Netlogon Replication

[jwilmer]

We just setup a spin off company as another tree in our AD forrest. One of
my apps guys is complaining that netlogon files from our main domain (root)
is not being replicated over to the new domain's DC.

Are these supposed to replicate with each other?? My initial thought is
that they should not and we need to setup the new netlogon to replicate with
it's own domain.

If not can they be made to replicate with each other.

Thanks

[Herb Martin]

Post by jwilmer
We just setup a spin off company as another tree in our AD forrest. One of
my apps guys is complaining that netlogon files from our main domain (root)
is not being replicated over to the new domain's DC.

They aren't supposed to be replicated outside of a single domain, even
within a forest.

Post by jwilmer
Are these supposed to replicate with each other?? My initial thought is
that they should not and we need to setup the new netlogon to replicate with
it's own domain.

Very little is replicated forest wide. (Schema, Configuration [sites and
services
definitions], and GCs are replicated forest wide.)

Post by jwilmer
If not can they be made to replicate with each other.

There are ways to replicated files (which is what is in Netlogon) wider.

You can use manual (and scheduled) methods like robocopy and just
xcopy.

[Paul Bergson [MVP-DS]]

Each domain will replicate its own sysvol. So no it shouldn't

To avoid sysvol problems, if you copy files from one domain to another.
Only copy the files to one of the dc's and let replication from with in the
domain to copy to other dc's, otherwise you can end up with morphed folders.
--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

Post by jwilmer
We just setup a spin off company as another tree in our AD forrest. One of
my apps guys is complaining that netlogon files from our main domain (root)
is not being replicated over to the new domain's DC.
Are these supposed to replicate with each other?? My initial thought is
that they should not and we need to setup the new netlogon to replicate with
it's own domain.
If not can they be made to replicate with each other.
Thanks

[Herb Martin]

Post by Paul Bergson [MVP-DS]
Each domain will replicate its own sysvol. So no it shouldn't
To avoid sysvol problems, if you copy files from one domain to another.
Only copy the files to one of the dc's and let replication from with in
the domain to copy to other dc's, otherwise you can end up with morphed
folders.

There is a concept that I was considering when responding that won't help
directly but that fits in well here:

"File replication bridge" is a concept (and some sample source batch) that
Microsoft used to describe how to replicate NetLogon (etc) to BDCs
in a Mixed Mode domain still containing those BDCs.

There isn't anything magical about this -- just a batch file (concept) --
but
the key is as Paul states: Pick an "export" server and and "import" server
(both DCs) for each Source and Destination domain and set up a
scheduled job to do the copy.

The problems lie around trying to make it both fault tolerance and
non-redundant,
and fixing problems if DCs have to be replaced.