Procedura:
- keep a backup of SYSVOL & NETLOGON on working DC.
- Log on to working Domain Controller and Stop the File Replication Service
- Then open Registry editor (Regedit) and go to:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup
Modify BurFlags attribute value to D4 - Start File Replication Service
- Wait for File Replication event ID 13516
- Now log in to problematic domain controller and stop the File Replication Service.
- Go to:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup
Modify BurFlags attribute and change the value to D2 - Start File Replication Service
- Wait for File Replication event ID 13516
- Check the shared NETLOGON and SYSVOL and it contents.