NTFRS fails after DCPROMO

[MichaelD]

We already had an existing 2003 domain with one DC and one other member server. Now recently I promoted a 2003 server in to the existing server. I don’t know whether the process was successful because when the server rebooted, thereafter NTFRS just keeps shutting down.

In order to troubleshoot this problem I tried running DCDIAG on this new server which resulted in the following:

Warning: DsGetDcName returned information for
\\arcbadger1.internal.arcbadger.org, when we were trying to reach ARCBADGER3.
Server is not responding or is not considered suitable.
The DC ARCBADGER3 is advertising itself as a DC and having a DS.
The DC ARCBADGER3 is advertising as an LDAP server
The DC ARCBADGER3 is advertising as having a writeable directory
The DC ARCBADGER3 is advertising as a Key Distribution Center
The DC ARCBADGER3 is advertising as a time server
......................... ARCBADGER3 failed test Advertising
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
NtFrs Service is stopped on [ARCBADGER3]
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... ARCBADGER3 failed test Services
Starting test: frsevent
* The File Replication Service Event log test
There are warning or error events within the last 24 hours after the

SYSVOL has been shared. Failing SYSVOL replication problems may
cause

Group Policy problems.
An Warning Event occured. EventID: 0x800034FD
Time Generated: 08/24/2005 19:39:44
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00034C2
Time Generated: 08/24/2005 19:39:45
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00034F3
Time Generated: 08/24/2005 19:39:45
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC00034C1
Time Generated: 08/24/2005 19:39:57
(Event String could not be retrieved)
......................... ARCBADGER3 failed test frsevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x00000457
Time Generated: 08/24/2005 19:04:58
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B77
Time Generated: 08/24/2005 19:09:44
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B77
Time Generated: 08/24/2005 19:39:57
(Event String could not be retrieved)
......................... ARCBADGER3 failed test systemlog

Any help will appreciated.

[Maee]

Before i could suggest anything, i would like to know whether have set all permission correct. Also did you found any error messages in the FRS Event Viewer? If yes, please post it here.

• Till then i would suggest you to check the following thread related to your situation.
  http://www.microsoft.com/technet/pro...e555522f0.mspx
  
  
• Sonar may be of value for you in troubleshooting this:
  http://www.microsoft.com/downloads/d...displaylang=en
  
  
• As a last resort you could look at rebuilding the sysvol on this dc:
  http://www.microsoft.com/technet/pro...e555522f0.mspx

[MichaelD]

Thanks for your help. I followed your suggestions but I guess there is a problem with PDC as I’m having a dug deeper. I think it is related to the upgrades done recently. Apart from this there are few more problems that are not getting fixed. So I think the best way is to rebuild it again from the start. Hopefully, I’ll do it in next few days.

[Lager Monster]

I had a similar problem with the File Replication (ntfrp.exe) not shutting down during a demotion.
In fact it was in the task list but its dependencies were not.
The dependencies were Service Logs (smlogsvc.exe) and RPC (svchost.exe)

I used pskill.exe from PSTools to kill the ID of the dependencies task as the file rep service went into "stopping" status.

This allowed dcpromo to complete and place the server into the domain as a normal server.

Hope this helps.