StupidIT Donate

DFSR AUTHORITATIVE RESTORE

11/24/19 - activedirectory,windows,dfsr,kb,storage

Steps should be ran from the Autoritative DC (generally the PDC Emulator role), unless otherwise noted.

You can verify which server has the PDC Emulator role by running from an elevated command prompt:

netdom query fsmo

  1. Stop the DFSR Replication service in Services.msc (on all DC’s, if more than 1)
  2. Launch ADSIEDIT.msc
  3. Navigate to
    "CN=SYSVOL Subscription,CN=Domain System Volume,CN=DFSRLocalSettings,CN=<the server name>,OU=Domain Controllers,DC=<domain>"

    The ADSI path is read backwards
  4. Alter the following attributes:
    • msDFSR-Enabled=FALSE
    • msDFSR-options=1
  5. IF THERE ARE OTHER DC’s:
    1. Launch ADSIEDIT.msc on the other DC’s and navigate to the same path
    2. Alter the following attribute:
      • msDFSR-Enabled=FALSE
  6. Start the DFSR Replication service on the authoritative DC
  7. Verify Event ID 4114 in the DFS Replication Event Log This event ID will indicate that the replicated folder has been disabled
  8. Return to ADSIEDIT.msc and alter the following attribute:
    • msDFSR-Enabled=TRUE
  9. Run:
    DFSRDIAG POLLAD
    • If dfsrdiag comes back unrecognized, open an elevated PowerShell prompt and run:
      • Install-WindowsFeature RSAT-DFS-Mgmt-Con
    • Re-run the command
      DFSRDIAG POLLAD
  10. Verify Event ID 4602 in the DFS Replication Event Log
    • This will indicate that the replicated folder has been re-initialized, and is now the authority on the replication
  11. Verify that the SYSVOL share is active with
    net share
  12. IF THERE ARE OTHER DC’s:
    1. Start the DFS Replication service on the non-authoritative DCs, verify Event ID 4114
    2. In ADSIEDIT.msc edit the attribute on all the non-authoritative DCs:
      • msDFSR-Enabled=TRUE
    3. In an elevated command prompt on each of the non-authoritative DCs, run
      DFSRDIAG POLLAD

    Comments Section

    There's nothing here, yet. Feel free to submit your own comment below.

    Submit a Comment

    All comments are queued for review before being posted.