question

ShahinMortazave-1426 avatar image
0 Votes"
ShahinMortazave-1426 asked DaisyZhou-MSFT commented

Sysvol issue

Hi,
We have a singel domain with 3 DC's .2 of them is server 2008 R2 and 1 is a VM server 2012 R2. Last week we had a issue with our domain and we had to restore the VM server 2012 R2. I have siezed all the FSMO roles from the DC 2008 R2 and cleaned up the metadata for one of the server 2008 R2 DCs and othere one didn't cleanup yet.

Now when on the VM DC that has all FSMO role click on the default domain policy get the this message

Permissions for this GPO in the SYSVOL folder are inconsistent with those in Active Directory, click yes to set permission.

Should we go ahed with Yes option? or we can correct this issue some other way?

Thanks

windows-serverwindows-active-directory
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello @ShahinMortazave-1426,
How are things going on your end? Please keep me posted on this issue.
If you have any further questions or concerns about this question, please let us know.
I appreciate your time and efforts.

Best Regards,
Daisy Zhou

0 Votes 0 ·

Hello @ShahinMortazave-1426,

I am just writing to see if this question has any update. If anything is unclear, please feel free to let us know.
Thanks for your time and have a nice day!

Best Regards,
Daisy Zhou

0 Votes 0 ·
DaisyZhou-MSFT avatar image
0 Votes"
DaisyZhou-MSFT answered

Hello @ShahinMortazave-1426,

Thank you for posting here.

Based on the following article, if you have permissions to modify security on the default GPOs, select OK in response to the message that is mentioned in the Symptoms section. This action modifies the ACLs on the Sysvol part of the Group Policy Object and makes them consistent with the ACLs on the Active Directory component.

Reference
"Permissions for this GPO in the SYSVOL folder are inconsistent with those in Active Directory" message when you run GPMC
https://docs.microsoft.com/en-us/troubleshoot/windows-server/group-policy/permissions-this-gpo-inconsistent

Hope the information above is helpful.

Should you have any question or concern, please feel free to let us know.


Best Regards,
Daisy Zhou

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

ShahinMortazave-1426 avatar image
0 Votes"
ShahinMortazave-1426 answered DaisyZhou-MSFT commented

Thanks for your reply,
This artical talking aobut DC that running the server 2008 R2, my issue is on server 2012 R2, but removed DC's are server 2008 R2.
Can we use the steps for 2012 r2 as well?

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello @ShahinMortazave-1426,

Thank you for your update.

It also applies to 2012 R2.

Should you have any question or concern, please feel free to let us know.


Best Regards,
Daisy Zhou

0 Votes 0 ·