination, forwarding, printing or copying of this email or 
  any action taken in reliance on this e-mail is strictly prohibited and may be 
  unlawful.Visit us at http://www.cognizant.com


Do you Yahoo!?New 
and Improved Yahoo! Mail - Send 10MB messages!
This e-mail and any files transmitted with it are for the sole use of the intended 
recipient(s) and may contain confidential and privileged information. 
If you are not the intended recipient, please contact the sender by reply e-mail and 
destroy all copies of the original message. Any unauthorised review, use, disclosure, 
dissemination, forwarding, printing or copying of this email or any action taken in 
reliance on this e-mail is strictly prohibited and may be unlawful.
Visit us at http://www.cognizant.com


RE: [ActiveDir] SYSVOl - replication

2004-07-06 Thread mathif
Title: Message



Check for FRS Event Entries, that will help a lot in 
troubleshooting.
Cheers,
Athif

  
  -Original Message-From: Rutherford, 
  Robert [mailto:[EMAIL PROTECTED] Sent: 
  Tuesday, July 06, 2004 11:49 AMTo: 
  [EMAIL PROTECTED]Subject: RE: [ActiveDir] SYSVOl - 
  replication
  Does 
  a dcdiag give any clues? EventLog?
  
  You 
  could try a restore... if the DC is just a DC and you have more, then I'd just 
  go for a DCPROMO down and then up again.
  

-Original Message-From: Tashildar, 
Dinesh (Cognizant) [mailto:[EMAIL PROTECTED] Sent: 06 
July 2004 07:47To: 
[EMAIL PROTECTED]Subject: [ActiveDir] SYSVOl - 
replication
Suddenly one of my Domain controllers 
SYSVOL folder has become empty. Now I can only view \SYSVOL\domainname.com 
folder without any files. As well Netlogon share is missing.
Any thought, why this has happened ? And 
how to slove this issue? 
Thanks in advance. 
Regards, Dinesh Tashildar Cognizant Technology Solutions India Pvt. Ltd. Tel : 91-20-4062600 Extn : 3119 
Vnet : 23119 
  



  - 

 This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom/which they are addressed. If you have received this email in error please notify the system manager at the following email address: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of Al Faisaliah Group. Internet communications cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, arrive late or contain viruses. The sender therefore does not accept liability for any errors or omissions in the context of this message, which arise as a result of Internet transmission.  Finally, the recipient should check this email and any attachments for the presence of viruses. Al Faisaliah Group accepts no liability for any damage caused by any virus transmitted by this email. 

  -