GPO Replication Across Sites

[NcCorduan]

All,

We've started having a problem with GPO's in our Windows 2000 environment. We have three domain controllers set up and two sites, separated by a WAN. Here's the problem:

When we edit a GPO, e.g. to apply a new script or to change the contents of a script, for computers in Site B, the GPO is always edited on the controller for Site A, even if we are in the active directory from Site B. That shouldn't be a problem -- and never used to be -- because of replication.

Unfortunately, the changes to the GPO on Controller A are never replicated to Controller B, even though user objects and organizational units replicate fine. Of course, all the computers in Site B pull their policy settings from Controller B and therefore pull the out-dated versions of the GPO's.

Does anyone have any ideas why our GPO's might not be replicating correctly?

Thanks!

NickC---

 

[northstardave]

I am having the exact same problem. Objects in AD (users, groups, etc) replicate fine but policies and sometimes scripts don't go.

Replmon indicates that all partitions are in sync but gpostat (as follows) does not. Any help on this would be muchly appreciated!!

---------------------------------------------------
Status For Group Policy : Default Domain Policy

GPO Guid is: {31B2F340-016D-11D2-945F-00C04FB984F9}

Sysvol Version # is: 7602567
AD Version # is : 7668104

[WARNING]Default Domain Policy Version #'s are NOT in Synch
[WARNING]AD Ver is : 7668104 Sysvol Ver is : 7602567
[WARNING]Please Check that AD & NTFRS Replication is Functioning Correctly

 

[svsawkar]

So as per the error message, ya'll have FRS problems. What errors do you see in your FRS logs?

/Siddharth

 

[NcCorduan]

Yeah, I finally stumbled on the fact that AD replication is one thing, but GPO replication is something else. It took some digging to turn it up, but files in the Sysvol -- like scripts and other objects associated with GPOS -- are moved using FRS.

Now I have to get FRS running again in my maintenance windows on Friday night. (JNL_WRAP ERROR.)

 

[northstardave]

Ah!!! I thought it all used the same replication mechanism.

 

[NcCorduan]

I did too. I finally stumbled on it by searching for information on SYSVOL REPLICATION, rather than either AD or policy replication.

The MCSE book on Active Directory didn't even mention this...