Migration Of SYSVOL from FRS to DFSR

By | February 7, 2017

Migrating SYSVOL from FRS to DFSR

SYSVOL is a shared folder on domain controllers to hold its logon scripts, group policies and other items related to AD. The SYSVOL folder content will get replicated between all the domain controllers in domain. The default path for SYSVOL folder is %SystemRoot%\SYSVOL. This folder path is defined when you install the active directory.

Windows Server 2003 and 2003 R2 uses File Replication Service FRS to replicate SYSVOL folder content to other domain controllers. But Windows server 2008 and later versions uses Distributed File System (DFS) for the SYSVOL replication.  DFS is more efficient than FRS. Since windows server 2003 is going out of support, most people already done or still looking for migrate in to latest versions. However migrating DOMAIN WILL NOT migrate SYSVOL replication from FRS to DFS.

In order to proceed with the SYSVOL migration forest function level must be set to windows server 2008 or later. So if your organization have not done this yet first step is to get the forest and domain function level updated.

You can verify if the system uses the FRS using dfsrmig /getglobalstate , To do this

1)    Log in to domain controller as Domain admin or Enterprise Admin
2)    Launch powershell console and type dfsrmig /getglobalstate. Output explains it’s not initiated DFRS migration yet.

SYSVOL Migration

Before move in to the configurations we need to look into stages of the migration.

There are four stable states going along with the four migration phases.

1)    State 0 – Start
2)    State 1 – Prepared
3)    State 2 – Redirected
4)    State 3 – Eliminated

State 0 – Start

With initiating this state, FRS will replicate SYSVOL folder among the domain controllers. It is important to have up to date copy of SYSVOL before begins the migration process to avoid any conflicts.

State 1 – Prepared

In this state while FRS continues replicating SYSVOL folder, DFSR will replicate a copy of SYSVOL folder. It will be located in %SystemRoot%\SYSVOL_DFRS by default. But this SYSVOL will not response for any other domain controller service requests.

State 2 – Redirected

In this state the DFSR copy of SYSVOL starts to response for SYSVOL service requests. FRS will continue the replication of its own SYSVOL copy but will not involve with production SYSVOL replication.

State 3 – Eliminated

In this state, DFS Replication will continue its replication and servicing SYSVOL requests. Windows will delete original SYSVOL folder users by FRS replication and stop the FRS replication.

In order to migrate from FRS to DFSR its must to go from State 1 to State 3.

Let’s look in to the migration steps.

Prepared State

1.    Log in to domain controller as Domain admin or Enterprise Admin
2.    Launch powershell console
3.    Type dfsrmig /setglobalstate 1 and press enter

SYSVOL Migration

4.    Type dfsrmig /getmigrationstate to confirm all domain controllers have reached prepared state

SYSVOL Migration

Redirected State

1.    Log in to domain controller as Domain admin or Enterprise Admin
2.    Launch powershell console
3.    Type dfsrmig /setglobalstate 2 and press enter

FRS to DFSR

4.    Type dfsrmig /getmigrationstate to confirm all domain controllers have reached redirected state

SYSVOL Migration

Eliminated State

1.    Log in to domain controller as Domain admin or Enterprise Admin
2.    Launch powershell console
3.    Type dfsrmig /setglobalstate 3 and press enter

SYSVOL

4.    Type dfsrmig /getmigrationstate to confirm all domain controllers have reached eliminated state

SYSVOL Upgrade

This completes the migration process and to confirm the SYSVOL share, type net share command and enter.

SYSVOL Migration

Also make sure in each domain controller FRS service is stopped and disabled.

FRS