这是回答付费学员的提问视频分享。
如果你的单域多站点的AD域环境中有多个DC,当某个站点中的客户端电脑无法正常应用组策略时,那么请检查该站点DC的Sysvol中的组策略是否从其他DC中成功同步过来。如果没有,请按视频方式处理。
由于本人嗓子最近很不舒服,请先参考视频处理。
如需系统性学习AD域环境部署及日常维护管理,请跳转至完整视频课程:https://www.bilibili.com/cheese/play/ss28157
步骤总结如下:
1.Choose the DC which is working well (source DC) and stop the DFS Replication Service of it.
2.Change settings in ADSIEdit on the source DC
•msDFSR-Enabled=FALSE
•msDFSR Options=1
3.Change settings on affected DCs in ADSIEdit
•msDFSR-Enabled=FALSE
4.Run repadmin command in PowerShell on the source DC
•repadmin /syncall SHA-DC1 /APed
5.Start the DFS Replication Service on the source DC.
6.Change settings back in ADSIEdit on the source DC
•msDFSR-Enabled=TRUE
7.Run repadmin command again in PowerShell on the source DC
•repadmin /syncall SHA-DC1 /APed
8.Change settings back on affected DCs in ADSIEdit
•msDFSR-Enabled=TRUE
9.Stop and start DFS Replication Service on all DCs
•Invoke-Command -ComputerName SHA-DC1, SHA-DC2, SHE-DC1, NEW-DC1 -ScriptBlock {stop-service DFSR}
•Invoke-Command -ComputerName SHA-DC1, SHA-DC2, SHE-DC1, NEW-DC1 -ScriptBlock {start-service DFSR}