DC Promotion fails ‘FRS is Depreciated’

KB ID 0001579

Problem

Error seen when attempting to add a new domain controller to an existing domain;

Verification or replica failed

Verification of replica failed. The specified domain {Domain-Name} is still using the File Replication Service (FRS) to replicate the SYSVOL share. FRS is depreciated.

The server being promoted does not support FRS and cannot be promoted as a replica into the specified domain.

You MUST migrate the specified domain to use DFS Replication using the DFSRMIG command before continuing.

Solution

Before proceeding you MUST ensure all your existing domain controllers are AT LEAST Windows Server 2008. Your domain and forest functional levels should be at Windows Server 2008 (AL LEAST). It would also be a good move, to make sure all your DCs are replicating cleanly.

You need to go to one of your legacy (existing) domain controllers, and carry out the following PowerShell procedure. 

First make sure that no one’s messed about with this before, issue the following command and make sure the migration process has not been previously started;

dfsrmig /getglobalstate

DFSR Migration

Start the process.

dfsrmig /setglobalstate 1

DFSRMIG State 1 prepared

It can take a while, (even if you only have one Domain Controller!) Keep checking the status, with the command you originally used, until it says all the domain controllers have migrated to global state ‘Prepared‘.

DFSRMIG Prepared Completed

Change the process to state 2 (Redirected).

dfsrmig /setglobalstate 2

DFSRMIG State 2 Redirected

This typically completes a bit faster than the first state. Keep checking the status, with the command you originally used, until it says all the domain controllers have migrated to global state ‘Redirected‘.

DFSRMIG Redirected Completed

Change the process to state 2 (Eliminated).

dfsrmig /setglobalstate 3

DFSRMIG State 3 Eliminated

As before, keep checking the status, with the command you originally used, until it says all the domain controllers have migrated to global state ‘Suceeded‘.

DFSRMIG Eliminated Completed

On the ‘Old‘ domain controllers, you need to disable the NTFRS service and stop it.

Set-Service ntfrs -StartupType Disabled
Stop-Service ntfrs

PowerShell Stop and Disable a Windows Service

Now attempt to promote your new domain controller again.

Related Articles, References, Credits, or External Links

NA

Author: PeteLong

Share This Post On

Submit a Comment

Your email address will not be published. Required fields are marked *