How to restore SYSVOL and NETLOGON Shares On Windows 2012 DC

 

If SYSVOL and NETLOGON Share is missing :

  1. Click Start, click Run, type regedit, and then click OK.
  2. Locate the following subkey in Registry Editor:
  3.  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
  4. In the details pane, right-click the SysvolReady flag, and then click Modify.
  5. In the Value data box, type 0, and then click OK.
  6. Again in the details pane, right-click the SysvolReady flag, and then click Modify.
  7. In the Value data box, type 1, and then click OK.

Restart the netlogon service. copy the content of the SYSVOL from healthy DC, reboot or restart twice the NETLOGON .

You might run into a missing NETLOGON folder only after that. If so, check the folder c:\windows\sysvol\domain  inside you might find

a folder called “NtFrs_PreExisting___See_EventLog“,

copy the folders inside it (Policies+Scripts) to to father folder = c:\windows\sysvol\domain.

Wait few minute and Restart the netlogon service twice again. the NETLOGON folder should re-appear again and now

the client can do login to the server !

In addition when moving the domain to windows 2016 we might need to configure value in the local GPO in order to fix the access

to NETLOGON  & SYSVOL via IP address . run:

gpedit.msc -> computer configuration -> Administrative Templates ->Network-> network provider -> Hardend UNC paths ->

Click enable & show, enter the UNC server name (\\Server name) in “Value Name” field -> in the “value” field enter :

RequireMutualAuthentication=0,RequireIntegrity=0,RequirePrivacy=0

-> click O.K -> run (in cmd) gpupdate /force

 

 


Good Luck

18 Comments

Leave a Reply to admin Cancel reply

Your email address will not be published. Required fields are marked *