Quantcast
Channel: File Services and Storage forum
Viewing all 13580 articles
Browse latest View live

File auditing Logs

$
0
0
does any one  know why it the attached snap shot don't give the exact details, that who have accessed the file, who edited and when file has accessed. As i did standard configuration, as per Microsoft instruction. looking to your advice, support and comments. thanks

windows 10 nas-server

$
0
0

jeg kan ikke komme ind til mit nas drev

jeg kan hente og bringe billeder

men forsiden ser forkert ud 

aligevel siger den når jeg logger på som administrator ingen forbindelse

dvs.kan godt på vifi men ikke på internet browseren

det gamle windows kunne godt men ikke windows 10

med venligs hilsen Robert

Special Permissions on Subfolders and Files

$
0
0

So, we're a bit stumped on something.  We have a fileserver on 2012R2 and a 2008 AD.  We have users who map to a home network drive.  We set the users up the same way every time.  Sharing is Everyone - Full Control, but then it's locked down by security.  We make the folder, then use the server manager to share it.  (That is if it's a new user, if it's a re-used folder we just change the permission.)

Users have modify rights to their home folder and any sub folders and files.  System, domain admins and local admin group have full control.  Usually the owner is the local admin group.

We've got one user who is having an issue creating new folders or saving to those folders.  Says access denied.  We blew out the folder, recreated it, then shared it.  It still marks any folder any user creates as having Special Permissions and then doesn't allow them to save things to it.  We gave the user Ownership and it still won't allow anything.  We almost have to break the inheritance to get it to work.

What's different on this user?  Are we missing something in their user attributes maybe?


Ben Rollman

Many events for ID 14554 appearing in System event log

$
0
0

I have two 2008 R2 domain controllers and one new 2012 R2 server I just promoted to DC a few days ago. One of the 2K8R2 servers holds all the FSMO roles.   The new 2K12R2 DC is also an additional namespace server for domain-based namespace.  The DFS seems to be working fine, but about every 20 minutes the following 14554 event for 'DfsSvr' is logged:

The DFS Namespaces service has successfully initialized the shared folder that hosts the namespace root. Shared folder: ourDFSnamespace

This event does not appear on either of the two 2K8R2 DCs.

DFS Replication

$
0
0

Both Servers are 2008 R2.  Server A is a file server, Server B is a File Server + DC. I have verified that AD replication is flowing with our errors between the two sites.

I have been having some issue with Files not being copied over form Server A to Server B.  Server B changes seem to make it over to Server A.

Looking at the backlog status I see this:

PS C:\> .\Get-DFSRBacklog.ps1 | sort-object BacklogStatus | format-table -groupby BacklogStatus


   BacklogStatus: Error

ReplicationGroupName    ReplicatedFolderName    SendingMember           ReceivingMember                    BacklogCount           FolderEnabled       ConnectionEnabled                 Inbound BacklogStatus         
--------------------    --------------------    -------------           ---------------                    ------------           -------------       -----------------                 ------- -------------         
DFS SDEV                    LOCALHOST               ServerA$                              698986                    True                    True                   False Error                  
DFS SDEV                    ServerA              LOCALHOST$                               719257                    True                    True                    True Error                  

I see here that in the Inbound section it has False\True (This implies that maybe we are not making a two way replication link)

In the DFS Event log I find this on Server B

The DFS Replication service successfully established an inbound connection with partner Server A for replication group SDEV.
 
Additional Information:
Connection Address Used: Server A
Connection ID: 6975046B-2242-4AD4-AA8B-B1DBC50F26BA
Replication Group ID: 269396D9-52A4-4F4E-8311-69C616851638

But I do not see a corresponding event log on Server A

Is there supposed to be a corresponding message on A?  I have started and stopped the services and rebooted the servers.

Another odd thing I see is that Server B does this

The DFS Replication service successfully set up an RPC listener for incoming replication requests.
 
Additional Information:
Port: 5722

and Server A does this

The DFS Replication service successfully set up an RPC listener for incoming replication requests.
 
Additional Information:
Port: 0

I tried to set Server A to a static Address but that seemed to cause some issues.

This is from Server A

PS C:\Windows\system32> Dfsrdiag DumpMachineCFG

Machine Configuration Parameters:
   ConflictHighWatermarkPercent   : 90
   ConflictLowWatermarkPercent    : 60
   DebugLogFilePath               : C:\Windows\debug
   DebugLogSeverity               : 4
   Description                    :
   DsPollingIntervalInMin         : 60
   EnableDebugLog                 : TRUE
   EnableLightDsPolling           : TRUE
   LastChangeNumber               : 4
   LastChangeSource               :
   LastChangeTime                 : 20150917153121.000000-000
   MaxDebugLogFiles               : 1000
   MaxDebugLogMessages            : 200000
   MaxOfflineTimeInDays           : 0
   ReghostingRateInMin            : 60
   RootHighWatermarkPercent       : 100
   RootLowWatermarkPercent        : 80
   RpcPortAssignment              : 0
   StagingHighWatermarkPercent    : 90
   StagingLowWatermarkPercent     : 60

Operation Succeeded

PS C:\Windows\system32> tasklist | findstr dfsrs.exe
dfsrs.exe                     4284 Services                   0    133,036 K
PS C:\Windows\system32> tasklist /svc | findstr dfsrs
dfsrs.exe                     4284 DFSR
PS C:\Windows\system32> tasklist /svc | findstr dfsrs.exe
dfsrs.exe                     4284 DFSR
PS C:\Windows\system32> netstat -ano | findstr 4284
  TCP    0.0.0.0:61234          0.0.0.0:0              LISTENING       4284
  TCP    ServerA:61229     ServerC:389       ESTABLISHED     4284
  TCP    ServerA:61231     ServerC:51240     ESTABLISHED     4284
  TCP    ServerA:61232     ServerC:389       ESTABLISHED     4284
  TCP    ServerA:61234     ServerB:57033       ESTABLISHED     4284
  TCP    ServerA:61234     ServerB:58733       ESTABLISHED     4284
  TCP    ServerA:61240     ServerB:5722        ESTABLISHED     4284
  TCP    [::]:61234             [::]:0                 LISTENING       4284
  UDP    127.0.0.1:53032        *:*                                    4284
PS C:\Windows\system32>

This from Server B

PS C:\Windows\system32> Dfsrdiag DumpMachineCFG

Machine Configuration Parameters:
   ConflictHighWatermarkPercent   : 90
   ConflictLowWatermarkPercent    : 60
   DebugLogFilePath               : s:\dfsrlogs
   DebugLogSeverity               : 5
   Description                    :
   DsPollingIntervalInMin         : 60
   EnableDebugLog                 : TRUE
   EnableLightDsPolling           : TRUE
   LastChangeNumber               : 9
   LastChangeSource               :
   LastChangeTime                 : 20150918201253.000000-000
   MaxDebugLogFiles               : 200
   MaxDebugLogMessages            : 500000
   MaxOfflineTimeInDays           : 0
   ReghostingRateInMin            : 60
   RootHighWatermarkPercent       : 100
   RootLowWatermarkPercent        : 80
   RpcPortAssignment              : 5722
   StagingHighWatermarkPercent    : 90
   StagingLowWatermarkPercent     : 60

Operation Succeeded

PS C:\Windows\system32> tasklist /svc |findstr dfsrs.exe
dfsrs.exe                     1120 DFSR
PS C:\Windows\system32> netstat -ano |findstr 1120
  TCP    0.0.0.0:5722           0.0.0.0:0              LISTENING       1120
  TCP    ServerB:5722        ServerA:61240     ESTABLISHED     1120
  TCP    ServerB:56631       ServerB:389         ESTABLISHED     1120
  TCP    ServerB:56635       ServerB:389         ESTABLISHED     1120
  TCP    ServerB:57033       ServerA:61234     ESTABLISHED     1120
  TCP    ServerB:58465       ServerB:61234     ESTABLISHED     1120
  TCP    [::]:5722              [::]:0                 LISTENING       1120
  TCP    [::1]:56633            [::1]:49157            ESTABLISHED     1120
  UDP    0.0.0.0:61120          *:*                                    1276
  UDP    127.0.0.1:53548        *:*                                    1120

Any help would be appriciated.

Folder Redirection Rebuild

$
0
0

I have no been able to find much online about this issue so I decided to ask it here.

I have a client that has folder redirection set up but the previous IT guy set it up very poorly and we are now running into issues. I would like to know if there is a specific way we need to rebuild the service and what the best way will be. To my understanding there is an option once you first set it up that if it is terminated the files will either stay on the server to push to the client computer that they log into next. After we figure this out, how can we terminate folder redirection and rebuild it the right way after?

We are using Small Business Server 2008

Thank you for your help.


How to change the default location of Work Folders when using group policy

$
0
0

Hi,

I deployed Work folders in Windows 2012 R2,  push the Work folder URL by Group policy and do not want any user interacts, but the Work folder will  go to %userprofile%\Work Folders , I would like to change to another location, like c:\work folders , is there any way to do that?  the whole process will be automatically and controlled.

Thanks in advance!

Ucing.


coding

The security ID structure is invalid

$
0
0
Unable to assign permission on any DFS folder (NAS Storage). I can add individual user account any give any type of permission but unable to add any newly created group.
Error Messag: Unable to save permission changes on <Folder Name> The security ID structure is invalid.

Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.


FSRM does not show large files in report

$
0
0

Have recently set up an new windows 2012 r2 file server and now running some reports for the first time. I know there are lare files present by performing a search for large files but these do not get presented in the reports in FSRM. Where should I start my troubleshooting, are there any specific logs I can look at?

I have set up a report for a specific folder with large files in it via Storage Reports Management but get nothing in the report, no matter what I specify as size.

Any suggestions or ideas are welcome.

Thanks,

/M

DFSR 4412 events - but file IS NOT changed on multiple servers. What is happening?

$
0
0

I have a DFSR setup going across 2 AD sites, with file servers in each site and DFSR configured to replicate file shares across both sites. Replication is set to 24/7, 30MB bandwidth limit for each. Both servers are 2012R2.

I am getting 4412 events for some user documents (Word, Excel etc) in their home areas mapped to network drives, where the user is logged in on one machine only, and their files are not being touched as far as I can see on the other site's server. These events tend to come in 'batches' for a specific user or users, and it doesn't correspond to them logging on or off (when GPO maps their home and shared drives)

Can anyone help out here? I would love to understand the algorithm that DFSR is using to generate a 4412 as I really want to get to the bottom of this.

Thanks in advance

 


Move DFS namespace to a new server

$
0
0

Right now DFS is installed on a windows 2003 server.  I need to move this function to a new windows 2012 server.  I do not use replication and I do not need to move the files and folders to a new server.  I just need to move DFS to another server so I can shut down the 2003 server. 

I'm not sure how to go about doing this.  I've read a ton of articles, but nothing tells me how to accomplish just the DFS move.  I've installed it to the server, but don't know what to do next.  Can you provide some specific steps that need to be done?  I also want to make sure that my permissions on the files and folders don't change.  One article I was reading made it seem like that might happen.

Max. File size for sysvol / netlogon file replication

$
0
0

Hi,

in my sysvol / netlogon location on the domain controller i have a file with 80mb which will not be synchronized to the other domain controllers.

All other smaller files will be synchronized.

Is there a max. file size configured anywhere?

Half of the C: volume is consumed by unknown files

$
0
0

We have a VM running Windows Server 2012 and Exchange 2013. Currently, its C: volume is 150 Gb. The system reports that only 6 Gb are still free. All files on the volume (including user profiles' folders, ProgramData and so on) eat up only 73 Gb or so. CHKDSK finds no errors on the volume and reports that 144 Gb are really consumed. It means that 70 Gb (half of the volume) are consumed by unknown files in inaccessible folders.

Regular shadow copies on volumes are not enabled. vssadmin shows that currently there is only one shadow copy, and its files are situated on another volume. Exchange databases are situated on other volumes as well.

Seems that there are folders I have no access to, buried deep within the folder hierarchy. Checking every folder on the volume manually is an overwhelming and practically impossible task. Is it possible to find and list all those folders automatically? Or is there another way to search for missing space?


Evgeniy Lotosh
MCSE: Server infractructire, MCSE: Messaging

NFS client cache

$
0
0

Hi I'm looking for an option equivalent to the lookupcache=none in Unix but on Windows Server 2012 NFS client

With more details :

I'm currently working on a clustered application using NFS which needs to disable cache option on client side.On Unix system it is pretty simple to do this with a "mount -lookupcache=none" on your client. But I can't find any similar option on Windows Server 2012 NFS Client.

It appears that older versions used some key in registry to do that but I'm unable to find how to do in WS2012.

Thanks for your help

Files created via NFS get extra permissions

$
0
0

I am using Server for NFS on Server 2012 R2. Here is my setup:

  • Under Services for NFS, I've enabled identity mapping via our Active Directory domain.
  • Inheritance was turned on (see https://support.microsoft.com/en-us/kb/321049)
  • I have given an AD account the correct UIDnumber GIDnumber to match a Unix user.
  • This AD account is a member of a group which I have given NTFS Modify permissions on the folder.
  • Shared the folder via NFS. "Enable unmapped user access" is unchecked. Under Permissions, the ALL MACHINES entry has been changed to Read-Write. "Allow root access" was left unchecked.

The share was mounted in Linux, and the user with the mapped UID/GID can succesfully manipulate files there. However, when this user creates a new file, the NTFS permissions show two entries I didn't expect:

  • NULL SID has Read and Write access
  • Everyone has Read access

Why are these extra permissions present? The Unix account is mapping to the AD account properly - I can see that the mapped account is the owner of the files that are created.

Any help would be appreciated. Thanks,
Eric


Eric Hodges


Users Unable to Access/Save Files With Full Permissions

$
0
0

Hello,

We have several users who are unable to save and/or access certain files within their home directory.  The users had no issues on Friday to access/save these files, no permissions have been changed prior to the incident (only after the incident for testing) and no updates have been applied to the machines the users are using to access the server.

Things I have checked:

  1. Users have Full Permissions over the location/file they are trying to access
  2. Users are Owners for the "Share" permissions on the folder they are trying to save to
  3. Removed Inherited permissions and tried to access without success
  4. Restarted client machines to no avail
  5. With a specific file, I tried to move it to other locations within the shared folder, to no avail
  6. Moving the file to the desktop seems to allow access; moving back encounters the same issues
  7. This is happening on two different servers (Windows 2008 R2 and Windows 2003 and on two different domains

We are planning a server restart tonight when users stop working, but can't think of anything else that could be the cause of the issue.

We are getting the "Access Denied.  Contact your Administrator" message with the files that can't be opened.

Microsoft SQL Cluster Issue

$
0
0

Hi There,

We have built a test environment with MSSQL cluster before going to production.

Implementations:

1) We have built two virtual application server where we hosted same application.(You can assume it as website)

2) We built two Virtual Windows Failover Clusters and then we have installed SQL Failover Cluster on both the machines by giving a virtual IP.

3) all the SQL DB,Logs, Temps file locations are pointed to individual iSCSI LUN's

4) We found that all the functions are working properly on available nodes.

Servers:

Application: 2 ( APP1: 192.168.1.11, APP2:192.168.1.12

Windows Cluster Nodes: 2 (Node1: 192.168.1.21, Node2: 192.168.1.22)

SQL Cluster Virtual IP: 192.168.1.23

Storage: NAS(iSCSI LUN's)

5) Application servers are pointed to SQL Cluster DB: 192.168.1.23

Questions:

i) We have logged into application which is hosted on 192.168.1.11(remember same application hosted on both the servers for load balancing which is pointing to single DB on cluster on the top of application servers we have load balancer) and tried to modified the data( You can assume we have logged in to application using credentials and edited user data by modifying few columns) then we have logged into the same application hosted on 192.168.1.12 which is pointing to the same DB 192.168.1.23 but we don't see the changes are triggered on this server.

ii) we don't understand this strange behavior even though the two applications are pointing to same clustered DB.

iii) Do we need to take any precaution or configuration changes to be done on SQL cluster.

iv) i don't understand if two same applications on two different servers are point to same DB then I should see the same data in both the application servers as per modification which is not happening in my test scenario.

Please share your thoughts.

Thanks

NagarajChengeli


Bitlocker: Encrypt Used Disk space only vs Full encryption

$
0
0

Hi all,

A customer of mine is looking to deploy Windows 10 in combination with Bitlocker.

Looking on technet and other forums, I've read that the option "Used Diskspace Only" would be the recommended deployment method for new computers. But you'll still have the risk that previous data located on this disk might be recoverable using special phorensic tools.

I have the following questions:

  • If this computer has previously been active in production and is just re-deployed for a new owner.. Can the old data (before the format) be recovered? Is this only applicable if the disk wasn't encrypted with bitlocker before the format or doesn't it make a difference?

Thanks in advance!

How much usable storage will I have if I use parity mode in Storage Spaces

$
0
0

I will have 28 2TB disks. That would be 56 TB raw storage. What will the actual usable storage be after parity? Would I treat this like a normal RAID 5 as far as the math for goes for computing usable storage?

Also, will I lose a great deal of addition storage to formatting? I'll be using ReFS.


iCACls Error - "S:AINO_ACCESS_CONTROL"

$
0
0

I'm experience an odd behavior with iCACLS.  I restore the same permissions to two folders within the same directory but get different results.  After I perform the restore, the permissions as seen in the properties window appear identical, however, i then backup the permissions using icacls and get a different result for each folder.  The difference between them is that one folder has the term "S:AINO_ACCESS_CONTROL" added to the end of it and the other doesn't.  What does this term mean?

First I run this command to restore the permissions with the text below being in the text file -  "icacls e:\ /restore ntfsperms.txt"

Folder\SubFolder1
D:AI(A;OICIID;FA;;;S-1-5-21-1632496702-3739536613-3407373563-3317)(A;OICIID;FA;;;SY)(A;OICIID;FA;;;S-1-5-21-1632496702-3739536613-3407373563-500)(A;OICIID;FA;;;S-1-5-21-1632496702-3739536613-3407373563-6686)(A;OICIID;0x1200a9;;;AU)

Folder\SubFolder2
D:AI(A;OICIID;FA;;;S-1-5-21-1632496702-3739536613-3407373563-3317)(A;OICIID;FA;;;SY)(A;OICIID;FA;;;S-1-5-21-1632496702-3739536613-3407373563-500)(A;OICIID;FA;;;S-1-5-21-1632496702-3739536613-3407373563-6686)(A;OICIID;0x1200a9;;;AU)

Second I run this command to save the permissions with the result below-  "icacls e:\Folder /save ntfsperms.txt /t /c

SubFolder1
D:AI(A;OICIID;FA;;;S-1-5-21-1632496702-3739536613-3407373563-3317)(A;OICIID;FA;;;SY)(A;OICIID;FA;;;S-1-5-21-1632496702-3739536613-3407373563-500)(A;OICIID;FA;;;S-1-5-21-1632496702-3739536613-3407373563-6686)(A;OICIID;0x1200a9;;;AU)S:AINO_ACCESS_CONTROL

SubFolder2
D:AI(A;OICIID;FA;;;S-1-5-21-1632496702-3739536613-3407373563-3317)(A;OICIID;FA;;;SY)(A;OICIID;FA;;;S-1-5-21-1632496702-3739536613-3407373563-500)(A;OICIID;FA;;;S-1-5-21-1632496702-3739536613-3407373563-6686)(A;OICIID;0x1200a9;;;AU)

Viewing all 13580 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>