← Event ID reference
4012

DFS Replication stopped replicating a folder (offline too long)

  • Log: DFS Replication
  • Source: DFSR
  • Replication
  • Critical

What it means

A server has been disconnected from its DFSR partners for longer than MaxOfflineTimeInDays (60 by default), so it stopped replicating that folder, often SYSVOL.

Why it matters

Group Policy changes on this DC aren’t reaching others, or vice versa.

What to do

  • Follow Microsoft’s procedure to re-initialize SYSVOL or the replicated folder.
  • Don’t just raise MaxOfflineTimeInDays without understanding why.

Find it with PowerShell

Get-WinEvent -MaxEvents 20 -FilterHashtable @{
  LogName = 'DFS Replication'; Id = 4012
} | Select-Object TimeCreated, ProviderName, Message

Add -ComputerName SERVER to query another machine. Other event sources can reuse the same ID number, so check the ProviderName column.

Seeing a lot of these? We can investigate, or alert you automatically through our monitoring.

Talk to us