For a recent customer I was going through all of the requirements to implement DirectAccess. One that I stumbled on a bit was that DirectAccess requires DFS-R replication but I wasn’t certain how to verify what replication type was in use. After some digging, some assumptions, and some great tips from fellow Catapult Systems consultants, here’s the scoop.
Determine if FRS is being utilized by the Domain Controllers
Note: FRS is the abbreviated acronym for NTFRS.
From an administrator Command Prompt on a domain controller run DfsrMig /GetMigrationState and DfsrMig /GetGlobalState
- A value of 0, 1, or 2 means the migration from FRS to DFS-R is in progress
- A value of 3 means the migration from FRS to DFS-R is complete (FRS is ELIMINATED)
- A return message of “DFSR migration has not yet initialized” means FRS is in use, not DFS-R
From ADSI Edit or Active Directory Users and Computers with Advanced Features enabled,
navigate to <domain>\System
- if a container named DFSR-GlobalSettings exists, then DFS-R should be in use
- if a container named File Replication Service \ Domain System Volume (SYSVOL share) exists and contains Domain Controller objects, then FRS should be in use
navigate to <domain>\Domain Controllers\<Domain controller>\
- if a container named NTFRS Subscriptions exists, then FRS should be in use
From a domain controllercontinue reading on CatapultSystems.com