my reply was a little hurried - so what I meant was that in 2k/2k3 the NTFS permission/ACL changes will actually trigger a full replication of all files and folders that have been affected by the change of permissions (i.e. when the changes are applied at the top level, all files will be replicated). This is due to a limitation in the current version of FRS which always replicates the whole file for any change that happens to the files (and an ACL change is just seen as any other change). In Longhorn, once Domain Functional Level is reached (i.e. all DCs in a domain run Longhorn Server and the switch to DFL 3 has been made), the DCs will switch to leveraging the new DFSR replication mechanism (which is basically what was made available with Win2003 R2). This is a very efficient for replicating files as it only replicates the actual changes - incl. ACEs. and yes the SYSVOL replication follows your site-link schedules - however, since Win2k3 SP1 (and Win2k SP4) you can also (finally) trigger it manually via the NTFRSUTL tool. Also I've seen ocations where SYSVOL actually replicated outside the site-link schedule window - can't tell you right now under which circumstances this is the case. /Guido
________________________________ From: [EMAIL PROTECTED] on behalf of Almeida Pinto, Jorge de Sent: Thu 10/19/2006 8:24 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] sysvol replication >>>won't change until you deploy Longhorn and switch to LH DFL Guido, can you explain what you mean with this? (I know SYSVOL will be replicated with DFSR as soon as DFL=W2K7 is reached) thanks jorge Met vriendelijke groeten / Kind regards, Ing. Jorge de Almeida Pinto Senior Infrastructure Consultant MVP Windows Server - Directory Services LogicaCMG Nederland B.V. (BU RTINC Eindhoven) ( Tel : +31-(0)40-29.57.777 ( Mobile : +31-(0)6-26.26.62.80 * E-mail : <see sender address> ________________________________ From: [EMAIL PROTECTED] on behalf of Grillenmeier, Guido Sent: Thu 2006-10-19 19:25 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] sysvol replication Yes, not only for Win2k, but also for Win2k3 (won't change until you deploy Longhorn and switch to LH DFL) /Guido ------------------------------------------- sent wirelessly using iPAQ 6900 -----Original Message----- From: "Graham Turner" <[EMAIL PROTECTED]> To: "activedir@mail.activedir.org" <activedir@mail.activedir.org> Sent: 10/19/06 5:29 PM Subject: [ActiveDir] sysvol replication Just a quick query on sysvol replication we have put in place strategy for delegation of directory shared as netlogon by way of adding an ACE to the NTFS permissions is it correct that on DC's running Windows 2000 SP4 that a change in the NTFS permissions will generate the change notifications such that the NTFS permission change is replicated to all DC's ?? in terms of schedule for sysvol does it use the schedule as determined by site link configuration ?? Thanks List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ml/threads.aspx List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ml/threads.aspx List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
