If you ever have problem with Sysvol replication, check that the default ACLs have not been modified. Here is a reference of the default values.
%SystemRoot%\Windows\Sysvol
- Clear the Allow inheritable permissions from parent to propagate to this object check box
- Administrators: Full Control
- Authenticated Users: Read, Read & Execute, and List Folder Contents
- Creator Owner: Nothing selected
- Server Operators: Read, Read & Execute, and List Folder Contents
- System: Full Control
%SystemRoot%\Windows\Sysvol\Sysvol
- Clear the Allow inheritable permissions from parent to propagate to this object check box
%SystemRoot%\Winnt\Sysvol\Sysvol\domain
- Clear the Allow inheritable permissions from parent to propagate to this object check box
%SystemRoot%\Winnt\Sysvol\Sysvol\domain\Policies
- Clear the Allow inheritable permissions from parent to propagate to this object check box
- Administrators: Full Control
- Authenticated Users: Read, Read & Execute, and List Folder Contents
- Creator Owner: Nothing selected
- Group Policy Creator Owners: Read, Read & Execute, List Folder Contents, Modify, and Write
- Server Operators: Read, Read & Execute, and List Folder Contents
- System: Full Control
For each file or folder that is located in the %SystemRoot%\Winnt\Sysvol\Sysvol\domain\Policies
- Check the Allow inheritable permissions from parent to propagate to this object check box
Sysvol share permissions :
- Administrators: Full Control
- Authenticated Users: Full Control
- Everyone: Read