Skip to content

NKCODE TECH GEEK ZONE

  • RSS - Posts
Menu
  • Home
  • Cloud
    • Azure
    • Alibaba
    • AWS
  • Hardware
  • Linux
  • Network
  • Security
  • Windows Client / Servers
    • SQL
    • Windows Client OS
      • Windows 10
    • Windows Servers
      • Windows 2008R2
      • Windows Server 2012R2
      • Windows Server 2016
      • Windows Server 2019
  • VMWARE
  • Free Tools
  • About Me
    • Disclaimer
Menu

Event ID 13568 domain controller

Posted on November 5, 2018

Note:backup of sysvol folder(Policies & Script)

troubleshoot the journal wrap, see the following article in the Microsoft Knowledge Base:

Troubleshooting Journal_Wrap Errors on Sysvol and DFS Replica Sets

http://support.microsoft.com/?id=292438

Stop FRS
Start Registry Editor (Regedt32.exe)
Locate and click the following key in the registry:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\

NtFrs\Parameters\Backup\Restore\Process at Startup

On the Edit menu, click Add Value , and then add the following registry value:
Value name: BurFlags 
Data type: REG_DWORD 
Radix: Hexadecimal 
Value data: D2
Quit Registry Editor
Restart FRS

Fix Journal Wrap

Click on Start, Run and type regedit

Expand HKEY_LOCAL_MACHINE.
Click down the key path:
“System\CurrentControlSet\Services\NtFrs\Parameters”
Double click on the value name
“Enable Journal Wrap Automatic Restore”
and update the value

If the value name(Enable Journal Wrap Automatic Restore) is not present you may add it with the New->DWORD Value and set the value to 1 and restart FRS service
Once the recovery is completed make sure that the Enable Journal Wrap Automatic Restore is set to 0 or delete the key

Normally for an Authoritative Restore you stop at NTFRS services on all DCs
Set burflags to D4 on a known good sysvol (or at this time restore sysvol data from backup then set burflags to D4) then start NTFRS on this server You may want to rename the old folders with .old extensions prior to restoring good data
Clean up the folders on all the remaining servers (Policies Scripts etc) – renamed them with .old extensions
Set burflags to D2 on all remaining servers and start NTFRS
Wait for FRS to replicate
Clean up the old stuff if things look good

Share this:

  • Click to share on X (Opens in new window) X
  • Click to share on Facebook (Opens in new window) Facebook
  • Click to share on LinkedIn (Opens in new window) LinkedIn
  • Click to share on Pinterest (Opens in new window) Pinterest
  • Click to share on Telegram (Opens in new window) Telegram
  • Click to share on WhatsApp (Opens in new window) WhatsApp
  • Click to share on Reddit (Opens in new window) Reddit
  • Click to email a link to a friend (Opens in new window) Email

Like this:

Like Loading...

Related

Welcome to Teck Geek Zone

Alibaba & Azure Cloud with a free trial worth $200-1200 USD Click below Cloud Providers

  • 🆚 Modern Identity Wars: Active Directory vs. Microsoft Entra ID
  • 🔷 VMware Cloud Foundation 9 (VCF 9.0): Redefining the Modern Private Cloud
  • From ARM to HCL: Exploring Azure’s New Export Template to Terraform Feature
  • 🛡️ Strengthening Your AWS Security: Best Practices Explored
  • From Backup Center to Business Continuity Center: A New Era in Azure BCDR Management

Categories

  • Cloud (178)
    • Alibaba (38)
    • AWS (36)
    • Azure (109)
  • Free Tools (5)
  • Hardware (17)
  • Linux (13)
  • Network (28)
  • Security (21)
  • VMWARE (51)
  • Windows OS (44)
    • Windows 10 (7)
  • Windows Servers (69)
    • SQL (3)
    • Windows 2008R2 (7)
    • Windows Server 2012R2 (15)
    • Windows Server 2016 (20)
    • Windows Server 2019 (10)

Subscribe to our newsletter

©2025 NKCODE TECH GEEK ZONE | Design: Newspaperly WordPress Theme
 

Loading Comments...
 

    %d