I have a DFSR setup going across 2 AD sites, with file servers in each site and DFSR configured to replicate file shares across both sites. Replication is set to 24/7, 30MB bandwidth limit for each. Both servers are 2012R2.

I am getting 4412 events for some user documents (Word, Excel etc) in their home areas mapped to network drives, where the user is logged in on one machine only, and their files are not being touched as far as I can see on the other site's server. These events tend to come in 'batches' for a specific user or users, and it doesn't correspond to them logging on or off (when GPO maps their home and shared drives)

Can anyone help out here? I would love to understand the algorithm that DFSR is using to generate a 4412 as I really want to get to the bottom of this.

Thanks in advance

Greetings,

We have a File server (Windows Server 2012R2) with many volumes, each volume is a share. We were running out of drive letters, so we decided to mount all the volumes to a single NTFS folder. Everything works great, except any attempt to create an NFS share fails with error "Server for NFS cannot update the share configuration. Try updating the shared directory again, or delete and recreate the shared directory"
I also get an event ID 2006 from ServicesForNFS-Server. with message: "Failed to create new NFS share for path M:\VOLUMES\<volumename>. Status 0xC00000BB"

If I assign the volume a drive letter, I can share it via NFS just fine.

Any suggestions or clues as to why this happens?

Thank you in advance,

--Jorge

I found some threads on here about Windows Search not working on DeDup volumes? Most of the threads are pre-R2 timeframe so I am checking in to see if there is any updated info on if this was fixed in R2? It seems this is a critical feature if you are using a volume for redirected libraries?

Brian Hoyt

Right now DFS is installed on a windows 2003 server.  I need to move this function to a new windows 2012 server.  I do not use replication and I do not need to move the files and folders to a new server.  I just need to move DFS to another server so I can shut down the 2003 server. 

I'm not sure how to go about doing this.  I've read a ton of articles, but nothing tells me how to accomplish just the DFS move.  I've installed it to the server, but don't know what to do next.  Can you provide some specific steps that need to be done?  I also want to make sure that my permissions on the files and folders don't change.  One article I was reading made it seem like that might happen.

I am running PowerShell script with file resource manager custom option to delete files older than N number of days

The script runs and complete but it is not deleting the file

the same script from power manually it delete the files for N number of days and work

screenshot attached

Muhammad Mehdi

Hello

I have an interesting situation that I am trying to get to the bottom of

I have a DFSR namespace setup - and several folder targets configured as part of that namespace. Lets call this\\contoso\dfs\shares

I have two accounts, my standard domain user account, and an administrative account

If I Browse to the DFSR share via my admin account - I can see all shares

\\contoso\dfs\shares\
 - Data 1
 - Data 2
 - Data 3
 - Data 4

If I browse to the DFSR share via my user account - I can only see two of the 4 shares

\\contoso\dfs\shares\
 - Data 1
 - Data 4

If I browse to the share directly using my user account - it works fine

\\contoso\dfs\shares\data 3

 - Some files

I have confirmed that my user account has the following effective permissions on\\contoso\dfs\shares\

Traverse folder / execute file
list folder / read data
Read Extended attributes
Read permissions

I have confirmed that my user account has the same effective permissions on Data 1 / Data 2 / Data 3 and Data 4 subfolders

Traverse folder / execute file
list folder / read data
Read Extended attributes
Read permissions

I don't understand what is stopping my user account from seeing the missing folders from the namespace, when the permissions are the same. The folder targets are not hidden shares

The folder targets are on different servers. I have checked the folder targets on each server and the permissions are set the same

I can confirm that if I browse to \\constoso\dfs\shares and\\contoso.microsoft.com\dfs\shares via my user account that the result is the same

Any assistance in relation to this would be appreciated

Dear All,

I am having issue while configuring work folder on Windows Server 2012 R2. After installing Work Folder role when I am trying to configure Work Folder it gives me error message that "WS Management cannot process the request" and the Windows sync share service is stopped. I strived several times but the service is not starting. Kindly guide how can I resolve this issue.

The other query is that I am unable to access my profile folder that creates in work folder even administrator also not able to access the folder. Kindly also guide how to allow administrator to access all users work folders. 

Thanks

i have a file server with student info. each student has a home folder and they are given 2gb through the file server resource manager (quota management). this has been working fine up to now. for some reason now when a student reaches 95% of their quota and deletes content the file server does not register this and still sees it to be equal to 2gb. however, if i view the quota entry using the quota system on the volume it reflects the correct value. by the way quota management is turned off on the volume.

what is causing this? initially i though its ownership so i manually changed one students files and folders to make sure, but it still reports the value incorrectly.

I am looking at setting up DFS in our domain and hope to use an existing File server which hosts Homefolders as a DFS server.

I have set up 2 test File servers called Testserver1 and Testserver2. Both these servers are running Server 2012 R2. I have set up test accounts testuser1 and testuser2.

On the test servers and using the test accounts, I have set up test Homefolders on a share "\\ Testserver1\testhomefolder", so that the Homefolders are "\\ Testserver1\testhomefolder\testuser"1 and "\\ Testserver1\testhomefolder\testuser2".

On File servers Testserver1 and Testserver2 I have set up DFS and set up a Namespace "\\ domain\testhomefolder" and a Replication to replicate between the 2 servers. This Namespace seems to function fine and is tolerant to one of the servers being offline, where connecting to "\\ domain\testhomefolder" and any of its child items works as normal.

The issue happens when I change the AD accounts Homefolder field for either testuser1 or testuser2 from "\\ Testserver1\testhomefolder\testuser1" and "\\ Testserver1\testhomefolder\testuser2" to "\\ domain\testhomefolder\testuser1" and "\\ domain\testhomefolder\testuser2" respectively, and then log on as either testuser1 or testuser2.

At the point of logging on as either testuser1 or testuser2 after the Homefolder field has been changed, the old Homefolder is deleted. A log off and logon creates a new Homefolder, but it is empty and all contents of the original folder is lost.

Can anyone please advise as to what I need to do to ensure that the original Homefolders are not wiped when changing the Homefolders for each account from a Servername to a Namespace?

NB - the UNC paths don't actually have a space after the "\\". I added in a space so that IE did nothelpfully turn them into links which stopped me submitting this question.

I have a Volume on a Pool of Tiered Storage.
Recently I noticed some errors being reported on the VirtualDisk in the eventlog and I ran chkdsk two times.
I seemed to work for a short time, but now the virtualdisk does no longer come up after a reboot and manual attaching also does not work.
the Tiered Storage pool consists of a SSD and HDD and the HDD is reportig an operationalstatus of 'Split'.
Repair-VirtualDisk has not effect on the VirtualDisk.

PS C:\Windows\system32> Get-StoragePool

FriendlyName            OperationalStatus       HealthStatus            IsPrimordial            IsReadOnly
------------            -----------------       ------------            ------------            ----------
Primordial              OK                      Healthy                 True                    False
Tiered Pool             Degraded                Warning                 False                   False

PS C:\Windows\system32> Get-VirtualDisk                                                                                                                                                                        FriendlyName        ResiliencySettingNa OperationalStatus   HealthStatus        IsManualAttach                     Size
------------        ------------------- -----------------   ------------        --------------                     ----
Tiered Virtual Disk Simple              Detached            Unknown             True                            3.13 TB

PS C:\Windows\system32> Get-VirtualDisk | Get-PhysicalDisk

FriendlyName        CanPool             OperationalStatus   HealthStatus        Usage                              Size
------------        -------             -----------------   ------------        -----                              ----
PhysicalDisk0       False               OK                  Healthy             Auto-Select                      465 GB
PhysicalDisk3       False               Split               Warning             Auto-Select                     2.73 TB

The question I have is, what does an OperationalStatus of Split means and is it resolvable in any way?

Thanks in advance.

So we have recently implemented DFS between a few sites and a couple of lingering issues.

1. We have a DFS Server at Site A and a DFS Server in Site B.  Workstations in Site A are connected to Site A - we have had a few issues where there drive access would be slow and went into their mapped drives and it had Site B as active even though it should be Site A.  I am not sure yet what caused this - I think that part of it was a VSS Shadow Copy on the file server caused enough slowness that it cut over to the Site B.

- Can this threashold to cut away from the home site DFS server be controlled?  I don't want the workstations cutting mapped drives over to the remote site DFS server just because of a small latency for something like this.

2. Our users are not local administrators on their workstations - can you allow them permission to set the active site on the DFS tab?

3. Is there a powershell script that can output the backlog file count to text file so that we can monitor with splunk?  Doesn't seem like there are any good tools for DFS 2012 R2 to keep an eye on DFS

Hello,

I'm trying to figure out how to configure an AD integrated DFS Namespace on a RODC
(2008R2) so that if a wan link is down the users in a branch site can access
that namespace server for referrals after a client reboot. At the moment I
can't get this to work. I've used this configuration successfully with regular
DCs for years, so I'm sure it's something to do with the fact I'm trying to get
this to work on an RODC.

Should this work? Or is it not possible to configure an accessible DFS Namespace on an
RODC? It strikes me that despite configuring the namespace server to run on the
RODC in the branch site that clients may not even be using it regardless of the
wan connectivity.

If the link is down clients are unable to resolve the dns name for the domain and namespace
(e.g. domain.local), I think because RODCs don't register themselves in DNS
like regular DCs. What I don't seem to understand is how exactly the client
obtains the list of namespace servers. Surely if the client has access to an
RODC it should be able to obtain the list from AD, find and then connect to the
available namespace server (that's also installed on the RODC)? I looked at
this article (here) and the client referral process involves connecting
to a domain controller to obtain a list of namespace servers, but in my case
the client gives up when it can't find \\domain.local\dfs\folder target\ despite
there being a namespace server ready to reply in the local site.

Any assistance much appreciated!

Neil

Hi there.

I have configured a windows 2008 r2 server to access our MSA 2000 SAN.

I've configured 2 iSCSI NICs and have setup 4 paths to the SAN. All paths are listed as active.

It seems to work ok but when I go into device details under the MPIO settings (in the MS iscsi intiator) I get the error message

"the parameter is incorrect. the round robin with subset policy executes the round robin policy only on paths designated as active. the standby paths will be tried on a round-robin approach upon failure of all active paths."

Can anyone explain this error to me and is it anything I need to worry about?

Cheers,

Al

ps - I can supply a screenshot if that helps.

We are having issues with the Archive Bit on the ChunkStore of our Dedup Volume. We are getting RC=2 and RC=3 errors when our weekly Full backup is running.

RC=2 Failed to clear archive bit
RC=3 Failed to Open File

My primary concern is the RC=2 Failed to Clear Archive Bit

The problem occurs when the Differential tries to run during the week and because the Archive Bit hasnt been cleared during the weekends full backup the job thinks the data needs to be backed up and so the Differential runs too long. The problem is that the size of the data is so large that the Differential cannot complete within 24 hours due to traffic during the day, other jobs, etc.

I have disabled Optimization during the weekends along with background optimization, so currently optimization only runs during the week. The question is, can Optimization even be used along with a backup job without interfering with the backup jobs view of the Archive Bit?

Is it possible to view the files that are being listed in the ChunkStore to verify theya re actually there? Such as System Volume Information\Dedup\ChunkStore\{CDC2ED52-5CDD-4878-9E88-80C92BC5015A}.ddp\Data\000005b1.001d0000.ccc

We are using Arcserve for backup and it was able to handle this without any issues until a few months ago.

RC=2 Errors

  Failed to clear archive bit. file:H:\System Volume Information\Dedup\ChunkStore\{CDC2ED52-5CDD-4878-9E88-80C92BC5015A}.ddp\Data\000005b1.001d0000.ccc RC=2.
Failed to clear archive bit. file:H:\System Volume Information\Dedup\ChunkStore\{CDC2ED52-5CDD-4878-9E88-80C92BC5015A}.ddp\Data\000005b4.00000001.delete.log RC=2.

Failed to clear archive bit. file:H:\System Volume Information\Dedup\ChunkStore\{CDC2ED52-5CDD-4878-9E88-80C92BC5015A}.ddp\Stream\00540000.00210003.ccc RC=2.

RC=3 Errors

 Failed to open file:H:\System Volume Information\Dedup\ChunkStore\{CDC2ED52-5CDD-4878-9E88-80C92BC5015A}.ddp\Data\00000a2b.00000001.ccc RC=3.
Failed to open file:H:\System Volume Information\Dedup\ChunkStore\{CDC2ED52-5CDD-4878-9E88-80C92BC5015A}.ddp\Data\00000a2c.00000000.01.cd RC=3.
 Failed to open file:H:\System Volume Information\Dedup\ChunkStore\{CDC2ED52-5CDD-4878-9E88-80C92BC5015A}.ddp\Data\00000a2c.00000000.02.cd RC=3.

Lossless Audio Addict

We recently moved a large group of files from a Windows 2003 server to a Windows 2008 server.  These files are accessed by many users constantly throughout the day, so they are almost always considered open.  When those files were residing on the Windows 2003 server, any user or server could access those files even though they were open and make changes to them.

Since we moved the files from the 2003 server to the 2008 server the only users/servers that can still access and change those files while they are open are:

Windows 7 users
Windows Server 2008 server
Windows Server 2012 server

The servers that cannot access/change those files are:

Windows 2000 server
Windows 2003 server

Every time one of those servers try to access the file (or even just change the name of an open file for testing purposes) we get the following error:

Cannot rename <file name>:  There has been a sharing violation.  The Source or destination file may be in use.

We have tried the following to resolve it:

Verified all the permissions/shares are identical for the files on the Server 2003 and the Server 2008.

Changed the NTLM acceptance level on the Windows 2008 server by:  Go to: Local Policies > Security OptionsFind "Network Security: LAN Manager authentication level" Change Setting from "Send NTLMv2 response only" to "Send LM & NTLM - use NTLMv2 session security if negotiated"

Verified the times are identical on all servers.

Removed one Windows 2003 server from the domain and re-joined it again after the NTLM change.

The problem still exists.  Can anyone recommend a solution?

I have Data Duplication enabled, and this is the 2nd time this issue has risen, what will happen is randomly (however it seems to be after a veeam backup) one disk seems to de-optimize itself, I cant see any proof of this in the event logs (attached at bottom) but what will happen is 600GB of free space will just disappear overnight.

TreeSize Comparison

Fileserver 01 (Affected)

FileServer 02 (No Issues)Note how much de-duplication is occurring on dfs-Software, why is Fileserver 01 blowing out? what causes this?

To remedy this issue:

1. I need to expand the disk by a few GB
2. restart the server
3. disable de-duplication on the target drive,
4. restart the server
5. re-enable de-duplication
6. run a manual Optimization (start-dedupjob -volume D: -type Optimization
7. dfs-software folder will eventually go back down to around 8GB of size and also the Chunk store will clear out around 200-300GB.

Due to the large ammount of file changes on disk, after this occurs I need to delete the backups for the fileserver and take a new full backup, as otherwise the next incremental is in excess of 600GB!

After a few minutes it starts the lengthy job of optimizing all the data on the disk and my 600GB of disk space is slowly reclaimed over the course of 8-10 hours.

Any ideas where to start looking at root-cause for this? ive been unable to see any triggering events in event log.

Event Logs:Download Eventlogs.zip

I have recently upgraded a clients servers to Windows Server 2012 & since doing so have lost the ability to scan to folder.

Both servers are domain controllers and previously on a 2008 domain controller I would have had to make the following change to allow scan to folder:
 Administrative Tools
 Server Manager
 Features
 Group Policy Manager
 Forest: ...
 Default Domain Policy
Computer configuration
 Policies
 Windows Settings
 Security Settings
 Local Policies
 Security Options
 Microsoft Network Server: Digitally Sign Communications (Always)
 - Define This Policy
 - Disabled

However I have applied this to the Windows 2012 server but am still unable to scan, possibly due to added layers of security in server 2012. The error on the scanner is Authentication with the destination has failed check settings.
I have also tried the following at the server:
Policies -> Security Policies
Change Network Security: LAN Manager authentication level to: Send LM & NTLM - Use NTLMv2 session security if negotiated.
Network security: Minimum session security for NTLM SSP based (including secure RPC) clients and uncheck the require 128 bit.
Network security: Minimum session security for NTLM SSP based (including secure RPC) servers and uncheck the require 128 bit
I have created a user account on the server for the ricoh and set this in the settiings of the Ricoh and verified everything is correct.

Are there any other things I have missed?

I am setting up file server auditing on a Server 2012r2 system for the first time and I had a question about reducing/eliminating the events produced from Windows folders that automatically have auditing defined on them.

Current Setup

I enabled file server auditing by setting Audit File System to Success under Computer Configuration | Policies | Windows Settings | Security Settings | Advanced Audit Configuration | Object Access. 

Behavior

After enabling file system auditing, I noticed that the Security log started to log these 3 events periodically:

Event ID: 4656
Security ID: SYSTEM
Description: A handle to an object was requestedProcess Name: C:\Windows\CCM\CcmExec.exeObject Name: C:\Windows\servicing
Frequency: 3 events every 10 minutes

Event ID: 4656Security ID: SYSTEMDescription: A handle to an object was requestedProcess Name: C:\Windows\System32\rundll32.exeObject Name: C:\Windows\WinSxS\FileMaps\<several subfolders>
Frequency: This event and the event below produces about 650 events within about 1 second about every day.  

Event ID: 4663Security ID: SYSTEMDescription: An attempt was made to access an object
Process Name: C:\Windows\System32\rundll32.exe
Object Name: C:\Windows\WinSxS\FileMaps\<several subfolders>Frequency: This event and the event above produces about 650 events within about 1 second about every day.  

Upon checking theC:\Windows\servicing and C:\Windows\WinSxS\FileMaps folders, I see that they have Auditing enabled by default. 

Questions

1. Has anyone attempted to remove auditing from the Windows foldersC:\Windows\servicing or C:\Windows\WinSxS\FileMaps?
   
2. Is there a cleaner way to not log these default audit defined folders (the auditing I will be doing will be on a separate data volume on the server and not on the C drive)?  Or is the general approach to allow the events to be logged and then use the filter option (or a log management tool) to ignore these entries?

Thanks!