Your company deploys a new Active Directory forest named contoso.com. The first domain
controller in the forest runs Windows Server 2012 R2. The forest contains a domain controller
named DC10.
On DC10, the disk that contains the SYSVOL folder fails.
You replace the failed disk. You stop the Distributed File System (DFS) Replication service. You
restore the SYSVOL folder.
You need to perform a non-authoritative synchronization of SYSVOL on DC10.
Which tool should you use before you start the DFS Replication service on DC10?
A.
Active Directory Sites and Services
B.
Dfsmgmt.msc
C.
Ldp
D.
Frsutil
Explanation:
http://support.microsoft.com/kb/2218556
How can Dfsmgmt be the answer? The article referenced states; “You cannot use the DFS Management snap-in (Dfsmgmt.msc) or the Dfsradmin.exe command-line tool to achieve this.”
Answer should be A: U can use Sites and services to force an AD replication, and since there has been a non authoritive restore, this should be enough
Yeah, I think A is the right response. Step #2 in the non-authoritative restore procedure (http://support.microsoft.com/kb/2218556) is to force AD replication, which can be done through AD Sites and Services.
I think the answer is c. LDP is also Equivalent to ADSIEdit
I agree with Yeloz.
You need to change the msDFSR-Enabled value before syncing, so you would need to use ADSIEDIT or another tool such as Ldp.
The support article link shown as the explanation rejects the answer: “You cannot use the DFS Management snap-in (Dfsmgmt.msc) or the Dfsradmin.exe command-line tool to achieve this”
It only discusses ADSIEDIT.msc. So let’s hope that the choices are worded better than this example.
Answer is B
Before running DFSRADMIN we run dfsmgmt.msc
http://blogs.technet.com/b/filecab/archive/2013/08/20/dfs-replication-in-windows-server-2012-r2-if-you-only-knew-the-power-of-the-dark-shell.aspx
http://blogs.technet.com/b/thbouche/archive/2013/08/28/dfsr-sysvol-authoritative-non-authoritative-restore-powershell-functions.aspx
B if ADSIEDIT is not available as an answer v4 has it
http://www.aiotestking.com/microsoft/which-tool-should-you-use-before-you-start-the-dfs-replication-service-on-dc10-2/
1. In the ADSIEDIT.MSC tool modify the following distinguished name (DN) value and attribute on each of the domain controllers that you want to make nonauthoritative:
CN=SYSVOL Subscription,CN=Domain System Volume,CN=DFSR-LocalSettings,CN=,OU=Domain Controllers,DC=
msDFSR-Enabled=FALSE
2. Force Active Directory replication throughout the domain.
3. Run the following command from an elevated command prompt on the same servers that you set as non-authoritative:
DFSRDIAG POLLAD
4. You will see Event ID 4114 in the DFSR event log indicating SYSVOL is no longer being replicated.
5. On the same DN from Step 1, set:
msDFSR-Enabled=TRUE
6. Force Active Directory replication throughout the domain.
7. Run the following command from an elevated command prompt on the same servers that you set as non-authoritative:
DFSRDIAG POLLAD
8. You will see Event ID 4614 and 4604 in the DFSR event log indicating SYSVOL has been initialized. That domain controller has now done a “D2” of SYSVOL.
I would go for C since this is the equivalent of ADSIEdit