How to recover a deleted file from SYSVOL folder?

Microsoft Windows 2003 Server domain controllers use the File Replication service (FRS) to automatically replicate data between domain controllers. In Windows 2003 Server, the contents of the Sysvol folder are replicated to all the domain controllers in your organization. The Sysvol folder stores logon scripts, default domain profiles, and system policies. If a change is made to a logon script, a default domain profile, or a system policy, the change is replicated to all the domain controllers. This practice keeps the Sysvol folder content the same in all the domain controllers.

Note You have to stop the NT File Replication Service (NTFRS) service, and then set the startup type for NTFRS to Manual on the domain controller where you want to perform the non-authoritative restore. This prevents the service from starting unintentionally while this operation is performed.

To force a non-authoritative restore of the data in the Sysvol folder on a domain controller, follow these steps.

Start a command prompt. To do this, click Start, click Run, type cmd, and then click OK.

1. At the command prompt, type net stop ntfrs, and then press ENTER.
2. Click Start, click Run, type services.msc, and then click OK.
3. In the Services snap-in, double-click File Replication, click Manual under Startup Type, click Apply, and then click OK.
4. Click Start, click Run, type regedit, and then click OK.
5. Locate and then click the BurFlags value under the following registry key:
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup
6. IF the key that is mentioned in step 6 does not exist, create it. To do this, click Edit, click New, click DWORD Value, type BurFlags, and then click OK.
7. In the right pane, right-click BurFlags, click Modify, In the Edit DWORD Value dialog box, type D2 to complete a nonauthoritative restore or type D4 to complete an authoritative restore, and then click OK.
8. Locate and then expand the following registry key:
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NtFrs\Parameters\Sysvol Seeding\Domain System Volume (Sysvol share)
   Note: If this registry entry does not exist, you must create it.
   
9. On the Edit menu, click New, click String Value, type Replica Set Parent, and then click OK.
10. In the right pane, right-click Replica Set Parent, click Modify, type the name of a domain controller that has the Sysvol data that you want to replicate in the Value data box, and then click OK.
11. Quit Registry Editor.
12. At a command prompt, type net start ntfrs, and then press ENTER.
13. Click Start, click Run, type services.msc, and then click OK.
14. In the Services snap-in, double-click File Replication, click Automatic under Startup Type, click Apply, and then click OK.