Windows Server

admir · Guest

Hi all,

I have event id 13508 and I used frsdiag tool to check what is going on.

This is what I get from frsdiag: What can I do with this. Any help is great.
Checking for suspicious file Backlog size...

ERROR : File Backlog TO server "BEELDFABRIEK\FABRIEK$" is : 68758 :: Unless this is due to your schedule, this is a problem!

failed with 1 error(s) and 0 warning(s)

ERROR on NtFrs_0004.log : "ERROR_SHARING_VIOLATION(For more information see KB.822300, KB.815473, and KB.823230)" : <FrsOpenSourceFile2W: 9800: 1573: S0: 12:59:27> ++ CreateFile failed on file \??\E:\Cursisten_rep\DO_NOT_REMOVE_NtFrs_PreInstall_Directory\NTFRS_fff0f656-f3aa-4560-a3ff8dc5497b4e0e; WStatus: ERROR_SHARING_VIOLATION

ERROR on NtFrs_0004.log : "ERROR_SHARING_VIOLATION(For more information see KB.822300, KB.815473, and KB.823230)" : <StuOpenDestinationFile: 9800: 763: S0: 12:59:27> ++ ERROR - FrsOpenSourceFile2W(Les_05 -> WStatus: ERROR_SHARING_VIOLATION

ERROR on NtFrs_0004.log : "ERROR_ACCESS_DENIED" : <SndCsMain: 8988: 895: S0: 13:02:02> :SR: Cmd 03a4b2e8, CxtG 6fee6d9c, WS ERROR_ACCESS_DENIED, To FABRIEK.beeldfabriek.org Len: (494) [SndFail - Send Penalty]

ERROR on NtFrs_0004.log : "ERROR_ACCESS_DENIED" : <SndCsMain: 9756: 868: S0: 13:02:03> :SR: Cmd 036ea928, CxtG 5d3536af, WS ERROR_ACCESS_DENIED, To FABRIEK.beeldfabriek.org Len: (360) [SndFail - rpc call]

ERROR on NtFrs_0004.log : "ERROR_ACCESS_DENIED" : <SndCsMain: 9756: 895: S0: 13:02:03> :SR: Cmd 036ea928, CxtG 5d3536af, WS ERROR_ACCESS_DENIED, To FABRIEK.beeldfabriek.org Len: (360) [SndFail - Send Penalty]

ERROR on NtFrs_0004.log : "IBCO_INSTALL_RETRY" : 10/27-12:58:23 :T: LocnCmd: Create State: IBCO_INSTALL_RETRY ReplicaName: DFSROOT|CURSI (23)

ERROR on NtFrs_0004.log : "IBCO_INSTALL_RETRY" : 10/27-12:58:23 :T: LocnCmd: Create State: IBCO_INSTALL_RETRY ReplicaName: DFSROOT|CURSI (23)

ERROR on NtFrs_0004.log : "IBCO_INSTALL_RETRY" : 10/27-12:58:27 :T: LocnCmd: Create State: IBCO_INSTALL_RETRY ReplicaName: DFSROOT|CURSI (23)

ERROR on NtFrs_0004.log : "ERROR_SHARING_VIOLATION(For more information see KB.822300, KB.815473, and KB.823230)" : <FrsOpenSourceFile2W: 9800: 1562: S0: 12:59:27> NtCreateFile failed : NTStatus: STATUS_SHARING_VIOLATION

ERROR on NtFrs_0004.log : "RPC_S_CALL_FAILED_DNE(Indicates RPC Session was established to target, but there was a failure to send RPC call package. Check for Networking problems!)" : <SndCsMain: 9756: 874: S0: 13:02:01> ++ ERROR - EXCEPTION (000006bf) : WStatus: RPC_S_CALL_FAILED_DNE

ERROR on NtFrs_0004.log : "RPC_S_CALL_FAILED_DNE(Indicates RPC Session was established to target, but there was a failure to send RPC call package. Check for Networking problems!)" : <SndCsMain: 9756: 875: S0: 13:02:01> :SR: Cmd 01cf6400, CxtG 08b26bbb, WS RPC_S_CALL_FAILED_DNE, To FABRIEK.beeldfabriek.org Len: (524) [SndFail - rpc exception]

ERROR on NtFrs_0004.log : "RPC_S_CALL_FAILED_DNE(Indicates RPC Session was established to target, but there was a failure to send RPC call package. Check for Networking problems!)" : <SndCsMain: 9756: 895: S0: 13:02:02> :SR: Cmd 01cf6400, CxtG 08b26bbb, WS RPC_S_CALL_FAILED_DNE, To FABRIEK.beeldfabriek.org Len: (524) [SndFail - Send Penalty]

Dawn NM · Guest

Hi Admir,

A really great help is the site
http://www.eventid.net/display.asp?eventid=13508&eventno=349&source=NtFrs&phase=1

Did you get a 13509 message after the 13508?

Here are some steps (from the article above) to try and resolve it:
1. Examine the 13508 Event in the FRS Event Log in order to determine which
machine that FRS has been unable to communicate with.
2. Determine whether the remote machine is working properly, and verify that
FRS is running on it. A good method to do this to execute “NTFRSUTL VERSION
<FQDN of remote DC name>” from the machine logging the 13508 event. If this
fails, check network connectivity by pinging the <FQDN of remote DC name>
from the machine logging the 13508 event. If this fails, then troubleshoot as
a DNS or TCP/IP issue. If it succeeds, confirm the FRS service is started on
the remote DC.
3. Determine whether FRS has ever been able to communicate with the remote
computer by looking for 13509 in the event log and review recent change
management to networking, firewalls, DNS configuration, and Active Directory
infrastructure to see if there is a correlation.
4. Determine whether there is anything between the two machines that is
capable of blocking RPC traffic, such as a firewall or router.
5. Confirm that Active Directory replication is working".

I would also like to point out that 99% of my FRS/DFS errors were caused by
domain or DNS problems. Once I ironed those out, the FRS problem went away.

Dawn

"admir" wrote:

admir · Guest

Down,

Thank you very much for you replay. The link you have sent me was very
useful. Not for the problem I was heving with event 13508 cos I have stoped
using dfs. When I deleted all links and replicas and roots frs was still
looking for them to replicate but I found aswer to this on that link.

I have stoped using DFS cos I just can't solwe this problem. I have bean
trying for the past 7 months or longer but no succes and it seems to me that
MS people have no clue how to solwe this problem too.

Anyway thanks again.

"Dawn NM" <DawnNM@discussions.microsoft.com> wrote in message
news:2174FE6D-E394-427B-BD19-173B983F53F0@microsoft.com...

Ihave event ID 13508 and I have runed frsdiag tool. What now

	Windows Server Forum Index -> DFS and FRS	All times are GMT
Page 1 of 1