| Author | Messages | |
sa.anupam
Posts:80
 | | 12/08/2010 11:47 AM |
|
Hi All,
I found lot of GPT.ini (from different GPO) are open and accessed (using cmmpmgmt.msc) by few users. Is this the reason why those GPOs are not getting replicated and we're seeing lot of backlog + share violation errors?
Do you think closing those open files will resolve this FRS backlog and share violation error?
From: sa.anupam@hotmail.com
To: activedir@mail.activedir.org
Subject: RE: [ActiveDir] Sonar FRS tool reports lot of Backlog files and Share Violation
Date: Tue, 7 Dec 2010 18:21:53 +0530
I'll check this. But this setup was working fine for many years! Is there anything else we can doubt?
Subject: RE: [ActiveDir] Sonar FRS tool reports lot of Backlog files and Share Violation
Date: Tue, 7 Dec 2010 09:57:18 +0000
From: Neil.Ruston@lloydstsb.co.uk
To: activedir@mail.activedir.org
To add to the below response, take a look at this article:
http://support.microsoft.com/kb/822158
neil
From: activedir-owner@mail.activedir.org
[mailto:activedir-owner@mail.activedir.org] On Behalf Of Alpesh
Sent: 07 December 2010 09:39
To: activedir@mail.activedir.org
Cc: <activedir@mail.activedir.org>
Subject: Re: [ActiveDir] Sonar FRS tool reports lot of Backlog files and
Share Violation
Hi I think this to be an issue with your antivirus software
on these domain controllers. I have seen FRS halted or file sharing violations
because of antivirus softwares. You may have to configure a rule to exclude
sysvol folder and ntfrs.exe.
Regards,
Alpesh
Sent from my iPhone
On Dec 7, 2010, at 5:03 PM, anupam bhattacharjee <sa.anupam@hotmail.com> wrote:
We've been receiving lot of backlog files
and share violation error for 4 out of 12 domain controllers. GPOtool also
says GPO version mismatch in DS and SYSVOL on all these 4 domain controllers.
WHen I checked GPT.ini file in SYSVOL I can see the right version. How do I
troubleshoot this...please advice!!
FRSDiag on DC06 gives
the following report:
==========================================
Checking for errors/warnings in FRS Event
Log .... passed
Checking for errors in Directory Service
Event Log .... passed
Checking for minimum FRS version requirement
... passed
Checking for errors/warnings in ntfrsutl ds
... passed
Checking for Replica Set configuration
triggers... passed
Checking for suspicious file Backlog
size...
ERROR : File Backlog TO server
"ENT\DC03$" is : 1351 :: Unless this is due to your schedule,
this is a problem!
ERROR : File Backlog TO server
"ENT\DC02$" is : 2192 :: Unless this is due to your schedule,
this is a problem!
ERROR : File Backlog TO server
"ENT\DC02$" is : 2237 :: Unless this is due to your schedule,
this is a problem!
failed with 3 error(s) and 0 warning(s)
Checking Overall Disk Space and SYSVOL
structure (note: integrity is not checked)... passed
Checking for suspicious inlog entries ...
passed
Checking for suspicious outlog entries ...
passed
Checking for appropriate staging area size
... passed
Checking for errors in debug logs ...
ERROR on NtFrs_0005.log :
"ERROR_SHARING_VIOLATION(For more information see KB.822300, KB.815473,
and KB.823230)" : <FrsOpenSourceFile2W:
4000: 1591: S0: 02:35:02> ++ CreateFile failed on file
\??\C:\WINNT\SYSVOL\domain\Policies\{3AC91BCA-412C-2CA3-B9EE-3CD13121A212}\GPT.INI;
WStatus: ERROR_SHARING_VIOLATION
ERROR on NtFrs_0005.log :
"ERROR_SHARING_VIOLATION(For more information see KB.822300, KB.815473,
and KB.823230)" : <StuOpenDestinationFile:
4000: 1161: S0: 02:35:02> ++ ERROR - FrsOpenSourceFile2W(GPT.INI
-> WStatus: ERROR_SHARING_VIOLATION
ERROR on NtFrs_0005.log :
"ERROR_SHARING_VIOLATION(For more information see KB.822300, KB.815473,
and KB.823230)" : <StuExecuteInstall:
4000: 2630: S1: 02:35:02> WARN - StuOpenDestinationFile
failed. WStatus: ERROR_SHARING_VIOLATION
ERROR on NtFrs_0005.log :
"ERROR_SHARING_VIOLATION(For more information see KB.822300, KB.815473,
and KB.823230)" : <FrsOpenSourceFile2W:
3256: 1580: S0: 02:35:01> NtCreateFile failed : NTStatus:
STATUS_SHARING_VIOLATION
ERROR on NtFrs_0005.log :
"ERROR_SHARING_VIOLATION(For more information see KB.822300, KB.815473,
and KB.823230)" : <FrsOpenSourceFile2W:
4000: 1580: S0: 02:35:01> NtCreateFile failed : NTStatus:
STATUS_SHARING_VIOLATION
ERROR on NtFrs_0005.log :
"ERROR_SHARING_VIOLATION(For more information see KB.822300, KB.815473,
and KB.823230)" : <FrsOpenSourceFile2W:
4000: 1580: S0: 02:35:01> NtCreateFile failed : NTStatus:
STATUS_SHARING_VIOLATION
Found 1998
ERROR_SHARING_VIOLATION error(s)! Latest ones (up to 3) listed above
Found 666
STATUS_SHARING_VIOLATION error(s)! Latest ones (up to 3) listed above
......... failed with 2664 error
entries
Checking NtFrs Service (and dependent
services) state...passed
Checking NtFrs related Registry Keys for
possible problems...passed
Checking Repadmin Showreps for
errors...passed
Checking for missing parent entries in
IDTable ...passed
Lloyds TSB Bank plc. Registered Office: 25 Gresham Street, London EC2V 7HN. Registered in England and Wales, number 2065. Telephone: 020 7626 1500.
Bank of Scotland plc. Registered Office: The Mound, Edinburgh EH1 1YZ. Registered in Scotland, number 327000. Telephone: 0870 600 5000
Lloyds TSB Scotland plc. Registered Office: Henry Duncan House, 120 George Street, Edinburgh EH2 4LH. Registered in Scotland, number 95237. Telephone: 0131 225 4555.
Cheltenham & Gloucester plc. Registered Office: Barnett Way, Gloucester GL4 3RL. Registered in England and Wales, number 2299428. Telephone: 01452 372372.
Lloyds TSB Bank plc, Lloyds TSB Scotland plc, Bank of Scotland plc and Cheltenham & Gloucester plc are authorised and regulated by the Financial Services Authority.
Halifax is a division of Bank of Scotland plc. Cheltenham & Gloucester Savings is a division of Lloyds TSB Bank plc.
HBOS plc. Registered Office: The Mound, Edinburgh EH1 1YZ. Registered in Scotland, number 218813. Telephone: 0870 600 5000
Lloyds Banking Group plc. Registered Office: The Mound, Edinburgh EH1 1YZ. Registered in Scotland, number 95000. Telephone: 0131 225 4555
This e-mail (including any attachments) is private and confidential and may contain privileged material. If you have received this e-mail in error, please notify the sender and delete it (including any attachments) immediately. You must not copy, distribute, disclose or use any of the information in it or any attachments.
Telephone calls may be monitored or recorded.
| | | |
|
|