Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Event ID 1202

110 views
Skip to first unread message

Chris Zota

unread,
Jan 29, 2009, 12:56:13 PM1/29/09
to
Here's the error I'm getting:
The File Replication Service has detected that the replica set "DOMAIN
SYSTEM VOLUME (SYSVOL SHARE)" is in JRNL_WRAP_ERROR.

Replica set name is : "DOMAIN SYSTEM VOLUME (SYSVOL SHARE)"
Replica root path is : "c:\windows\sysvol\domain"
Replica root volume is : "\\.\C:"
A Replica set hits JRNL_WRAP_ERROR when the record that it is trying to
read from the NTFS USN journal is not found. This can occur because of one
of the following reasons.

[1] Volume "\\.\C:" has been formatted.
[2] The NTFS USN journal on volume "\\.\C:" has been deleted.
[3] The NTFS USN journal on volume "\\.\C:" has been truncated. Chkdsk can
truncate the journal if it finds corrupt entries at the end of the journal.
[4] File Replication Service was not running on this computer for a long
time.
[5] File Replication Service could not keep up with the rate of Disk IO
activity on "\\.\C:".
Setting the "Enable Journal Wrap Automatic Restore" registry parameter to 1
will cause the following recovery steps to be taken to automatically recover
from this error state.
[1] At the first poll, which will occur in 5 minutes, this computer will be
deleted from the replica set. If you do not want to wait 5 minutes, then run
"net stop ntfrs" followed by "net start ntfrs" to restart the File
Replication Service.
[2] At the poll following the deletion this computer will be re-added to
the replica set. The re-addition will trigger a full tree sync for the
replica set.

WARNING: During the recovery process data in the replica tree may be
unavailable. You should reset the registry parameter described above to 0 to
prevent automatic recovery from making the data unexpectedly unavailable if
this error condition occurs again.

To change this registry parameter, run regedit.

Click on Start, Run and type regedit.

Expand HKEY_LOCAL_MACHINE.
Click down the key path:
"System\CurrentControlSet\Services\NtFrs\Parameters"
Double click on the value name
"Enable Journal Wrap Automatic Restore"
and update the value.

If the value name is not present you may add it with the New->DWORD Value
function under the Edit Menu item. Type the value name exactly as shown above.

Here are the results from DCDIAG:

G:\>dcdiag

Directory Server Diagnosis

Performing initial setup:
Trying to find home server...
Home Server = DC4
* Identified AD Forest.
Done gathering initial info.

Doing initial required tests

Testing server: OPS\DC4
Starting test: Connectivity
......................... DC4 passed test Connectivity

Doing primary tests

Testing server: OPS\DC4
Starting test: Advertising
......................... DC4 passed test Advertising
Starting test: FrsEvent
There are warning or error events within the last 24 hours after
the SYSVOL has been shared. Failing SYSVOL replication problems
may cause Group Policy problems.
......................... DC4 failed test FrsEvent
Starting test: DFSREvent
......................... DC4 passed test DFSREvent
Starting test: SysVolCheck
......................... DC4 passed test SysVolCheck
Starting test: KccEvent
......................... DC4 passed test KccEvent
Starting test: KnowsOfRoleHolders
......................... DC4 passed test KnowsOfRoleHolders
Starting test: MachineAccount
......................... DC4 passed test MachineAccount
Starting test: NCSecDesc
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes In Filtered Set
access rights for the naming context:
DC=ForestDnsZones,DC=tol,DC=local
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes In Filtered Set
access rights for the naming context:
DC=DomainDnsZones,DC=tol,DC=local
......................... DC4 failed test NCSecDesc
Starting test: NetLogons
......................... DC4 passed test NetLogons
Starting test: ObjectsReplicated
......................... DC4 passed test ObjectsReplicated
Starting test: Replications
......................... DC4 passed test Replications
Starting test: RidManager
......................... DC4 passed test RidManager
Starting test: Services
......................... DC4 passed test Services
Starting test: SystemLog
An Warning Event occurred. EventID: 0x00000443
Time Generated: 01/29/2009 08:51:30
Event String:
Windows could not record the Resultant Set of Policy (RSoP)
information for the Group Policy extension <Security>. Group Polic
y settings successfully applied to the computer or user; however, management
tools may not report accurately.
An Warning Event occurred. EventID: 0x00000443
Time Generated: 01/29/2009 08:57:05
Event String:
Windows could not record the Resultant Set of Policy (RSoP)
information for the Group Policy extension <Security>. Group Polic
y settings successfully applied to the computer or user; however, management
tools may not report accurately.
An Error Event occurred. EventID: 0x00000457
Time Generated: 01/29/2009 08:59:32
Event String:
Driver Xerox WorkCentre 7655 rev2 PCL6 required for printer
Xerox WorkCentre 7655 rev2 PCL6 is unknown. Contact the administrat
or to install the driver before you log in again.
An Warning Event occurred. EventID: 0x00000443
Time Generated: 01/29/2009 09:02:39
Event String:
Windows could not record the Resultant Set of Policy (RSoP)
information for the Group Policy extension <Security>. Group Polic
y settings successfully applied to the computer or user; however, management
tools may not report accurately.
An Warning Event occurred. EventID: 0x00000443
Time Generated: 01/29/2009 09:08:13
Event String:
Windows could not record the Resultant Set of Policy (RSoP)
information for the Group Policy extension <Security>. Group Polic
y settings successfully applied to the computer or user; however, management
tools may not report accurately.
An Warning Event occurred. EventID: 0x00000443
Time Generated: 01/29/2009 09:13:47
Event String:
Windows could not record the Resultant Set of Policy (RSoP)
information for the Group Policy extension <Security>. Group Polic
y settings successfully applied to the computer or user; however, management
tools may not report accurately.
An Warning Event occurred. EventID: 0x00000443
Time Generated: 01/29/2009 09:19:21
Event String:
Windows could not record the Resultant Set of Policy (RSoP)
information for the Group Policy extension <Security>. Group Polic
y settings successfully applied to the computer or user; however, management
tools may not report accurately.
An Warning Event occurred. EventID: 0x80000008
Time Generated: 01/29/2009 09:21:05
Event String:
The jobs in the print queue for printer Microsoft XPS Document
Writer (redirected 2) were deleted. No user action is required.
An Warning Event occurred. EventID: 0x80000004
Time Generated: 01/29/2009 09:21:05
Event String: Printer Microsoft XPS Document Writer (redirected
2) will be deleted. No user action is required.
An Warning Event occurred. EventID: 0x80000003
Time Generated: 01/29/2009 09:21:05
Event String:
Printer Microsoft XPS Document Writer (redirected 2) was
deleted, and users will no longer be able to print to this printer. No
user action is required.
An Warning Event occurred. EventID: 0x80050004
Time Generated: 01/29/2009 09:23:12
Event String: Broadcom BCM5708S: The network link is down.
Check to make sure the network cable is properly connected.
An Warning Event occurred. EventID: 0x80050004
Time Generated: 01/29/2009 09:23:12
Event String: Broadcom BCM5708S: The network link is down.
Check to make sure the network cable is properly connected.
An Warning Event occurred. EventID: 0x00002724
Time Generated: 01/29/2009 09:25:32
Event String:
This computer has at least one dynamically assigned IPv6
address.For reliable DHCPv6 server operation, you should use only stat
ic IPv6 addresses.
An Error Event occurred. EventID: 0xC0011080
Time Generated: 01/29/2009 09:25:35
Event String:
WINS encountered a database error. This may or may not be a
serious error. WINS will try to recover from it. You can check the
database error events under 'Application Log' category of the Event Viewer
for the Exchange Component, ESENT, source to find out more deta
ils about database errors. If you continue to see a large number of these
errors consistently over time (a span of few hours), you may wan
t to restore the WINS database from a backup. The error number is in the
second DWORD of the data section.
An Warning Event occurred. EventID: 0x00000443
Time Generated: 01/29/2009 09:25:55
Event String:
Windows could not record the Resultant Set of Policy (RSoP)
information for the Group Policy extension <Security>. Group Polic
y settings successfully applied to the computer or user; however, management
tools may not report accurately.
An Warning Event occurred. EventID: 0x825A002F
Time Generated: 01/29/2009 09:29:18
Event String:
Time Provider NtpClient: No valid response has been received
from manually configured peer time.windows.com after 8 attempts to
contact it. This peer will be discarded as a time source and NtpClient will
attempt to discover a new peer with this DNS name. The error w
as: The peer is unreachable.
An Error Event occurred. EventID: 0x00000457
Time Generated: 01/29/2009 09:30:53
Event String:
Driver Xerox WorkCentre 7655 rev2 PCL6 required for printer
Xerox WorkCentre 7655 rev2 PCL6 is unknown. Contact the administrat
or to install the driver before you log in again.
An Error Event occurred. EventID: 0x0000165B
Time Generated: 01/29/2009 09:45:04
Event String:
The session setup from computer 'CPOPC05WILLOW5' failed because
the security database does not contain a trust account 'CPOPC05
WILLOW5$' referenced by the specified computer.
An Error Event occurred. EventID: 0x000016AD
Time Generated: 01/29/2009 09:47:09
Event String: The session setup from the computer CPOPC05WILLOW5
failed to authenticate. The following error occurred:
......................... DC4 failed test SystemLog
Starting test: VerifyReferences
......................... DC4 passed test VerifyReferences


Running partition tests on : ForestDnsZones
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation

Running partition tests on : DomainDnsZones
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation

Running partition tests on : Schema
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation

Running partition tests on : Configuration
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Configuration passed test
CrossRefValidation

Running partition tests on : tol
Starting test: CheckSDRefDom
......................... tol passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... tol passed test CrossRefValidation

Running enterprise tests on : tol.local
Starting test: LocatorCheck
......................... tol.local passed test LocatorCheck
Starting test: Intersite
......................... tol.local passed test Intersite

Any thoughts on why the failures above? Thanks.

Chris Zota

unread,
Jan 29, 2009, 1:01:01 PM1/29/09
to
And here are the results of the repadmin /showrepl:

G:\>repadmin /showrepl

Repadmin: running command /showrepl against full DC localhost
OPS\DC4
DSA Options: IS_GC
Site Options: (none)
DSA object GUID: 492dbbd5-ba3e-41c9-a62a-b0ddce8864ed
DSA invocationID: 86ed151f-4322-464a-aea1-8f0523b04d49

==== INBOUND NEIGHBORS ======================================

DC=tol,DC=local
OPS\DC1 via RPC
DSA object GUID: 522fd296-3134-48a7-a256-1b25e04004ea
Last attempt @ 2009-01-29 09:57:00 was successful.
OPS\DC3 via RPC
DSA object GUID: 7f3637cc-2aa0-4a12-a305-f67eca877df4
Last attempt @ 2009-01-29 09:57:03 was successful.

CN=Configuration,DC=tol,DC=local
OPS\DC1 via RPC
DSA object GUID: 522fd296-3134-48a7-a256-1b25e04004ea
Last attempt @ 2009-01-29 09:54:19 was successful.
OPS\DC3 via RPC
DSA object GUID: 7f3637cc-2aa0-4a12-a305-f67eca877df4
Last attempt @ 2009-01-29 09:54:19 was successful.

CN=Schema,CN=Configuration,DC=tol,DC=local
OPS\DC3 via RPC
DSA object GUID: 7f3637cc-2aa0-4a12-a305-f67eca877df4
Last attempt @ 2009-01-29 09:54:19 was successful.
OPS\DC1 via RPC
DSA object GUID: 522fd296-3134-48a7-a256-1b25e04004ea
Last attempt @ 2009-01-29 09:54:19 was successful.

DC=DomainDnsZones,DC=tol,DC=local
OPS\DC1 via RPC
DSA object GUID: 522fd296-3134-48a7-a256-1b25e04004ea
Last attempt @ 2009-01-29 09:56:35 was successful.
OPS\DC3 via RPC
DSA object GUID: 7f3637cc-2aa0-4a12-a305-f67eca877df4
Last attempt @ 2009-01-29 09:56:38 was successful.

DC=ForestDnsZones,DC=tol,DC=local
OPS\DC1 via RPC
DSA object GUID: 522fd296-3134-48a7-a256-1b25e04004ea
Last attempt @ 2009-01-29 09:56:47 was successful.
OPS\DC3 via RPC
DSA object GUID: 7f3637cc-2aa0-4a12-a305-f67eca877df4
Last attempt @ 2009-01-29 09:56:50 was successful.

Meinolf Weber [MVP-DS]

unread,
Jan 29, 2009, 1:08:15 PM1/29/09
to
Hello Chris,

All errors under "Starting test: SystemLog" you have to check individual
in the event viewer.

Did you follow the error description to start solving the journal_wrap error?

Also see here:
http://support.microsoft.com/?id=292438

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Chris Zota

unread,
Jan 29, 2009, 1:54:01 PM1/29/09
to
Hi,

I did the registry changes recomended after step 5 but it did not fix the
issue.
What is the solution for step 3 and 5?

Thanks

Meinolf Weber [MVP-DS]

unread,
Jan 29, 2009, 2:12:09 PM1/29/09
to
Hello Chris,

3 is informational and 5 you have done with the registry change.

Chris Zota

unread,
Jan 29, 2009, 2:28:10 PM1/29/09
to
So, is this all that can be done or should I open a call with MS?

Meinolf Weber [MVP-DS]

unread,
Jan 29, 2009, 3:04:24 PM1/29/09
to
Hello Chris,

What a about the article i posted before?

Also would be nice if you could describe your domain setup a bit more then
just posting the error message. Also what happend before the error occurs,
crash and restore from backup or image etc.

Chris Zota

unread,
Jan 29, 2009, 5:46:11 PM1/29/09
to
Of course. The article you pointed out to me was informational and I did the
registry change that was mentioned in there but it didn't help.
Our domain (single domain) is made of 3 Win2008 domain controllers running
in Win2003 compatible mode. We didn't have a crash or did a restore from a
backup and the only major issue that we have right now is the PC's are
booting up too slow. We figure this must have something to do with the GPO
and I was looking at all the errors in the DC logs and this one is the most
critical.
Thats pretty much about it. Thanks for your help.

Meinolf Weber [MVP-DS]

unread,
Jan 29, 2009, 5:51:00 PM1/29/09
to
Hello Chris,

Please post an unedited ipconfig /all from all DC's.

Chris Zota

unread,
Jan 29, 2009, 7:33:01 PM1/29/09
to
Here it is:

DC4

Windows IP Configuration

Host Name . . . . . . . . . . . . : DC4
Primary Dns Suffix . . . . . . . : tol.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : tol.local

Ethernet adapter Local Area Connection 2:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom BCM5708S NetXtreme II GigE
(NDIS VBD Client) #2
Physical Address. . . . . . . . . : 00-15-C5-FE-35-69
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Ethernet adapter Live:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom BCM5708S NetXtreme II GigE
(NDIS VBD Client)
Physical Address. . . . . . . . . : 00-15-C5-FE-35-67
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 172.30.10.10(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 172.30.10.253
DNS Servers . . . . . . . . . . . : 172.30.10.10
172.30.10.50
Primary WINS Server . . . . . . . : 172.30.10.10
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter Local Area Connection* 11:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . :
isatap.{D07A622C-C812-4A14-84AB-200A088E0B67}
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 12:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . :
isatap.{F5A0527C-35C5-462A-892F-C0D3D7A699DA}
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

DC3
Windows IP Configuration

Host Name . . . . . . . . . . . . : DC3
Primary Dns Suffix . . . . . . . : tol.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : tol.local

Ethernet adapter LIVE:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom BCM5708C NetXtreme II GigE
(NDIS
VBD Client) #2
Physical Address. . . . . . . . . : 00-13-72-FA-9B-32
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 172.30.30.4(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 172.30.30.254
DNS Servers . . . . . . . . . . . : 172.30.30.4
172.30.10.10
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter Local Area Connection* 8:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . :
isatap.{C0F72588-78BC-4DC4-9D74-9DC4C7D46
126}
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

DC1
Windows IP Configuration

Host Name . . . . . . . . . . . . : DC1
Primary Dns Suffix . . . . . . . : tol.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : tol.local

Ethernet adapter LIVE:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom BCM5708S NetXtreme II GigE
(NDIS
VBD Client) #2
Physical Address. . . . . . . . . : 00-1A-64-89-6F-90
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 172.30.10.50(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 172.30.10.253
DNS Servers . . . . . . . . . . . : 172.30.10.10
172.30.10.50
127.0.0.1
Primary WINS Server . . . . . . . : 172.30.10.10
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter Local Area Connection* 8:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . :
isatap.{5E1217CD-01EF-49AA-9447-8456FD72A
BBD}
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Meinolf Weber [MVP-DS]

unread,
Jan 30, 2009, 4:33:13 AM1/30/09
to
Hello Chris,

On DC1 you can remove the 127.0.0.1, shouldn't be the cause for the problem,
just information, because you use it's own ip address already.

Until the replication problem is solved change on DC4 the preferred DNS only
to DC1.

Please check on DC4 that sysvol and netlogon folder exist and that you can
access it.

Chris Zota

unread,
Jan 30, 2009, 12:00:01 PM1/30/09
to
Done as per your suggestions. Both SYSVOL and NETLOGON are there and can be
accessed.
Thanks.
0 new messages