Active Directory: Migrate SYSVOL Folder from FRS to DFSR

Presentation

Since Windows Server 2008 and its 2008 domain functional level, replication of the SYSVOL folder is supported by DFSR, before it was done by FRS.

If your domain controllers are running Windows 2012R2, it is advisable to use DFSR for the SYSVOL folder. Since Windows Server 2016 (build 1709), it is no longer possible to install a domain controller in an environment using FRS.

To migrate to DFSR, the domain functional level must be in 2008, the AD environment must be in good health (dcdiag). When increasing the domain functional level, the FRS to DFSR migration is not automatic, Microsoft provides a migration tool (dfsrmig.exe) on the domain controllers.

Migration takes more or less time depending on the number of DCs and the quality of the link between them. It takes place in 3 stages:

  • Preparing the environment by creating a new SYSVOL_DFSR folder that will be replicated with DFSR.
  • Changing the SYSVOL share pointing to the SYSVOL_DFSR folder.
  • Delete the old SYSVOL folder and stop the FRS service.

During migration, a new SYSVOL_DFSR folder will be created next to the existing SYSVOL folder.

Migrate SYSVOL folder from FRS to DFSR

On a domain controller, open a command prompt in Administrator mode and enter the following command:

dfsrmig /setglobalstate 1

The command should give the following result:

Check the status of the migration by entering the following command:

dfsrmig /getmigrationstate

On the screenshot below we can see that it has not yet reached a consistent state on all controllers.

Check the status periodically by re-entering the command to get a message that All Domain Controllers have been migrated to Global (“state x”).

It is also possible to check the overall status of the migration with the following command:

dfsrmig /getglobalstate

At this point, the new SYSVOL_DFSR folder is created.

We can now go to step 2 of the migration by entering the following command:

dfsrmig /setglobalstate 2

Check the status with the dfsrmig / getmigrationstate command until you have a consistent state of the controllers.

Go to step 3 by entering the command below:

dfsrmig /setglobalstate 3

Check the status of the migration using commands dfsrmig /getmigrationstate et dfsrmig /getglobalstate.

The migration is complete and the original SYSVOL folder is removed from the DCs.

Verification

From the Active Directory Users and Computers console with advanced features enabled (View / Advanced Features), it is possible to see the replicated folders before DFSR in System / DFSR-GlobalSettings / Domain Systel Volume.

On a server where the DFS Admin Console is installed, you can add the SYSVOL (Domain System Volume) folder to the console to generate reports.



Related Posts


Active Directory : increase the functional level of the domain and the forest
Presentation The functional level of the domain and forest corresponds to the "version" of your Active Directory environment and allows access to more or fewer features depending on the level of each. Mainly this level change occurs when upgrading to

How to deploy an Active Directory environment
In this tutorial, we will see how to set up an Active Directory domain. In summary, an Active Directory is a database (LDAP) that contains a set of objects (users, computers, etc.) and delivers several services: Centralization of objects on the netwo

Setting up a read-only domain controller – RODC
Introduction In this article, we are going to have how to set up a read-only domain controller (RODC). This type of controller, as the name suggests, is read-only, so it can not change user attributes or even add objects. There are several implementa

Leave a Comment