I am trying to apply and test best practices about Active Directory full forest recovery as warmly advised in “Best Practices for Implementing Schema Updates or : How I Learned to Stop Worrying and Love the Forest Recovery” and thoroughly explained in “AD Forest Recovery Guide”.

However, this note is to me really obscure: “Caution: Perform an authoritative (or primary) restore operation of SYSVOL only for the first DC to be restored in the forest root domain. Incorrectly performing primary restore operations of the SYSVOL on other DCs leads to replication conflicts of SYSVOL data.” (https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/manage/ad-forest-recovery-perform-initial-recovery)

What are the motivations of not to perform an authoritative restore of SYSVOL once per domain but only once per forest (in the root domain)? SYSVOL isnt’it replicated just at the domain level? So, wouldn’t it be correct to perform an authoritative restore of one only SYSVOL for each domain of the forest (the one of the recovered DC for each domain of the forest) instead that just on the root domain? The conflict shouldn’t arise just only if I set as authoritative the SYSVOL folder in more than one DC in the same domain? It is only a Microsoft typo (less likely but possible) or am I missing something (surely more likely)?

Thanks, Diego

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.