Hi All,

I have setup some shared folders using Access Based Enumeration on  Win 2012 R2 server.
Client computers are Windows 7.

The problem is my users cannot copy from their desktop and paste into the shared folder

i got following error . S:\ refers to a location that is unavailable. It could be on a hard drive on this computer..

Creating/Deleting file from Windows Explorer UNC path working fine, but can't do these think through drive map which is set by GPO.

Out Put of NET USE:

The interesting think is that, when I unchecked   "Enable Access Based Enumeration"
Every thinks work FINE . but many folders listed even the client doesn't have access on them  ... i'd like to use Access based Enumeration  ... 

Thank you in advance 

Hello,

We have been experiencing for the last 2 weeks a problem with our folder within the DFS-Namespace. Permissions on "Folder" not target, are being reset and only administrators have permissions.

Namespace server having the issue is a DC Running on Windows Server 2012 R2.

Other namespace server are running Server 2008 and Windows Server 2012 R2 and not having issues, they are also DC themselves.

Thank you,

Marc-Andre

I have not been able to find an answer to this. I have two domains (A and B). A and B have a trust. We are trying to map a drive from A to a file share in B. We need to use smart card to map the drive, but would like to map it with the credentials in domain B. Every time I try to use the "net use v: \\server\share /smartcard" it uses the credentials in domain A.

I don't want to add the user in domain A to the resource in domain B. There are accounts in each domain that is using the same UPN from the SAN on the smart card. Is there any way to do this?

To take it a step further, if we broke the trust, would I be able to access the resource from A to B using my smart card?

I'm trying to assign permissions to a folder that contains multiple sub-folders and files using icacls.

My syntax for assigning a group to a folder:
icacls Z:\TestFolder /grant:r Management_SG:(OI)(CI)F /C

This seems to work. But, when I dig in to a 3rd or 4th sub-directories, I noticed that "Management_SG" does not have permissions to a folder(s) and/or to a file(s)

When I use:
icacls Z:\TestFolder\TestSubFolder /q /c /t /reset

Again, it seems to inherit the permissions from "Z:\TestFolder". But, when I dig in to multiple sub-directories, some of the folders or files does not inherit the permissions. Is there a way to assign permissions and force it to inherit recursively? 

I do notice that when I try to assign folder permissions, from Windows Explorer, in the advance properties tab, I would get an error "Error Applying Security. An error occurred while applying security information to: "folder path" Access is denied". Why would i get that when I have local administrative rights. I've even tried running the Windows Explorer in Admin mode.

Can you please assist.

Hello Team,

* We have Created 200 Exam users in the below 10 groups.

* All the Exam users have Domain Users (By default Group) which means they will be having access on the Shared Folders on the network.

* We already have created Exam OU for the Exam Users created and having all the users in that specific OU (200Users).

* These group and member of this group (Exam Users) are used by the different Branches for conducting Online Objective Test.

My Infrastructure :

Windows Server 2008 R2 : Domain Controller (6 DC's) 

4 DC's : Mumbai

2 DC's : BLR

1 File Server : 2008 R2 : 

1 shared folder is on Application Server.

1 Shared Folder is on File Server.

** I have created OU Name User and moved all the Exam Users to that OU

** All the Exam users are member of the Security Group name (Exam User Group)

My Requirement is :

** I don't want the (Exam Users ) to access the shared folders on the network.As  they are member of the Domain Users on the network.

** I want them to access to specific URL for Exam Purpose 

Pramod Jadhav 9867715203

I'm working on a Server 2008 Standard Edition Server that is the sole DC for a small office. The hardware has malfunctioned but I was able to boot the system disk in different hardware. I've put it online but the users cannot reach the shares that they could before. I want to keep this in place until I can get a replacement server online and migrate the data over. I wanted make sure I'm not running up against some kind licensing thing. Are there other issues that could prevent users from reaching the file shares on the temp box?

I am trying to replace a drive in a dual parity virtual disk.  The drive has not officially failed, but is throwing bad block errors so i'm trying to be proactive.  I have manually retired the disk using powershell, per this article: https://technet.microsoft.com/en-us/library/dn782852(v=ws.11).aspx#BKMK_ReplaceFailedDisks

I'm not sure exactly what to do though now, and I want to be careful.  Even though I have retired the disk, the virtual disk still shows as healthy, and there is no indication that the virtual disk is now in a degraded state. If the virtual disk cannot heal itself from other space in the pool, and I've retired one of the physical disks, shouldn't the array be degraded?  Most of the walk throughs I see online about replacing disks talk about physically removing the "bad" disk after you have added the new one and placed it in the pool for the virtual disk to use.  I am not in that situation, all of my drive bays are actively in use.

Is the next step just to physically replace the drive and add the new drive to the pool?  I feel like I'm not understanding something with what is happening here and how this will work, so any information on what is going on and what I need to do, would be awesome.  Thank you!

I have a network with three sites - I will call them Site A, Site B, and Site C. Each site has a Windows 2012R2 domain controller. They are using DFS to replicate data. It has been in operation since last summer and has been working well. They recently had a DFSR DB corruption that caused DFS replication to stop working. I ended up starting from scratch - removed all replication groups and deleted D:\system volume information\dfsr folder on all three servers. I then used the process in https://blogs.technet.microsoft.com/filecab/2013/08/21/dfs-replication-initial-sync-in-windows-server-2012-r2-attack-of-the-clones/ to create the replication group on Site A (the main office), preseed the data to Site B and Site C, export the DFSR DB from Site A to Site B and Site C, and then add Site B and Site C to the replication group. Replication is now working both ways between Site A and Site B and replication from Site C to Site A works but data will not replicate from Site A to Site C. If I check the backlog for Site A to Site C replication the first file listed is 'File name: VersionVectorTombstone'. Same goes for Site B to Site C replication. Inbound replication for Site C doesn't work. I had the same problem for Site A to Site B but a reboot of the server at Site B seems to have fixed it. I tried rebooting the server at Site C and it seemed to help for short time but then A to C replication stopped again and 'File name: VersionVectorTombstone' appeared at the top of the backlog list. The server at Site C is MUCH slower than the other two servers and the DFSR Service is still taking 50% of CPU time. I am wondering if it still working on catching up and this issue will eventually clear. Or... is there something I can do to get inbound replication to Site C working.

AD replication is working in all directions.

As you might imagine I have Googled this to the Nth degree and so far I have not found anything that helps me. 

Anybody have any thoughts?

Thanks,

Dan Harris

We have a Windows domain using Windows 2008 and 2008r2 domain controllers.  We have a few Windows 2003 servers running as file servers.  This issue is regarding a problem one of our Win 7 workstations is having when they click on a pointer (folder) under the DFS.

Issue:  I have a Win 7 workstation that is having trouble with one of our DFS pointers.  We have a DFS setup and it has many different pointers that reference different file shares on servers throughout the network.  We also have servers with shares that we access across WAN connections.  When the user of the system in question clicks on the DFS drive they are able to see all the shares and access them without issue except for one share.  It is on a server across a WAN connection.  The user can see one folder on the share but not the others.  The user has permissions to see everything.  I have looked at the workstation IP properties using ipconfig /all and everything looks good including DNS servers.  I had the user reboot and log in again but the problem still persists.  No one else is having this problem that I am aware of.  I have personally checked at least 3 other systems.

On my file server when I try to Optimize the tiered storage I get this:

PS C:\Windows\system32> Optimize-Volume -DriveLetter D -TierOptimize
Optimize-Volume : A general error occurred that is not covered by a more specific error code.
At line:1 char:1
+ Optimize-Volume -DriveLetter D -TierOptimize
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (MSFT_Volume (Ob...1-a83c-b33c...):ROOT/Microsoft/...age/MSFT_Volume) [Opt
   imize-Volume], CimException
    + FullyQualifiedErrorId : HRESULT 0x89000000,Optimize-Volume

Also, I'm seeing and Unknown status when I try to pin files:

PS C:\Windows\system32> Get-FileStorageTier -VolumeDriveLetter D | FT -AutoSize

FilePath                           DesiredStorageTierName      PlacementStatus State
--------                           ----------------------      --------------- -----
D:\Shares\Media\Movies\300\300.mkv DATA_Microsoft_SSD_Template Unknown         OK

Running both as Administrator

I'm running 2012 R2.

I have 1 storage pool with an external drive enclosure with 5 4TB drives as JBOD connected with an eSATA cable to a controller card provided with the enclosure and 3 internal 4TB drives.  There is one parity virtual drive in the pool with ReFS format.

I have a large number of large media files that are served to my home media setup.

The thing has never really been all that reliable, but recently it has become unusable.  The drive goes offline when reading or writing large files and very slow when navigating folders and deleting files. When deleting or moving folders, progress just stops and many times just fails.

The drives are reported as healthy

any thoughts?

Dear All,

We have 2 file server running on windows server 2008 one in primary site and the other in DR site currently DFS and robo copy is being used to replicate the date between both the sites.

We are planning to migrate the windows server 2008 to windows server 2012 R2 and run the server in virtual environment with Hyper V, based on this i have couple of questions

1) i heard of hyper V replica through which i can replicate the entire VM to other site,by doing this can i stop using DFS and robo copy is this the best alternative to DFS and robo copy.

2) in case if the primary site is down can i start the VM in DR and just change the IP on DNS server and user can start accessing file server from DR server?

3) is there any option available in hyper V replica to monitor the replication?

Regards

JAck

TechGUy,System Administrator.

Hi Guys,

i have windows server 2012 on my servers.

i want to copy files from folder A to folder B using batch. but, i usually using 'copy', but this 'copy' will overwrite the files that exist in B folder.

so the question is, anybody know the script to copy files from A to B but it won't overwrite the files if exist, it means just copy files from folder A if not exist in folder B?

Thank you

yoga

Hi There,

Massive shot in the dark here but I am struggling with a pretty major issue atm.  We have a production file server that is hosted on the following:

Dell MD 3220i -> iSCSI -> Server 2008 R2 Hyper-v Cluster -> Passthrough Disk -> Server 2012 R2 File Server VM

Essentially 3 times now, roughly a month or so apart.  The file server stops accepting connections.  During this time, the server is perfectly accessible through rdp or with a simple ping.  I can browse the files on the server directly but no-one appears to be able to access the shares over SMB.  A reboot of the server fixes the issue.  

As per a KB article I removed nod antivirus from the server to rule out a conflicting filter mode driver after the second fault.  Sadly yesterday it happened again.

The only relevant errors in the servers log files are:

SMB Server Event ID 551
SMB Session Authentication Failure

Client Name: \\192.168.105.79
Client Address: 192.168.105.79:50774
User Name: HHS\H6-08$
Session ID: 0xFFFFFFFFFFFFFFFF
Status: Insufficient server resources exist to complete the request. (0xC0000205)

Guidance:

You should expect this error when attempting to connect to shares using incorrect credentials.

This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.

This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled

and

SMB Server event ID 1020
File system operation has taken longer than expected.

Client Name: \\192.168.105.97
Client Address: 192.168.105.97:49571
User Name: HHS\12J.Champion
Session ID: 0x2C07B40004A5
Share Name: \\*\Subjects
File Name:
Command: 5
Duration (in milliseconds): 176784
Warning Threshold (in milliseconds): 120000

Guidance:

The underlying file system has taken too long to respond to an operation. This typically indicates a problem with the storage and not SMB.

I have checked the underlying disk/iscsi/network hyper-v cluster for any other errors or issues, but as far as I can tell everything is fine. 

Is it possible that something else is left over from the NOD antivirus installation?  

Looking for suggestions on how to troubleshoot this further.

Thanks

Hi,

I originally created a thread because of issues I was experiencing with image backups:

https://social.technet.microsoft.com/Forums/windowsserver/en-US/560b2043-992c-44df-9e2b-74799b06d177/vss-writer-issues?forum=windowsbackup#560b2043-992c-44df-9e2b-74799b06d177

With further investigation, it's looking very likely that (somehow) DFS replication is causing this issue for some reason.

During "normal" operation at the moment, DFS Replication Service is using up to 70% of the CPU - in task manager.
As explained in my original thread, I can get a successful image backup (using 3rd party software and/or Windows Server Backup), thereafter, the snapshot phase seems to just hang in limbo - even though it never actually fails.

We've discovered that by stopping DFS replication, CPU usage returns to normal and we can achieve successful backups in succession without any issues.

What I'm effectively looking for at the moment is:

* Are there any known issues that would cause the DFS Replication Service to have such high CPU usage?

* Are there any known issues that would cause DFS to interfere with the Volume Shadow Copy Service, in this manner?

I don't suspect this issue is occurring because of high CPU usage, but, it's possible at this stage.

The server in question is currently up to date with patches, at least according to Windows Update, and any potential hotfixes I've tried seem to be installed through update roll-ups currently installed on this server.

Thank you, in advance

I am trying to set up some network shares and could use some help. My plan is to create the following directory structure:

D:\Shares$

Under the D:\Shares$ directory would be:

D:\Shares$\Users

D:\Shares$\Departments

D:\Shares$\Shared

D:\Shares$\Temp

The Users directory would hold %username% directories, each user having explicit access only to there folder

The Departments directory would hold Accounting, Technical, etc. and would need to be available to specific users

The Shared and Temp directories would be open to all users

I do not want users to be able to access or see the contents of other directories

Thanks,

CCPL Jeff

Hi All,

  I have set all my Targets to Site A  server  First  among all targets. Also replication was setup as Site A server is  a Primary.

 Last week i just set one Target to become Primary in DR Site Server. Forgot to change the replication.

Now all the users are trying to access that share got "Read Only"

To fix this, right-click on each Folder Targets ->Properties -> General tab -> Share Permissions.... Make sure the permission are set up the same as Site A server. 

Also disable the replication from Site A to DR. 

Now i got following warning.

 What do i do now?

As

Hi All,

I've created a new DFS namespace (\\company.local\Public) on Windows Server 2012 R2 in Microsoft Azure. As a reference I have used the following blog post: http://clemmblog.azurewebsites.net/high-available-file-share-in-windows-azure-using-dfs/

The next step was to connect a (domain joined) laptop to the Azure virtual network using the Azure VPN client. After connecting I can browse to the file servers and the shares that are present on the file servers but when I try to browse to the shares in the DFS namespace (\\company.local\Public\Data) I get the following error:

But when I ping the namespace (company.local) I get a reply.

I can also use Remote Desktop to connect to servers in my environment with the Azure VPN client active, it all falls apart when I try to browse to the dfs share. At the moment we're kinda lost for ideas so any hints or tips are welcome :)

P.S. I have configured DFSN to use the FQDN for use with workgroup machines.

Today an issue came when a drive was unintentionally formated that hosted VM's (HyperV) on it. DC1. Now I found that the last backup (dont ask) was from 2 months ago. My question is "What will happen with the files?" "Will they be updated with the new versions from the other DFS/DC located in my other site? Or will it corrupt and do damage?"

Also what does directory services do??? 

UGGG

BCU

Hi All,

In Active Directory I have configured the users profile to point their H:\ drive to the namespace \\domain\homefolders\users\Arunj  also enable the ABE on Users share.

When users are logon to the domain, H: drive will map correctly and no issues. But laptop users got the following issue.

When they disconnect from the network  H: drive disappeared from the Computer. Even when they connect back to the network or wireless, H drive not map. also over the VPN have to map manually.

Look like %HOMEPATH% and %HOMESHARE% variables are not resolved correctly via the DFS.

So I created new GPP setting as follows:

User Configuration/Preferences/Windows Settings/Drive Maps

But this didn't work either.

I think we have to set this via logon script and set topersistence.

So how do i resolve this issue?

As