Managing the Sysvol folder for Windows Server 2008 R2

The following is a sample Sysvol folder illustration

Domain folder: is a policy entity, a policy and script repository.

Staging Areas: Swap area, which is used to store information exchanged (replicated) between multiple DCs. The relevant information (GPO) on the DC is first placed in this folder, and then replicated to each other.

Staging areas and SYSVOL are a hanging node. It hangs the section to its corresponding entity folder. At the same time, the system will establish a share named Sysvol, C: \windows\sysvol\hbycrsj.com\scripts to establish a C:\Windows\Sysvol named Netlogon.

When a user logs on (the computer), the GPO and startup scripts are first found in the Sysvol file. At the same time, in order to ensure the normal operation of the system, it is necessary to keep sufficient space cache for SYSVOL. We can monitor it through the File Replication Service log.

Experiment Request:

1. Rebuild the Netlogon and Sysvol share (that is, how to rebuild the share if these two shares do not exist for some reason)

2. Move Sysvol folder

3. Allocate more extra space for staging areas

Experimental environment:

This experiment is done on the basis of the installation of AD DS from media in Windows Server 2008 R2, which has two installed DC,WIN2008R2CNDC,WIN2008R2CNDC01. The whole experiment was done on WIN2008R2CNDC.

It is highly recommended that you back up your system before you operate.

I. Rebuilding the NETLOGON and SYSVOL share (assuming that the folder structure is normal, but sharing is lost)

1, run regedit, open Registry Editor, find the following key values:

Hkey_local_machine\system\currentcontrolset\services\ntfrs\parameters\backup/restore\process at Startup

Then find BurFlags on the right and change its value to D2 (16)

The most common value BurFlags registry entries are:

D 2, also known as the non-authorization mode restore

D 4, also known as the authorization mode restore

2, and then run the following command to stop the restart of related services

net stop Netlogon & net start netlogon

net stop NTFRS & net start NTFRS

3. View share return to normal