diff --git a/ad-server-replication/tasks/main.yml b/ad-server-replication/tasks/main.yml
index cdb352ce54f6183c6ef2cfe19331684d8e3be929..fafb2eae7461e4d9cc029abcd9785f52eb14747b 100644
--- a/ad-server-replication/tasks/main.yml
+++ b/ad-server-replication/tasks/main.yml
@@ -105,5 +105,10 @@
     - ad-server
     - service
 
+- name: ensure we have a replication cronjob for sysvol
+  template: src=templates/replication-cron dest=/etc/cron.d/samba-replication-cron
+  delegate_to: "{{ ad_primary }}"
+  tags:
+    - ad-server
 
 - meta: flush_handlers
diff --git a/ad-server-replication/templates/replication-cron b/ad-server-replication/templates/replication-cron
new file mode 100644
index 0000000000000000000000000000000000000000..a43439438c725e7644411c856de6f4dca68d9ca2
--- /dev/null
+++ b/ad-server-replication/templates/replication-cron
@@ -0,0 +1 @@
+*/5 * * * *  root rsync -XAazq --delete-after -e "ssh -q -i /root/.ssh/id_replication" /var/lib/samba/sysvol/ root@{{ ansible_fqdn }}:/var/lib/samba/sysvol/