Mastering Active Directory

Verifying the connection ;

Check whether the problematic SYSVOL holder can reach other domain controllers. A simple ping can verify the connectivity between nodes. Also try to access the replication partner shares using \\domaincontroller (network path). Verify that replication partners are also in a healthy state. DFS replication requires specific TCP and UDP ports. Make sure the following TCP and UDP ports are allowed via hardware/software firewalls:

Service name	TCP	UDP
NetBIOS Name Service	137	137
NetBIOS Datagram Service	-	138
NetBIOS Session Service	139	-
RPC	135	-
SMB	445	445
LDAP	389	389

In some organizations, engineers use antivirus and malware protection on DCs with settings ...