Prepping for new DC - DCdiag errors - Sysvol FRS Member object (after DFSRmig)

Hello SysAdmins.


So I am preparing to add brand new DCs to our domain, decommission old ones and raise functionality level from 2008R2 to 2016. First step was migrating from FRS to DFSR, checked everything before migration, replication etc was fine. Migration was smooth and fast, checked GPO replication and it instantly replicates to every DC (5 currently across 3 sites). No errors. Another step was fixing sites setup (was full mesh, fixed to hub and spoke with failover full mesh), fixed that. Now I've run DCDIAG /v /q /e and fun started.



NCSecDesc which is known if You haven't run adprep /rodcprep so it can be ignored.

Two DCs are giving errors :



Problem: Missing Expected Value
Base Object:
CN=DC2 and DC3,OU=Test,OU=Domain Controllers,DC=contoso,DC=internal
Base Object Description: "DC Account Object"
Value Object...