First let me say that I am a developer who was recently given the job of IT Manager (so-to-speak) and I do have some IT knowledge, but my server knowledge is very weak.
So my first issue is that we have some old archived files that need to be restored. The process is to go to the backup software, mount a backup, and then copy the files to the network. I've done this many times and it's never been a problem. Today, it's a problem. I am unable to delete the folder or files. Anyone in our firm could but cant, but I am a domain admin and I can't either.
I get a message that I need permission. When I look at the permissions, the Administrator has a red X. on the file or folder. There isn't a domain or servername with the username, so is this local? Does it mean that it is disabled?
The DC has not had windows updates installed since 2013 for whatever reason.
I ran a DCDiag on the domain controller and I have a lot of these entries:
---------------------------
An Error Event occured. EventID: 0x00009017
Time Generated: 01/17/2020 15:34:27
Event String: The following fatal alert was received: 46.
In the event viewer, I have about 5 of these entries EVERY DAY going back to June:
This is the replication status for the following directory partition on this directory server.
Directory partition:
DC=ForestDnsZones,DC=Alpha1,DC=KMBDG,DC=com
This directory server has not recently received replication information from a number of directory servers. The count of directory servers is shown, divided into the following intervals.
More than 24 hours:
1
More than a week:
1
More than one month:
1
More than two months:
1
More than a tombstone lifetime:
1
Tombstone lifetime (days):
60
Directory servers that do not replicate in a timely manner may encounter errors. They may miss password changes and be unable to authenticate. A DC that has not replicated in a tombstone lifetime may have missed the deletion of some objects, and may be automatically blocked from future replication until it is reconciled.
To identify the directory servers by name, use the dcdiag.exe tool.
You can also use the support tool repadmin.exe to display the replication latencies of the directory servers. The command is "repadmin /showvector /latency <partition-dn>".
-------------------------------------------------
Anyway, any help would be appreciated.
----------------------------------