Group Policy copy failure troubleshooting example

Background description:

In the morning, the Branchcache's site domain hosting cache was created. Because it was taken from the previous environment snapshot, an error was encountered during the operation, 650) this. width = 650; "src =" http://www.bkjia.com/uploads/allimg/131227/1QS43L5-0.gif "/> do not solve the words can not proceed, so sort out to share it!

Lab Topology

650) this. width = 650; "title =" clip_image002 "style =" border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; border-left: 0px; padding-top: 0px; padding-left: 0px; padding-right: 0px; "border =" 0 "alt =" clip_image002 "src =" http://www.bkjia.com/uploads/allimg/131227/1QS43643-1.jpg "height =" 642 "/>

Fault description:

After a policy is implemented on the Headquarters DC, an error is reported when the Group Policy is refreshed on the client of the branch structure.

650) this. width = 650; "title =" clip_image003 "style =" border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; border-left: 0px; padding-top: 0px; padding-left: 0px; padding-right: 0px; "border =" 0 "alt =" clip_image003 "src =" http://www.bkjia.com/uploads/allimg/131227/1QS42930-2.png "height =" 492 "/>

Because the branch client has not updated the Group Policy assigned to the headquarters, our Branchcache experiment cannot proceed. Let's talk about troubleshooting! 650) this. width = 650; "src =" http://www.bkjia.com/uploads/allimg/131227/1QS44627-3.gif "/>

Setup

Based on the error message, he gave three possible reasons:

Name resolution/network connection to the current domain controller

Because it is the client of the Branch, the first step of troubleshooting is the first step. According to the topology diagram, they will parse the DC of the branch, and the result is completely correct. 650) this. width = 650; "src =" http://www.bkjia.com/uploads/allimg/131227/1QS4E18-4.gif "/>

650) this. width = 650; "title =" clip_image004 "style =" border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; border-left: 0px; padding-top: 0px; padding-left: 0px; padding-right: 0px; "border =" 0 "alt =" clip_image004 "src =" http://www.bkjia.com/uploads/allimg/131227/1QS424C-5.png "height =" 318 "/>

File Replication Service delays creating files on another domain controller that have not been copied to the current domain controller)

Because our environment is single-domain, multi-site, this phenomenon is still very likely, because it is unable to apply group policies, we all know that group policies exist in sysvol. Therefore, the sysvol sharing of the DC and File is accessed on the client separately. The result shows that the Group Policy that is sent up and down on the DC is determined and is not copied to the DC of the File in the branch, the problem is basically fixed here.

Note: I have solved the problem. I didn't solve it at the time. Just like this, File has three fewer folders than DC files! 650) this. width = 650; "src =" http://www.bkjia.com/uploads/allimg/131227/1QS42J8-6.gif "/>

650) this. width = 650; "title =" clip_image006 "style =" border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; border-left: 0px; padding-top: 0px; padding-left: 0px; padding-right: 0px; "border =" 0 "alt =" clip_image006 "src =" http://www.bkjia.com/uploads/allimg/131227/1QS4C26-7.png "height =" 570 "/>

Distributed File System (DFS) client has been disabled: check is not required if the client does not exist. Wait for us to check the DFS function on the server.

According to the existing error message, the File replication problem is basically locked. log on to the File to troubleshoot the error! If there is a problem with Windows, the first thing we think of is the log. We can quickly open the log and start troubleshooting one by one. We found two errors, which can be seen from the two figures, all have error sources and error IDs. If you are familiar with them, you can solve them directly, but if you are not familiar with them, it is recommended to go to technet to see the problem and solution represented by the source and ID: http://technet.microsoft.com/en-us/library/cc727259 (v = ws.10 ). aspx

650) this. width = 650; "src =" http://www.bkjia.com/uploads/allimg/131227/1QS432F-8.png "title =" 4.png"/>

650) this. width = 650; "title =" clip_image009 "style =" border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; border-left: 0px; padding-top: 0px; padding-left: 0px; padding-right: 0px; "border =" 0 "alt =" clip_image009 "src =" http://www.bkjia.com/uploads/allimg/131227/1QS42W7-9.png "height =" 772 "/>

According to the official explanation and solution, I found that my current environment is not applicable, so I did not make troubleshooting based on the methods provided by him! What should we do next? Some people say that GG or BD search is a good method, but remember that the search result is a special environment for other people who ask questions, this may not apply to your environment. Therefore, after searching, you should carefully consider the impact of Your Solutions on your environment, you must have a note in your mind. If you find a result by yourself, you can follow the result to perform operations. In the end, you will find that the problem is more serious if it is not solved! This is a typical hand owe. If it is serious, it will make you drink a pot! 650) this. width = 650; "src =" http://www.bkjia.com/uploads/allimg/131227/1QS4F39-10.gif "/>

650) this. width = 650; "title =" clip_image011 "style =" border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; border-left: 0px; padding-top: 0px; padding-left: 0px; padding-right: 0px; "border =" 0 "alt =" clip_image011 "src =" http://www.bkjia.com/uploads/allimg/131227/1QS441L-11.png "height =" 772 "/>

In general, the search should be used only when you confirm what went wrong but do not know how to solve the problem. For example, if the DFS cannot be started, the replication cannot be performed, but the DFS service cannot be started manually, at this time, we should search and narrow down the problem points to better target our environment. Therefore, after reading the official explanation, we should further troubleshoot the problem and read the logs, now let's look at the service.

650) this. width = 650; "title =" clip_image012 "style =" border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; border-left: 0px; padding-top: 0px; padding-left: 0px; padding-right: 0px; "border =" 0 "alt =" clip_image012 "src =" http://www.bkjia.com/uploads/allimg/131227/1QS41495-12.png "height =" 772 "/>

What do you think if you see this image? 650) this. width = 650; "src =" http://www.bkjia.com/uploads/allimg/131227/1QS440H-13.gif "/> that's right. What you think is true, the WordPress Service is responsible for sysvol replication, and now the WordPress service has been disabled, those policies cannot be copied! Hahaha, finally find the reason, 650) this. width = 650; "src =" http://www.bkjia.com/uploads/allimg/131227/1QS42260-14.gif "/> so we hurry to manually enable it

650) this. width = 650; "title =" clip_image013 "style =" border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; border-left: 0px; padding-top: 0px; padding-left: 0px; padding-right: 0px; "border =" 0 "alt =" clip_image013 "src =" http://www.bkjia.com/uploads/allimg/131227/1QS42925-15.png "height =" 772 "/>

OK. What do you do here? 650) this. width = 650; "src =" http://www.bkjia.com/uploads/allimg/131227/1QS41562-16.gif "/> should I take advantage of the powerful functionality of the search? In general, most people should use the search, but we need to know that our environment is Windows Server 2012 System 2008 and 08R2), not 2003 of the system, if you are careful, you should know that the replication of sysvol since 2008 is no longer responsible for this service, but by using the DFS service: http://technet.microsoft.com/zh-cn/library/cc753479 (v = ws.10 ). aspx

650) this. width = 650; "title =" clip_image015 "style =" border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; border-left: 0px; padding-top: 0px; padding-left: 0px; padding-right: 0px; "border =" 0 "alt =" clip_image015 "src =" http://www.bkjia.com/uploads/allimg/131227/1QS42a7-17.png "height =" 460 "/>

So the WordPress service is disabled, but if you do not know it, I believe you will take a lot of detours! There is no problem with launching the dfs service.

650) this. width = 650; "title =" clip_image017 "style =" border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; border-left: 0px; padding-top: 0px; padding-left: 0px; padding-right: 0px; "border =" 0 "alt =" clip_image017 "src =" http://www.bkjia.com/uploads/allimg/131227/1QS43028-18.png "height =" 239 "/>

When we checked logs, services, and networks, we started to enter the advanced stage. Because errors on the surface have been ruled out, we began to troubleshoot the errors in depth, first of all, we have commands to monitor the data. If we log on to the DC and have several dc servers, we should not let it go. We can collect as much information as possible .)

Dcdiag/v> c: \ dcdiag.txt

650) this. width = 650; "title =" clip_image018 "style =" border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; border-left: 0px; padding-top: 0px; padding-left: 0px; padding-right: 0px; "border =" 0 "alt =" clip_image018 "src =" http://www.bkjia.com/uploads/allimg/131227/1QS413T-19.png "height =" 175 "/>

When we open the dcdiag.txt on the C drive, we will find a lot of error messages and clearly show some help documents.

650) this. width = 650; "title =" clip_image020 "style =" border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; border-left: 0px; padding-top: 0px; padding-left: 0px; padding-right: 0px; "border =" 0 "alt =" clip_image020 "src =" http://www.bkjia.com/uploads/allimg/131227/1QS43426-20.png "height =" 739 "/>

From this, we can find some useful information, including error information, as well as possible causes, and give a KB, we open this KB first to see: http://support.microsoft.com/kb/2663685

From KB, we can see that the symptoms described by the official website and the environment in which I used the previous snapshot to restore the environment are consistent.

650) this. width = 650; "title =" clip_image022 "style =" border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; border-left: 0px; padding-top: 0px; padding-left: 0px; padding-right: 0px; "border =" 0 "alt =" clip_image022 "src =" http://www.bkjia.com/uploads/allimg/131227/1QS4F93-21.png "height =" 737 "/>

According to the official solution, after backing up the system, we performed the following operations:

1. Back up all the files in the copied folder on the volume. If the operation is not successful, data may be lost due to abnormal conflict parsing during the recovery of the copied folder.

2. To restore the replication of this volume, use the WMI method ResumeReplication of the DFSVolueConfig class.

OK.

Open cmd and enter wmic/namespace: \ root \ microsoftdfs path dfsrVolumeConfig where volumeGuid = "GUID number" call ResumeReplication

The GUID number can be found in dcdiag.

650) this. width = 650; "title =" clip_image024 "style =" border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; border-left: 0px; padding-top: 0px; padding-left: 0px; padding-right: 0px; "border =" 0 "alt =" clip_image024 "src =" http://www.bkjia.com/uploads/allimg/131227/1QS45M4-22.png "height =" 284 "/>

Result After execution

650) this. width = 650; "title =" clip_image025 "style =" border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; border-left: 0px; padding-top: 0px; padding-left: 0px; padding-right: 0px; "border =" 0 "alt =" clip_image025 "src =" http://www.bkjia.com/uploads/allimg/131227/1QS43558-23.png "height =" 295 "/>

After the replication is completed, sysvol will be automatically copied. As for the time when the replication is completed, I will test the environment and use a single domain and multiple sites, and the replication will be completed quickly. To see the effect, first, we created a test policy on the DC of the headquarters, and then we opened sysvol on the DC of the File branch. We can see that, A group policy file is displayed!

650) this. width = 650; "title =" clip_image027 "style =" border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; border-left: 0px; padding-top: 0px; padding-left: 0px; padding-right: 0px; "border =" 0 "alt =" clip_image027 "src =" http://www.bkjia.com/uploads/allimg/131227/1QS4E55-24.png "height =" 714 "/>

Next, we will go to the client to refresh: we can see that there is no problem with policy refresh.

650) this. width = 650; "title =" clip_image028 "style =" border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; border-left: 0px; padding-top: 0px; padding-left: 0px; padding-right: 0px; "border =" 0 "alt =" clip_image028 "src =" http://www.bkjia.com/uploads/allimg/131227/1QS4G11-25.png "height =" 772 "/>

So far, our troubleshooting process has been completed!

Summary:

Troubleshooting usually requires a certain amount of theoretical knowledge, and each knowledge point requires a certain degree of coherence. You can refer to the searched items, but it cannot be too rash.

1. The theoretical knowledge must be strong. It must be enough to support your 100% determination that 1 + 1 is = 2. It doesn't seem like either of these two answers! Because if there are two sets of any troubleshooting solutions, one will eventually fail. If the application fails, the result can be imagined!

2. Try to integrate various knowledge points to form a line that can be chained up, otherwise you will never be able to improve, because each knowledge point is the soldiers of individual soldiers, it may still be a top-notch battlefield. Once the battlefield is crossed, the knowledge points cannot be effectively concatenated to form a Team, when you make an environment error, you will not have a "Unity" situation, so that you will not be able to attack yourself! Just like our industry and commerce, procuratorial, and tax authorities, all of them are masters. They never communicate with each other in their respective places and are not on the united front, if they communicate with each other on the United Front, will there be so many corrupt officials and black-hearted merchants? Once there is a problem, TMD will push it! No wire will wear them. They will always do this!

3. Microsoft's system has a feature, which is generally updated every four years. If you want to understand it all, it is also difficult. However, the beginning of each system will introduce the functions it has updated, even if you do not upgrade it now, it is necessary to carefully check the functions it has updated. This will be of great help in your solution and the use of the new version in the future! A small update may solve your need for secondary development. For example, the address list of Exchange Server 2010 cannot be achieved in sp1, secondary Development is required. This is money, but if you know that sp2 supports segmentation and personalization, the development cost will be gone at once, reduces the overall it o & M cost!

650) this. width = 650; "title =" 18 "style =" border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; border-left: 0px; padding-top: 0px; padding-left: 0px; padding-right: 0px; "border =" 0 "alt =" 18 "src =" http://www.bkjia.com/uploads/allimg/131227/1QS4CF-26.png "height =" 484 "/>

4. The most important thing about troubleshooting is the idea. If you don't see an error, you can directly drop the problem into the group. On the forum, you can solve the problem by yourself based on your own ideas, make sure that you have a clear description before asking questions, especially the version used!

5. After the problem is solved, it is best to record it. On the one hand, it is necessary to train your thinking and organizational skills and perform operations and configuration, but it may not be easy for others to understand, on the other hand, give yourself an experience! I believe that after a long Summary of troubleshooting, your experience will gradually accumulate!

Appendix:

How to link the knowledge points, I will give a little introduction here, just a personal method, may not be suitable for you, but it is not always a bad thing to see

1. Try to record the video during the experiment so that you can record all your operations. It is possible that the first experiment failed for the second time and the experiment was successful for the fourth time, so when you make a summary, you can easily review the first and second times how you did what you did wrong!

2. When recording a video, try to explain it one by one. configuration operations may be performed, but you may not explain it. However, the explanations often represent the systematic and consistent knowledge, if the knowledge points are fragmented, you will not know what to say during your explanation? When I say this, I don't know how to say this in the next sentence. I can listen to my recordings carefully to see if there are regular shells and "that is to say", especially "that is to say, it may be your mantra at the beginning, but I believe that after some time of accumulation, you will discard "that is to say" when explaining it! Why is the word "that is? I am trying to explain a technical point now, I think I will use a few "that is to say" 650) this. width = 650; "src =" http://www.bkjia.com/uploads/allimg/131227/1QS4L91-27.gif "/>

IT dream --- you --- I --- he

Sunday, January 1, May 26, 2013

This article is from the blog "IT ---- you --- I --- he ---". For more information, contact the author!