This object monitors the NTFS change journal and creates a Warning alert if the journal wraps (overwrites old journal entries) twice in the past 24 hours on a volume hosting a replicated folder.
An unhealthy state of this monitor indicates that the NTFS change journal wrapped twice in the past 24 hours on a volume hosting a replicated folder. A journal wrap occurs when the change journal cannot store all entries and must overwrite old journal entries. This can occur for the following reasons:
The change journal was truncated, possibly by Chkdsk finding corrupt entries at the end of the journal.
The volume was not cleanly dismounted or the computer experienced an unexpected shut down.
The DFS Replication service was stopped for a long period.
The files in the replicated folder changed at an excessive rate.
Wait for NTFS change journal recovery to complete
No action is required.
DFS Replication automatically initiates a journal recovery process.
Important Ensure that the DFS Replication service is not stopped for extended periods on replication group members.
Increase the size of the NTFS change journal
If the rate of change to replicated files is very high on the affected volume, increase the size of the change journal. Increasing the USN journal size, and thus the number of changes that it can hold before the journal "wraps," decreases the possibility that USN journal wraps will occur.
To increase the USN change journal size, contact Microsoft Customer Service and Support (http://support.microsoft.com).
This monitor automatically resets to a healthy state after recovering from the NTFS change journal recovery.