Unable to add files in \\domain\SYSVOL\domain\scripts

TL_Arwen

1/29/23, 10:24 PM

So I've always been able to put scripts in the sysvol\scripts folder and have them run via GPO's, but since migrating to a new DC, I have not been able to run startup scripts and it appears that I can't even create new files in the location. I checked the effective permissions, and I do have the proper permissions, but I still get permission denied. I currently have two DC's running. running dcdiag, everything except one thing comes back okay:

Starting test: DFSREvent

         The DFS Replication Event Log. 
         There are warning or error events within the last 24 hours after the

         SYSVOL has been shared.  Failing SYSVOL replication problems may cause

         Group Policy problems. 
         A warning event occurred.  EventID: 0x80001396

            Time Generated: 09/28/2021   22:18:27

            Event String:

            The DFS Replication service is stopping communication with partner EMC-MR-DC01 for replication group Domain System Volume due to an error. The service will retry the connection periodically. 

             

            Additional Information: 

            Error: 9036 (Paused for backup or restore) 

            Connection ID: 50677AA6-007F-4FAA-9743-29FC77BCC3FB 

            Replication Group ID: 1C21F2BE-89E6-4BB7-BC09-9C58B3A1C892

         A warning event occurred.  EventID: 0x80001396

            Time Generated: 09/29/2021   06:23:30

            Event String:

            The DFS Replication service is stopping communication with partner EMC-MR-DC01 for replication group Domain System Volume due to an error. The service will retry the connection periodically. 

             

            Additional Information: 

            Error: 9036 (Paused for backup or restore) 

            Connection ID: 50677AA6-007F-4FAA-9743-29FC77BCC3FB 

            Replication Group ID: 1C21F2BE-89E6-4BB7-BC09-9C58B3A1C892

         A warning event occurred.  EventID: 0x80001396

            Time Generated: 09/29/2021   14:25:29

            Event String:

            The DFS Replication service is stopping communication with partner EMC-MR-DC01 for replication group Domain System Volume due to an error. The service will retry the connection periodically. 

             

            Additional Information: 

            Error: 9036 (Paused for backup or restore) 

            Connection ID: 50677AA6-007F-4FAA-9743-29FC77BCC3FB 

            Replication Group ID: 1C21F2BE-89E6-4BB7-BC09-9C58B3A1C892

         ......................... MOLIDC5 passed test DFSREvent```

216

0 + 0

active-directory

joeqwerty

1/30/23, 12:53 AM

That event is a normal and expected event during backups of Domain Controllers. It isn't the cause of your issue.

TL_Arwen

2/1/23, 2:04 PM

Alright, so what about the issue where my scripts won't run? Other GPO's seem to work fine. Just can't deploy my scripts.

Score:0

Server

LeeM

2/13/23, 6:24 AM

Is it the same on both DCs? If you're trying to add them via the UNC path, try specifying \DC1\sysvol rather than \domain\sysvol. If there are discrepancies between each DC in terms of your being able to create files, there's a problem.

Secondly, there are actually different share permissions on SYSVOL vs NETLOGON. Have you tried uploading your scripts via the latter?

Next, are you a domain admin or Server Operator? Have you checked the NTFS perms for SYSVOL on both DCs? They should appear per the below on both servers. What about adding the files locally?

> icacls c:\Windows\SYSVOL

NT AUTHORITY\Authenticated Users:(RX)
NT AUTHORITY\Authenticated Users:(OI)(CI)(IO)(GR,GE)
BUILTIN\Server Operators:(RX)
BUILTIN\Server Operators:(OI)(CI)(IO)(GR,GE)
BUILTIN\Administrators:(M,WDAC,WO)
BUILTIN\Administrators:(OI)(CI)(IO)(F)
NT AUTHORITY\SYSTEM:(F)
NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
BUILTIN\Administrators:(M,WDAC,WO)
CREATOR OWNER:(OI)(CI)(IO)(F)

0 + 0

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: Unable to add files in \\domain\SYSVOL\domain\scripts

TH: ไม่สามารถเพิ่มไฟล์ใน \domain\SYSVOL\domain\scripts

RO: Nu se pot adăuga fișiere în \domain\SYSVOL\domain\scripts

RU: Невозможно добавить файлы в \domain\SYSVOL\domain\scripts

VI: Không thể thêm tệp trong \domain\SYSVOL\domain\scripts

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.