4012
DFS Replication stopped replicating a folder (offline too long)
- Log: DFS Replication
- Source: DFSR
- Replication
- Critical
What it means
A server has been disconnected from its DFSR partners for longer than MaxOfflineTimeInDays (60 by default), so it stopped replicating that folder, often SYSVOL.
Why it matters
Group Policy changes on this DC aren’t reaching others, or vice versa.
What to do
- Follow Microsoft’s procedure to re-initialize SYSVOL or the replicated folder.
- Don’t just raise MaxOfflineTimeInDays without understanding why.
Find it with PowerShell
Get-WinEvent -MaxEvents 20 -FilterHashtable @{
LogName = 'DFS Replication'; Id = 4012
} | Select-Object TimeCreated, ProviderName, MessageAdd -ComputerName SERVER to query another machine. Other event sources can reuse the same ID number, so check the ProviderName column.
Seeing a lot of these? We can investigate, or alert you automatically through our monitoring.
Talk to us