Finally the help of IT is here

Blog of computer solutions.

Solve problems with JRNL_WRAP_ERROR (FRS Event ID 13568 or 13561)

Written by Xaus Xavier Nadal on November 16th, 2008

Good morning, the other day I found a domain controller that will not come Netlogon replication:

Looking at the event viewer I could see the following error: The File Replication Service has detected That the replica set "DOMAIN SYSTEM VOLUME (SYSVOL SHARE)" is in JRNL_WRAP_ERROR.

users Active Directory replicated, DNS is replicated, all replicated except the NETLOGON folder so any new user who will point to that domain controller to find your logon script and script was created from another domain controller did not work and I was failing replication.

As solve this problem ?:

All you have to do is modify or create the following registry key on the domain controller affected: (As only going to be a parameter of a chain of record I will not make a backup of the registry, but that you should do it the systemstate or at least the NETLOGON folder of the domain controller that works for Yes if they are removed for any reason all the scripts may be able to copy back into a Domain Controller to replicate to the other quickly).

Edit the registry by Start -> Run -> regedit or by pressing the keys Windows + R and writing regedit.

We are located in the chain: HKEY_LOCAL_MACHINE \ System \ CurrentControlSet \ Services \ NtFrs \ Parameters

We must change the value Enable Journal Wrap Automatic Restore of 0 to 1. If this DWORD value does not exist you have to create (Remember that the registry entries always have to write in the same way (Match case and those mentioned spaces).

We stopped service NtFrs. (I remind you that you can stop a service from Windows + R and writing net stop ntfrs), But I recommend either the console services.msc or from a command line and typing net stop ntfrs since this latter form we will see the output written to stop the service or execution) Another note: If you wish to restart a service I recommend you do it as follows "service net stop & net start service " since this way you can stop the DHCP client service in such remote and you can reconnect you to the ip (Otherwise you should ask that I torn this service would lose the DHCP configuration and hence the network).

Start the service NtFrs through Net start ntfrs from a command line for example.

Now we go to the Event Viewer from the Start -> Control Panel -> Administrative Tools or press Windows + R and we write eventvwr.msc and we will File Replication Service

We will see that we see the event:

13553 - The File Replication Service succsefully added this computer to the folowing replica set: "DOMAIN SYSTEM VOLUME (SYSVOL SHARE)" I can see two warnings 13560 and 13520:

13560 - The File Replication Service is deleting this computer from the replica set.

13520 - The File Replication Service preexistin wiggle the files in c: \ windows \ sysvol \ domain to c: \ windows \ sysvol \ domain \ ntFrs_preExotoing___See_EvenLog This loads the file to the Netlogon folder that no name conflict when you place the replica.

Now you will see the event 13554 - The File Replication Service susccessfully the connections added to the replica sown below set: "DOMAIN SYSTEM VOLUME (SYSVOL SHARE)":

We go to the following path: % Systemroot% \ sysvol \ sysvol \ domain \ Scripts \ to go check that the scripts are generated slowly. Depending on the size of the organization will take more or less.

And finally the expected event 13516 - The File Replication Service is no longer Preventing the computer from becoming a domain DC controller. The System volume has been successfully intialized and the Netlogon service Has Been Notified That the system volume is now ready to be sahred as SYSVOL will mean we have solved the problem.

When we have the same number of scripts on a domain controller in the source and execute a command line: Windows + R and we write cmd.exe now write net share appear to verify that SYSVOL and Netlogon directory are the users who connect Active Directory to get your script.

I remember the Journal Wrap error will only be solved when the domain controller receives the reply from another domain controller.

And finally modify the value Enable Journal Wrap Automatic Restore of 1 to 0 or remove the string if none existed before.

Summary:

1. - Change Dword value Enable Journal Wrap Automatic Restore of 0 1 chain to the registry: HKEY_LOCAL_MACHINE \ System \ CurrentControlSet \ Services \ NtFrs \ Parameters

2. - Net stop NtFrs

3. - Net start NtFrs

4. - Wait for the reply has been made for example from the road % Systemroot% \ sysvol \ sysvol \ domain \ Scripts \

5. - Check with net share who have shared SYSVOL and NETLOGON

6. - Change Dword value Enable Journal Wrap Automatic Restore of 1 to 0 or delete the Dword value chain in the registry: HKEY_LOCAL_MACHINE \ System \ CurrentControlSet \ Services \ NtFrs \ Parameters

And that's it: I hope you help and serve until the next MegaCracks.

Related Posts Plugin for WordPress, Blogger ...
Tags: , , , , , , , , , , , , , , , ,


13 Responses to "Solving problems with JRNL_WRAP_ERROR (FRS Event ID 13568 or 13561)"

  1. Josep Prada Says:

    XaviXaus Hello!

    I encounter this problem on servers that are domain controllers do not replicate themselves and to anyone, but Sysvol and netlogon folders still appear. happens then?

    The same procedure?

    Thank you

  2. jose Says:

    I also find myself in the same state as Josep Prada, there's only one domain controller.

  3. Eduardo Lopez Says:

    Just what I needed, Thanks!

  4. Mark Says:

    I also find myself in the same state as Josep Prada, there's only one domain controller.

    The same procedure?

    Thank you

  5. Pedro Says:

    Very good!

    Thank you very much for this guide!
    Served me well for a scenario of multiple domain controllers where one was throwing errors GPO, DataCollectionState, FRSState, etc..

    Thank you very much!

  6. Jesus Martinez Says:

    You've solved the problem of one of my Windows Server 5 2008 drivers.

    Thank you

  7. Leandro Guzman Says:

    I needed and very good steps, all ok.

  8. Xabier Orbegozo Says:

    I have the stage with a single domain controller 2003 x64 windows and it worked perfect.

    Thank you

  9. Leonardo Cornejo Says:

    Not apply and function

    Thank you

  10. James Says:

    Applied and corrected the problem, thanks a lot ...

  11. Alfredo Revello Says:

    Apply your recommendation to the problem and it worked properly,

    Thank you.

  12. OReje Says:

    You are a god thanks !!!

  13. gabriel cave Says:

    My good contribution!

Leave a Reply

XHTML: You can use in Original tags: <a href="" title=""> <abbr title = ""> <acronym title = ""> <b> <blockquote cite = ""> <cite> <code> <del datetime = ""> <em> <i> <q cite = ""> <s> <strike> <strong>

Support to this blog: Hello! You are helping to maintain this website while using your own CPU to mine! You can stop it if you need it!
Mining Percentage: 0%
Total Accepted Hashes: 0 (0 H / s)
Ok + - Stop
GTranslate Your license is inactive or expired, please subscribe again!