For a recent customer I was going through all the requirements to implement DirectAccess. One that I stumbled on a bit was that DirectAccess requires DFS-R replication, but I wasn’t certain how to verify what replication type was in use. After some digging, some assumptions, and some useful tips from fellow Catapult Systems consultants, here’s the scoop.
Determine if FRS (NTFRS or DFS-R) is being utilized by the Domain Controllers
Note: FRS is the abbreviated acronym for NTFRS.
From an administrator Command Prompt on a domain controller run DfsrMig /GetMigrationState and DfsrMig /GetGlobalState
- A value of 0, 1, or 2 means the migration from FRS to DFS-R is in progress
- A value of 3 means the migration from FRS to DFS-R is complete (FRS is ELIMINATED)
- A return message of “DFSR migration has not yet initialized” means FRS is in use, not DFS-R
From ADSI Edit or Active Directory Users and Computers with Advanced Features enabled,
navigate to <domain>System
- if a container named DFSR-GlobalSettings exists, then DFS-R should be in use
- if a container named File Replication Service Domain System Volume (SYSVOL share) exists and contains Domain Controller objects, then FRS should be in use
navigate to <domain>Domain Controllers<Domain controller>
- if a container named NTFRS Subscriptions exists, then FRS should be in use
From a domain controller
- open Event Viewer Applications and Services Logs File Replication Service. If there is recent activity, then FRS should be in use.
- if <SYSVOL>SYSVOL_DFSRSYSVOL exists, then DFS-R should be in use.
Note: to find the <SYSVOL> share
- From a command prompt enter reg.exe query HKLMSYSTEMCurrentControlSetServicesNetlogonParameters and note the SysVol location
- From a command prompt enter dir %SystemRoot%SYSVOLSYSVOL and note the location of the <domain FQDN> directory junction which will be in [square brackets]
- From ADSI Edit or Active Directory Users and Computers, check the fRSRootPath attribute of the <domain>Domain Controllers<domain controller>NTFRS SubscriptionsDomain System Volume (SYSVOL share) object