NETLOGON vs SYSVOL


Logon scripts are found under the domain controller’s NETLOGON admin share for
Windows NT, whereas they are found under the SYSVOL share for Windows 2000. This
can cause some confusion for Windows NT admins not familiar with the name
change. On Windows NT DCs, the %SystemRoot%\System32\Repl\Import\Scripts folder
is shared as NETLOGON. Dcpromo modifies the registry
value that defines the path to the NETLOGON share as part of the upgrade to
%SystemRoot%\Sysvol\Sysvol\domain_name\Scripts. The
default folder structure for W2K is :

%SystemRoot%\Sysvol\Sysvol\domain_name\Policies
%SystemRoot%\Sysvol\Sysvol\domain_name\Scripts

Any changes to the %systemroot%\SYSVOL folder on any DC are replicated
to the other DCs in the domain. Replication is RPC based.

You can use NETLOGON and SYSVOL to distinguish between DC and member server.
If both the NETLOGON and SYSVOL shares exist on a W2K server, it is a DC. When
dcpromo demotes a DC to a member server, the NETLOGON share is removed. Thus the
presence of only SYSVOL signals a member server.

A neat method to check which servers are receiving replication (example is
W2K but technique is general): create a file to be replicated which has the same
name as the name of the domain controller. Lets say the DC is named w2ksrv1, in
that case create a file

\\Winnt\Sysvol\Sysvol\yourdomain\w2ksrv1

Check which domain controllers in yourdomain receive the new
file.

Leave a Comment

Your email address will not be published.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Scroll to Top