SOLVED

New GPOs not creating in SYSVOL Policies folder after move to DFS Replication

%3CLINGO-SUB%20id%3D%22lingo-sub-3123795%22%20slang%3D%22en-US%22%3ENew%20GPOs%20not%20creating%20in%20SYSVOL%20Policies%20folder%20after%20move%20to%20DFS%20Replication%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3123795%22%20slang%3D%22en-US%22%3E%3CP%3EI%20moved%20to%20DFS%20replication%20from%20FRS%20last%20week%20to%20allow%20installation%20of%20Server%202022%20DCs.%20All%20OK%20appeared.%20DCDiag%20and%20such%20after%20showed%20all%20OK%20and%20DFS%20event%20logs%20not%20showing%20any%20issues%20except%20when%20one%20of%20the%20DCs%20that%20is%20on%20a%20ship%20goes%20outside%20reception%2C%20I%20don't%20think%20this%20issue%20is%20DFS%20though.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENew%20GPOs%20that%20are%20created%20show%20in%20Group%20Policy%20Management%20but%20a%20folder%20is%20not%20being%20created%20in%20the%20SYSVOL%20%5C%20Policies%20folder%20with%20corresponding%20Unique%20ID%20as%20normal.%20Viewing%20on%20the%20same%20DC%20where%20GP%20Management%20confirms%20it%20is%20connected%20to%20and%20can%20see%20the%20GPO%20drilling%20even%20down%20C%3A%5CWindows%5CSYSVOL_DFSR%5C...%20the%20GPO%20folder%20is%20not%20there.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOn%20PCs%20applying%20GPO%20scoped%20it%20gives%20back%20%22the%20processing%20of%20group%20policy%20failed.%20Windows%20attempted%20to%20read%20the%20file%20%5C%5Cdomain%5Csysvol%5Cdomain.local%5Cpolicies%5C*unique%20ID*%22%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhat%20am%20I%20missing%20here%3F%20I%20have%20checked%20all%20event%20logs%20I%20can%20figure%20related%2C%20dcdiag%20showing%20OK%20still%2C%20no%20DFS%20issues%20noted%20nothing%20like%20event%26nbsp%3B2213%20or%20DFSR%20stopped..%3F%20Stopping%20me%20being%20able%20to%20continue%20with%20work%20just%20about%20now.%3CBR%20%2F%3E%3CBR%20%2F%3EIs%20there%20any%20bug%20or%20something%20the%20process%20when%20GPO%20is%20made%20the%20account%20can't%20create%20in%20that%20folder%20or%20something%20after%20moving%20to%20DFS%20from%20FRS%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-3123795%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EActive%20Directory%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EGroup%20Policy%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EManagement%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3125208%22%20slang%3D%22en-US%22%3ERe%3A%20New%20GPOs%20not%20creating%20in%20SYSVOL%20Policies%20folder%20after%20move%20to%20DFS%20Replication%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3125208%22%20slang%3D%22en-US%22%3EHello%2C%3CBR%20%2F%3EYou%20should%20have%20moved%20from%20FRS%20to%20DFSR%20a%20long%2C%20long%20time%20ago.%3CBR%20%2F%3EWhat%20other%20OS%20are%20running%20on%20your%20DC%20%3F%3CBR%20%2F%3E%3CBR%20%2F%3EDid%20you%20check%20DFSR%20replication%20using%20GPMC%20%3F%3C%2FLINGO-BODY%3E
Occasional Contributor

I moved to DFS replication from FRS last week to allow installation of Server 2022 DCs. All OK appeared. DCDiag and such after showed all OK and DFS event logs not showing any issues except when one of the DCs that is on a ship goes outside reception, I don't think this issue is DFS though.

 

New GPOs that are created show in Group Policy Management but a folder is not being created in the SYSVOL \ Policies folder with corresponding Unique ID as normal. Viewing on the same DC where GP Management confirms it is connected to and can see the GPO drilling even down C:\Windows\SYSVOL_DFSR\... the GPO folder is not there.

 

On PCs applying GPO scoped it gives back "the processing of group policy failed. Windows attempted to read the file \\domain\sysvol\domain.local\policies\*unique ID*"

 

What am I missing here? I have checked all event logs I can figure related, dcdiag showing OK still, no DFS issues noted nothing like event 2213 or DFSR stopped..? Stopping me being able to continue with work just about now.

Is there any bug or something the process when GPO is made the account can't create in that folder or something after moving to DFS from FRS?

4 Replies
Hello,
You should have moved from FRS to DFSR a long, long time ago.
What other OS are running on your DC ?

Did you check DFSR replication using GPMC ?

@Alban1999 

 

Why should we have? Existing DCs Server 2012 R2 which is still supported and which supports FRS? Was there any benefit to migrating from something working with no issue?

best response confirmed by allisterw (Occasional Contributor)
Solution
This was just a replication delay and a misunderstanding on how Windows orders things alphabetically in explorer. GPO starting with ID "12.." not appearing with other GPOs starting with 1 instead this appears much lower.
FRS is not supported anymore, and you must migrate to DFSR before migrating to a new version of Windows Server (2012 R2 support ends in one year).