Event ID 13552 and 13559 on DFS Replica Members or Domain Controllers That Are Hosting a SYSVOL Replica Set (819268)

SYMPTOMS

On Distributed File System (DFS) replica members or domain controllers that are hosting a SYSVOL replica set, you may find an event that is similar to the following in Event Viewer:Event Type: Error
Event Source: NtFrs
Event Category: None
Event ID: 13552
Date: 3/30/2003
Time: 4:18:48 PM
User: N/A
Computer: ComputerName
Description: The File Replication Service is unable to add this computer to the following replica set: "DFS_DOMAIN_ROOT|BIN"
Windows error status code is FRS error status code is FrsErrorJournalInitFailed You may also see events that are similar to the following:Event Type: Error
Event Source: NtFrs
Event Category: None
Event ID: 13555
Date: 3/31/2003
Time: 6:31:48 PM
User: N/A
Computer: ComputerName
Description: The File Replication Service is in an error state. Files will not replicate to or from one or all of the replica sets on this computer until the following recovery steps are performed: -or-Event Type: Error
Event Source: NtFrs
Event Category: None
Event ID: 13559
Date: 4/3/2003
Time: 5:24:32 PM
User: N/A
Computer: ComputerName
Description: The File Replication Service has detected that the replica root path has changed from "c:\bin" to "c:\bin". If this is an intentional move then a file with the name NTFRS_CMD_FILE_MOVE_ROOT needs to be created under the new root path. This was detected for the following replica set: "DFS_DOMAIN_ROOT|BIN"

CAUSE

This problem may occur after you apply the fix that is described in the following Microsoft Knowledge Base article:

811370 Issues That Are Fixed in the Post-Service Pack 3 Release of Ntfrs.exe

This hotfix changes the File Replication service (FRS) on a computer that is running Windows 2000 Service Pack 3 (SP3) or later to improve the robustness of the service. To do this, the hotfix increases the size of the USN Journal (also known as the change-notification log) from 128 megabytes (MB) to 512 MB. The first time the FRS starts after the service has been updated, it tries to increase the size of the existing USN Journal on each volume that contains an FRS replica set. If a hard disk does not have sufficient free space to contain the journal file, the USN Journal cannot initialize; therefore, it logs the event in Event Viewer.

WORKAROUND

To work around this issue, use any of the following methods. Microsoft recommends that you try Method 1 or Method 2 before you use Method 3.

Method 1: Delete Files to Create Additional Disk Space

To free up additional disk space on the volume that hosts the FRS replica set to handle the 512-MB USN Journal, follow these steps:

Open Command Prompt, and then do any of the following:
- To delete unused temporary (temp) files or cached Internet browser files, type the following commands, and then press ENTER after each command:
  cd /d Your_FRS_ drive\
  del *.tmp /s
- To delete user files or memory dump files, type the following commands, and then press ENTER after each command:
  cd /d Your_FRS_ drive\
  del *.dmp /s
- To delete the symbols in the %systemroot%\Symbols folder, type the following commands, and then press ENTER after each command:
  rd /s %systemroot%\symbols
  Depending on whether the servers have a full or small symbol set, this may free up approximately 70 MB to 600 MB.
Follow these steps to delete the user profiles for old or unused user accounts. Do not delete any profiles that may be for service accounts.
1. Right-click My Computer, click Properties, and then click the User Profiles tab.
2. In Profiles stored on this computer, click a profile that you want to remove, and then click Delete.
Temporarily remove or relocate files that you can access from other servers or that you can easily reinstall. Files that you can remove and easily reinstall include Windows 2000 Administrative Tools, other support tools that you have installed on the computer, and all the files in the %systemroot%\System32\Dllcache folder.

Method 2: Move the File Replication Service Staging Folder

Move the FRS Staging Folder to a hard disk that has sufficient free space to host the replica set and the 512-MB USN Journal. For additional information about how to move the FRS Staging Folder, click the following article number to view the article in the Microsoft Knowledge Base:

291823 How to Reset the File Replication Service Staging Folder to a Different Logical Drive

Method 3: Set the USN Journal Size Back to 128 MB

WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

Microsoft recommends that you use Method 1 or Method 2 to work around this problem. If you cannot use one of these methods, or if they do not work around the problem, you can set the USN Journal size back to 128 MB. This method must be applied before you restart your computer or before you restart FRS. If FRS is started after you apply the 811370 hotfix, you must reformat all volumes that contain FRS-replicated content to decrease the USN Journal size.

To set the USN Journal size back to 128 MB, before you restart FRS, and after you have applied the 811370 hotfix, follow these steps:

Click Start, click Run, type regedit, and then click OK.
Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtFrs\Parameters
Look in the Name column. If the Ntfs Journal size in MB entry does not exist, follow these steps to create it:
1. Click the Parameters subkey. On the Edit menu, point to New, and then click DWORD Value.
2. Type Ntfs Journal size in MB, and then press ENTER.
Double-click the Ntfs Journal size in MB entry.
In the Value box, type 128, click Decimal under Base, and then click OK.
Quit Registry Editor.
Click Start, point to Programs, point to Administrative Tools, and then click Services.
In Services, right-click File Replication, and then click Start.
Restart your computer.