I have to migrate a domain controller from Samba 4.5 to Windows Server 2016. The problem is, samba's DC implementation is not complete. It doesn't join correctly anything newer than Server 2008R2, and it does not implement SYSVOL replication.
The first was solved by using a Server 2008R2 instance as an intermediate step, which was promoted successfully. Then samba was demoted and dejoined, then the first Server 2016 joined and promoted.
What is causing severe problems is the missing sysvol replication. The "official" recommendation around this is to use something like robocopy for a one-way sync from the samba DC to windows, then manually set the "SysvolReady" flag to 1 on the windows DC to trick it into believing everything is OK. This works at first, but now I still don't have working replication when joining the Server 2016 DC.
The situation is:
- FRS service is stopped on the 2008 DC, DFS is running.
- Using the DFS console, the replication set for SYSVOL exists but has no members.
- Using AD Users and Groups, under System, DFSR-GlobalSettings, Domain System Volume, and Topology - is empty (probably the same as #2).
- Using ADSI-Edit, there is no DFSR-LocalSettings object for any DC
- dfsrmig /getglobalstate says the global state is "Eliminated", but the local state is "Starting".
Any recommendations how to get out of this? I can afford to lose current Sysvol contents, there were mainly some GPOs which I have backed up. I can also afford some downtime, if neccessary.