Event ID/Source search
Keyword search
Example: Windows cannot unload your registry file
EventID.Net Splunk Add-on
Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
read more...
Event ID: 13553 Source: NtFrs
| Source: NtFrs |
| Type: Information |
| Description: The File Replication Service successfully added this computer to the following replica set: DOMAIN SYSTEM VOLUME (SYSVOL SHARE) Information related to this event is shown below: Computer DNS name is descartes.altairtech.net Replica set member name is DESCARTES Replica set root path is c:\winnt\sysvol\domain Replica staging directory path is c:\winnt\sysvol\staging\domain Replica working directory path is c:\winnt\ntfrs\jet |
| English: Request a translation of the event description in plain English. |
| Concepts to understand: What is the role of a DNS server? What is the role of File Replication Service? What is a replica set? |
| Comments: Anonymous At a remote site, a volume had it's drive letter reassigned, breaking DFS Replication. Clearing the local JET folder, updating registry keys under HKLM\CurrentControlSet and the other backup areas, then restarting the NTFRS service did not resolve the incorrect location. As we implemented a Domain Based root we discovered the AD Computer Object held information on the replication location and it was here that the information was being read. There may be a command I am not aware of yet the solution for us was to edit the object using ADSIEdit. Navigate to: CN=<ComputerObject>, CN=NTFRS Subscriptions, CN=DFS Volumes, CN=<DFS Tree GUID>, CN=<DFS Tree Name>, CN=<DFS Replication Target> Under Properties edit the fRSRootPath and fRSStagingPath attributes to use the correct paths. Allow AD Replication of the object to the affeected computers site. Restart the services: Net Stop NTFRS Delete the %SystemRoot%\NTFRS\JET folder. Until this was performed it held onto the old information. Remember this will cause a resync of DFS content essentially wiping current data and replicating it back in. Net Start NTFRS You will see some warnings (Event id 13520) that the preexisting files in every DFS target will be moved to NtFrs_PreExisting... followed by 13553 and 13554 to say that the Target has been added to the Replication set.  x
1
EventID.Net ME842162 provides information on this event. x
1
David Seidl See "Moving FRSStagingPath Requires Non-Authoritative Restoration (ME265085)". x
2
|
| Private comment: Subscribers only. See example of private comment |
| Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links... |
| Custom search for *****: Google - Bing - Microsoft - Yahoo |
| Feedback:
Send comments or solutions
- Notify me when updated
|
| Printer friendly |
Subscribe to EventID.Net now!