Why does FRS think it has been moved?
Log Name: File Replication Service
Source: NtFrs
Date: 29/06/2017 17:00:29
Event ID: 13559
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: %computername%.domain.local
Description:
The File Replication Service has detected that the replica root path has changed from "f:\windows\sysvol\domain" to "f:\windows\sysvol\domain". If this is an intentional move then a file with the name NTFRS_CMD_FILE_MOVE_ROOT needs to be created under the new root path.
This was detected for the following replica set:
"DOMAIN SYSTEM VOLUME (SYSVOL SHARE)"
Changing the replica root path is a two step process which is triggered by the creation of the NTFRS_CMD_FILE_MOVE_ROOT file.
[1] At the first poll which will occur in 5 minutes this computer will be deleted from the replica set.
[2] At the poll following the deletion this computer will be re-added to the replica set with the new root path. This re-addition will trigger a full tree sync for the replica set. At the end of the sync all the files will be at the new location. The files may or may not be deleted from the old location depending on whether they are needed or not.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="NtFrs" />
<EventID Qualifiers="49152">13559</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-06-29T16:00:29.000000000Z" />
<EventRecordID>44</EventRecordID>
<Channel>File Replication Service</Channel>
<Computer>%computername%.domain.local</Computer>
<Security />
</System>
<EventData>
<Data>DOMAIN SYSTEM VOLUME (SYSVOL SHARE)</Data>
<Data>f:\windows\sysvol\domain</Data>
<Data>f:\windows\sysvol\domain</Data>
<Data>5</Data>
</EventData>
</Event>
