Skip to contentGo to the directory tree
Windows Directory Tree
  1. C:
  2. Windows
  3. SYSVOL
  4. sysvol
FolderRisk: Do not touch
  • Windows Server

sysvol C:\Windows\SYSVOL\sysvol

sysvol: the root of the SYSVOL share; it only holds a junction named after the DNS domain that points to C:\Windows\SYSVOL\domain.

Updated on By AltF4 Formation

What it’s for

The SYSVOL network share is published on this folder. The UNC path \\contoso.com\SYSVOL\contoso.com\Policies works because the subfolder named after the domain is a junction to C:\Windows\SYSVOL\domain, where the data really lives. That detour is why the domain name appears twice in the path.

What it contains

A single junction (reparse point) carrying the DNS name of the domain, for example contoso.com. It points to C:\Windows\SYSVOL\domain. dir /AL lists it as <JUNCTION>. Nothing else is in the folder; the content worth backing up is in domain.

Risks and best practices

  • Deleting or renaming the junction makes \\<domain>\SYSVOL\<domain> unreachable: clients lose GPOs and scripts even though domain is intact.
  • A backup or cleanup tool that follows junctions can walk the same files twice; exclude the sysvol folder or back up with System State.
  • To rebuild a controller’s tree, follow the Microsoft procedure rather than recreating the junction by hand.

Useful commands

Fenêtre de terminal
:: Show the junction and its target
dir C:\Windows\SYSVOL\sysvol /AL


:: Reparse point details (exact target)
fsutil reparsepoint query C:\Windows\SYSVOL\sysvol\contoso.com
Fenêtre de terminal
# Folder published by the SYSVOL share
Get-SmbShare -Name SYSVOL | Select-Object Name, Path

Report a mistake