We are members of a goverment forest - we are a domain sitting at 2008R2 level (both or our DCs are running 2008R2) - but the forest is at 2003 level and will be for a while.
We have no control or say over the forest. They have member servers and DCs at 2008R2 and all the way down to 2003 and I'd not be surprised if other member domains were still sitting lower.
Am I correct in that since what I'm looking at below is involving SYSVOL replication and the like that if we moved up to DFS replication that it would have no negative impact as far as the forest being at 2003 level?
I ran another test I found (explained below) and it indicated as shown here - 'start'
C:>dfsrmig /getglobalstate
Current DFSR global state: 'Start'
Succeeded.
I have searched all of the areas I thought related and didn't find a direct answer to my questions, but perhaps I used less than ideal search phrases so I apologize if this is a common question already taken care of.
I'm new here and to this part of AD and directory services. I ended up with this hat due to DNS "problems" - and my insistance that what I was seeing indicated that we also had some other problems. Weeks of tests and reading these forums
and technet articles led me to this point.
I ran multiple deep tests including DCDIAG and received this result:
[1] Problem: Missing Expected Value
Base Object:
CN=VxxxDC5,OU=Domain Controllers,DC=abcd,DC=gov,DC=state,DC=xx,DC=us
Base Object Description: "DC Account Object"
Value Object Attribute Name: msDFSR-ComputerReferenceBL
Value Object Description: "SYSVOL FRS Member Object"
Recommended Action: See Knowledge Base Article: Q3128
[2] Problem: Missing Expected Value
Base Object:
CN=VxxxDC2,OU=Domain Controllers,DC=abcd,DC=gov,DC=state,DC=xx,DC=us
Base Object Description: "DC Account Object"
Value Object Attribute Name: msDFSR-ComputerReferenceBL
Value Object Description: "SYSVOL FRS Member Object"
Recommended Action: See Knowledge Base Article: Q312862
LDAP Error 0x5e (94) - No result present in message.
......................... VxxxDC2 failed test
I looked further and found this information as well:
Starting test: FrsEvent
* The File Replication Service Event log test
......................... VxxxDC5 passed test FrsEvent
Starting test: DFSREvent
The DFS Replication Event Log.
Skip the test because the server is running FRS.
......................... VxxxDC5 passed test DFSREvent
Was curious what "Skip the test because...." meant so looked up the terms DFS and FRS as well as doing searches for Q312862
What I found were others with the same errors as those at the top here. I ran into this link to a thread in winserverDS (ends with c5d96 so I don't get in trouble with a link being posted)
Someone suggested running "ntfrsutl ds" tests to verify things and I found remnants of a DC removed years ago, cleaned it up - it was listed in ADUC as a replication partner after all these years)
So now I am at the FRS vs DFSR question.
Can we as a 2008R2 domain that is a member of a forest still at the 2003 level safely move up as far as FRS up to DFS Replication?
Thanks for any help - and for digging through my disorganization. I apologise if I mis-read and this is in an incorrect place.