I recently took over a windows domain environment and found AD in poor health.

I managed to fix most of the issue, BPA shows no errors, everything seems to be working well.

Sysvol is replicating over DFSR and there are no problems there. The domain is replicating just fine. repadmin /replsum shows no errors.

The only issue I have left is that NETLOGON folder is missing. Scripts Folder is also missing from sysvol. We have two domain controllers and NETLOGON + scripts folder missing from both of them. These are the only 2 domain controllers we have.

The following is the error I get in both DCs.

Image: //static.spiceworks.com/shared/post/0024/1208/Capture.jpg

I followed this KB and nothing works. https://support.microsoft.com/en-us/help/2218556/how-to-force-an-authoritative-and-non-authoritative...

At this point I run out of things to try, does anyone have any ideas?

EDIT: Include output of dir c:\Windows\SYSVOL_DFSR\sysvol

enter image description here

Output of net share

enter image description here

  • Include the output of: dir C:\Windows\SYSVOL\sysvol (or C:\Windows\SYSVOL_DFSR\sysvol if the domain was upgraded from 2003). – Greg Askew Apr 16 '17 at 16:08
  • @GregAskew I Edited the question with the output of dir: c:\windows\Sysvol_DFSR\Sysvol. Remember i said i was using DFSR for sysvol replication. – Guille Apr 16 '17 at 16:16
  • Please post the output of the command net share from your DC's. – joeqwerty Apr 16 '17 at 16:33
  • Obviously the NETLOGON share will not be enabled if the scripts directory is missing. Have you tried re-creating the C:\Windows\SYSVOL_DFSR\sysvol\<domain name>\SCRIPTS directory and restarting the netlogon service? – Greg Askew Apr 16 '17 at 16:34
  • 1
    If you don't re-create the folder, the NETLOGON share will not exist and the DC's will not function properly. There aren't any special permissions to assign. Alternatively, you could restore it from backup. – Greg Askew Apr 16 '17 at 16:39

Re-create the C:\Windows\SYSVOL_DFSR\sysvol\\SCRIPTS directory.


Thanks to @GregAskew I was able to solve the issue. Who would have thought that this would be something so simple.

All I did was manually create the scripts inside the C:\Windows\SYSVOL_DFSR\sysvol\<domain name>\. Didn't need to give it any permission. After that i restarted netlogon service net stop netlogon && net start netlogon and netlogon got shared automatically.


Similar issue on 2016 AD checked C:\Windows\SYSVOL\domain and missing 'scripts'.

Recreated the folder and restarted the NETLOG service which created the SHARE.

Prior to completing this easy task I followed this article http://www.careexchange.in/sysvol-and-netlogon-share-is-missing-in-newly-built-domain-controllers-2008r22012r2/

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.