Journal Wrap Errors and Sysvol replication issues ( Event ID: 13568)

                             Journal Wrap Errors and Sysvol replication issues ( Event ID:    13568)

Many administrators might faced this issue that suddenly your Sysvol replication might stop and journal wrap errors will be logged in your eventvwr.

=====================================
Event Type:    Error
Event Source:    NtFrs
Event Category:    None
Event ID:    13568
Date:        12/7/2012
Time:        2:56:41 PM
User:        N/A
Computer:    YAMATO
Description:
The File Replication Service has detected that the replica set "DOMAIN SYSTEM VOLUME (SYSVOL SHARE)" is in JRNL_WRAP_ERROR.
 ===================================
How to fix this now, this can be fixed by Enabling Journal Wrap Automatic Restore, when you do this it will delete your sysvol share which is in error state and creates the new one and re-sync's the data with the other domain controller in the network.
Let us see hoe to enable journal wrap automatic restore, it is a very simple process which needs a registry key change.

• Open Regedit and expand " HKLM\System\CurrentControlSet\Services\NtFrs\Parameters"  

• Change value for "Enable Journal Wrap Automatic Restore" from 0 to 1. If the DWORD Value does not exist, create a new one .

•     Stop and start the NTFRS Service.

•     Now go back to event viewer and keep an eye on FRS events.
  
  • when the recovery process start you will see event id: 13553
  • When the source server re-creates sysvol folder and it i will ready to accept the data from peer domain controller you will see evend id: 13554
  • Once the Sysvol is transfered and shared successfully you will see the event :13516.

• The issue will be resolved now, the sysvol will starts replication with out any issue.

• Come back to registry now and revert back the "Enable Journal Wrap Automatic Restore" value to 0.
  
  
  :-) journal Wrap error will be stopped and Sysvol replication will be started

Posted in Active Directory