Microsoft's official enterprise support blog for AD DS and more
Hi, Ned here again. Are you tired of me blogging about DFSR and FRS yet? If so, stop reading. :)
Today I am going to describe the architectural differences of SYSVOL replication on Read-Only Domain Controllers in Windows Server 2008 – FRS versus DFSR. This makes another good case for taking the effort of getting your domain functional levels to 2008 and migrating off of the File Replication Service.
Before I get rolling, a mini-glossary:
RODC - Read-Only DC (Introduced in Windows Server 2008) RWDC - Writable DC (introduced in Windows 2000 Server) FRS - File Replication Service (introduced in Windows 2000 Server) DFSR - Distributed File System Replication (introduced in Windows Server 2003 R2)
Running RODCs with FRS as the replication engine for SYSVOL
While FRS can be used, it has some significant downsides in its behavior if the environment is not carefully administered. Since RODCs are designed to be placed in locations that will not have administrators or very basic role-separated administrators, this can be problematic. FRS does not contain the full plumbing to undo changes, but instead only prevents changes from leaving the DC.
As you can imagine, using FRS to replicate RODC SYSVOL folders has some administrative caveats and is not recommended. FRS ,as a feature, has effectively been deprecated (as you can tell from here and the Windows Server 2008 administration tools – where did DFSGUI.MSC go?).
Running RODCs with DFSR as the replication engine for SYSVOL
DFSR offers some architectural advantages that make it very compelling for RODCs.
For these reasons, DFSR-based SYSVOL replication (available when running in Windows Server 2008 Domain Functional Mode) is recommended.
PS: Have you downloaded Windows Server 2008 R2 yet and deployed DFSR in a test environment? You are in for some surprises there with read-only. You should check that out…
- Ned “My First Born Was Named USN Journal” Pyle
PingBack from http://www.ditii.com/2009/01/14/windows-server-2008-understanding-behavior-differences-of-sysvol-replication-in-rodcs/
I think senario 2 should read...
5. The folder called 'some goo' is immediately deleted. "
Ed McMahon voice: "You... are correct sir! YES!"
Fixed, thanks Ed.