Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 6402 Source: DFSR

The DFS Replication service failed to initialize replicated folder <drive letter path to folder> because the service detected that one of its private folders overlaps with an existing File Replication service (FRS) replica set. This is an unsupported configuration.

Additional Information:
Overlapped Folder: <drive letter path to overlapping folder>
Replicated Folder: <drive letter path to folder>
Replicated Folder Name: <folder>
Replicated Folder ID: <guid>
Replication Group Name: <fds path to folder>
Replication Group ID: <guid2>
Member ID: <guid3>
FRS Folder Name:<drive letter path to folder>
FRS AD Subscriber Object ID: <guid4>
FRS AD Subscriber Object DN: CN=<dfs root name>|<dfs folder name>CN=<dfs root name>CN=<guid5>CN=DFS VolumesCN=NTFRS SubscriptionsCN=<computer>OU=Domain ControllersDC=<name>DC=<name2>.
From a newsgroup post: "I recently upgraded to Windows 2003 R2, and had an existing DFS Share. When I tried to replicate some folders using the DFS Management Console, this error appeared in the event log. To fix the problem I turned off FRS Replication in old DFS tab".

See MSW2KDB for additional information on this event.
See the link to "Blog Entry" for a solution that worked for me.
This is a new Event ID for Windows Server 2003 R2 SP1 found in a new DFS Replication log. Always backup the Dfs replicas before reconfiguring Dfs. Get users to log off first particularly if Folder Redirection or Roaming Profiles are configured to use Dfs. Examine and compare the drive letter path for each Dfs replica using Windows Explorer. Look for any of these paths that are empty or do not match the other paths for the same replica. Also look for odd-looking folders (e.g. folder names ending in "_NTFRS_xxxxxxxx". Where "x" is a random hexadecimal number). Rebuild Dfs using Dfs Manager and restore missing files if necessary. Ensure that the right replica is selected as the primary source of the folder content.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.