Your company deploys a new Active Directory forest named contoso.com. The first domain controller in theforest runs Windows Server 2012 R2. The forest contains a domain controller named DC10.
On DC10, the disk that contains the SYSVOL folder fails.
You replace the failed disk. You stop the Distributed File System (DFS) Replication service. You restore the
SYSVOL folder.
You need to perform a non-authoritative synchronization of SYSVOL on DC10.
Which tool should you use before you start the DFS Replication service on DC10?
A.
Dfsgui.msc
B.
Dfsmgmt.msc
C.
Adsiedit.msc
D.
Ldp
Explanation:
How to perform a non-authoritative synchronization of DFSR-replicated SYSVOL (like “D2” for FRS)
In the ADSIEDIT. MSC tool modify the following distinguished name (DN) value and attribute on each of the
domain controllers that you want to make non-authoritative:
CN=SYSVOL Subscription,CN=Domain System Volume,CN=DFSR-LocalSettings,CN=<the server
name>,OU=Domain Controllers,DC=<domain>
msDFSR-Enabled=FALSE
Force Active Directory replication throughout the domain.
Run the following command from an elevated command prompt on the same servers that you set as nonauthoritative:
DFSRDIAG POLLAD
You will see Event ID 4114 in the DFSR event log indicating SYSVOL is no longer being replicated.
On the same DN from Step 1, set:
msDFSR-Enabled=TRUE
Force Active Directory replication throughout the domain.
Run the following command from an elevated command prompt on the same servers that you set as nonauthoritative:
DFSRDIAG POLLAD
You will see Event ID 4614 and 4604 in the DFSR event log indicating SYSVOL has been initialized. That
domain controller has now done a “D2” of SYSVOL.
Note: Active Directory Service Interfaces Editor (ADSI Edit) is a Lightweight Directory Access Protocol (LDAP)
editor that you can use to manage objects and attributes in Active Directory. ADSI Edit (adsiedit. msc) provides
a view of every object and attribute in an Active Directory forest. You can use ADSI Edit to query, view, and edit
attributes that are not exposed through other Active Directory Microsoft Management Console (MMC) snap- ins:
Active Directory Users and Computers, Active Directory Sites and Services, Active Directory Domains and
Trusts, and Active Directory Schema.