Issue
On the customer system, there are errors like this in event viewer
Also, navigate to the "Polices" folder and notice that the primary AD server has more folders than the other AD servers
(See 28 items vs 12 and note the date modified)
Group policies are not being pushed
Resolution
1: On all AD servers:
Set the DFS replication service to manual and stop it
2: On the ad server that is the "main" (ad01) change the following setting in the ADSIEDIT.MSC tool:
CN=SYSVOL Subscription,CN=Domain System Volume,CN=DFSR-LocalSettings,CN=<the server name>,OU=Domain Controllers,DC=<domain>
msDFSR-Enabled=FALSE
msDFSR-options=1
(don't change anything)
Change this option to FALSE and DFRS option to "1"
3: on all the other AD servers: (just don't change the option to 1)
CN=SYSVOL Subscription,CN=Domain System Volume,CN=DFSR-LocalSettings,CN=<each other server name>,OU=Domain Controllers,DC=<domain>
msDFSR-Enabled=FALSE
4: Perform a repadmin /syncall on all servers
5: Perform a gpupdate /force on all servers
6: Start the DFSR service on AD01 and set it to automatic
7: Change the ADSIEDIT.MSC tool config back to enabled=true on AD01
8: Perform a repadmin /syncall on ALL ad servers
9: Run DFSRDIAG POLLAD on main ad server (AD01)
10: Modify the ADSIEDIT tool config on the rest of the ad servers to enabled = true for the DFRSenabled option
11: Run a gpuadate /force on all EXCEPT for the primary AD server
12: Run another syncall on all ad servers
13: Run a DFSRDIAG POLLAD on rest of the AD server
14: Verify the policy folders are now replicated