Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
The File Replication service has detected that the staging path for the replica set DOMAIN SYSTEM VOLUME (SYSVOL SHARE) has changed.
Current staging path = E:\Windows\Sysvol\Staging\Domain
New staging path = E:\Frsstage
The service will start using the new staging path after it restarts. The service is set to restart after every restart.
It is recommended that you manually restart the service to prevent loss of data in the staging folder.
To manually restart the service do the following:
 Run "net stop ntfrs" or use the Services snap-in to stop File Replication service.
 Move all the staging files corresponding to replica set DOMAIN SYSTEM VOLUME (SYSVOL SHARE) to the new staging location. If more than one replica set are sharing the current staging folder then it is safer to copy the staging files to the new staging folder.
 Run "net start ntfrs" or use the Services snap-in to start File Replication service, followed by "net start ntfrs".
For more information, visit Help and Support Services at http://www.microsoft.com/contentredirect.asp.
|English: Request a translation of the event description in plain English.|
|Concepts to understand:|
What is the role of File Replication Service?
What is a replica set?
This event occurs during the procedure for reseting the File Replication service staging folder to a different logical drive. See the link to "Relocating the Staging Area" for details.
See ME291823 for more information.
|Private comment: Subscribers only. See example of private comment|
|Links: ME291823, Relocating the Staging Area|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
Send comments or solutions
- Notify me when updated