Sign up ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I have 2 2012 servers. I found out there's no share of neither SYSVOL nor NETLOGON on the BDC.

I'm getting many 5002:

The DFS Replication service encountered an error communicating with partner QA-DC for replication group Domain System Volume. 

and 4614:

The DFS replication service initilizaed SYSVOL at local path c:\windows\sysvol\domain and is waiting to perform initial replication

I already tried non-authoritive restore on the BDC and authoritive restore on the PDC according to this guide:

I'm afraid that didnt help.


I found something strange... Looking at the debug log it looks like dev-dc which is my secondary DC, does not even try to communicate with QA-DC which is the PDC. The logs do show this problematic(?) line:

"Cluster Service is not installed or configured. Skipping VCO Polling".

One more thing I found out is when looking at "DFS Management" snapping I discovered that QA-DC's membership in the "Domain System Volume" is somehow disabled...

share|improve this question

2 Answers 2

up vote 1 down vote accepted

After spending hours on top of hours this is the only thing that eventually worked:

share|improve this answer

The error message indicate a general connectivity issue between your second Domain Controller (stop calling it BDC) and QA-DC, that causes initial replication of SYSVOL to fail. As such, the restore operation doesn't really make sense.

The DFS-R service requires tcp traffic on the following destination ports to be allowed in any firewall between the two:

RPC Endpoint Mapper    tcp/135
Dynamic port range*    tcp/49152-65535 

In addition, you need to make sure that the second DC can resolve QA-DC in DNS.

If these requirements have already been met, inspect the DFSR debug logs. Post any relevant failure details if it doesn't make sense to you. By default, these are located at %windir%\debug\ and will have names like "Dfsr00001.log".

* These are also commonly referred to as Ephemeral Ports or Dynamically Allocated High Ports

share|improve this answer
Where do u want the logs from? qa-dc or the pdc? there's no firewall between the 2. Win firewall has also been turned off. – user1571299 Dec 18 '13 at 20:33
From the failing DC – Mathias R. Jessen Dec 19 '13 at 0:26
I'm gonna update on a new post. – user1571299 Dec 19 '13 at 7:44

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.