Hi Team,

SMBv3.0.2 signing request is failing on EMC VMAX ENAS  Storage which is joined Active directory(Windows server 2012 R2).

Kindly share if any of you have idea on this.

Regards,

Sanesh

Hello,

I found many errors on our event viewer related to DFS.
Do you know any solutions or what the possible error can be? 
When i check the disks they are all healthy. 

DFSRs (9420) \\.\D:\System Volume Information\DFSR\database_76D2_8381_D283_43F9\dfsr.db: A request to write to the file "\\.\D:\System Volume Information\DFSR\database_76D2_8381_D283_43F9\dfsr.db" at offset 1335164928 (0x000000004f950000) for 40960 (0x0000a000) bytes has not completed for 36 second(s). This problem is likely due to faulty hardware. Please contact your hardware vendor for further assistance diagnosing the problem.

DFSRs (9420) \\.\D:\System Volume Information\DFSR\database_76D2_8381_D283_43F9\dfsr.db: A request to write to the file "\\.\D:\System Volume Information\DFSR\database_76D2_8381_D283_43F9\dfsr.db" at offset 378175488 (0x00000000168a8000) for 32768 (0x00008000) bytes has not completed for 36 second(s). This problem is likely due to faulty hardware. Please contact your hardware vendor for further assistance diagnosing the problem

DFSRs (11080) \\.\D:\System Volume Information\DFSR\database_76D2_8381_D283_43F9\dfsr.db: A request to write to the file "\\.\D:\System Volume Information\DFSR\database_76D2_8381_D283_43F9\fsr.log" at offset 741376 (0x00000000000b5000) for 4096 (0x00001000) bytes succeeded, but took an abnormally long time (18 seconds) to be serviced by the OS. This problem is likely due to faulty hardware. Please contact your hardware vendor for further assistance diagnosing the problem.

Hello, 

Since a couple of months we have a problem with deduplication on our live production.
We have two servers (FS01 and FS02). We use DFS to replicate files between the servers. 
One server located at the office and another server located on the seccond office. 
We gott a backlog of DFS from 1 000 000 + so we decided to move the server on the same network to sync the files. 

When we start garbage collection on FS02 it works well and its finished after 4 - 6 hours. 
When we start garbage collection manual on FS01 with high priority the job start. 
Now after 3 days when i check the status its still hangs on 0%.
How we can solve this problem ? 
We already fully update the server and restarted before we start the garbage collection.

If you need any more information let me know. 

On this page - https://docs.microsoft.com/en-us/windows-server/storage/storage-spaces/nested-resiliency - a scenario is detailed where a 2-node S2D cluster loses one entire node plus a disk on the second node. This results in 3 out of 8 of the clusters disks remaining online. The S2D quorum documentation - https://docs.microsoft.com/en-us/windows-server/storage/storage-spaces/understand-quorum - still indicates that to maintain storage pool quorum a cluster must have 50% + 1 disks available (with the pool resource owner counting as a disk vote). This is definitely the case in Server 2016... was this changed in Server 2019 and not documented? How does Storage Pool Quorum work in S2D on Server 2019 that it allows this nested resiliency failure scenario?

Thank you.

Hi,

Is there a better way to migrate File Server from 2008 R2 to Server 2016 and keeping NTFS and shares permission and the structure same?

I am not sure if the robocopy would do what I need?

ROBOCOPY "\\2008\E$" "\\Server2016\E$" /MIR /SEC /LOG:C:\logfile

Has anyone migrated from Server 2008 to Server 2016?

Thanks,

Hello.

Have: Server1 - DFS, Server2 - DC, DFS. 

Hi

We have multiple LUNs / Drives on Windows servers using as backup repositories. We removed all NTFS permissions from these drives except for System and backup works fine. Now our concern is to how to deny anyone including Admins to encrypt / format the disks (this happen before during a malware outbreak). If we get an option for this or a workaround for this issue, then it will be great.

Thanks in advance

LMS

I have a replication pair that was working but is only working in one direction

I have users point to both folders.

I have a large back log.The server that isn't sending, is saying its still waiting for initial sync.

Can I configure one of these as the primary without risking the data being wiped during the initial sync.

Thanks,

Hi All,

Event ID have bugcheck code 0x000007e, when doing backup job with Heavily IO.

It will restart or sometime crash.Any advise?

Thanks.

Have a user on windows 7 pro on a domain that can save files on the server, but no one else can see them. No changes were made to users and there are no group policies.  I noticed under the file properties, security tab, it says The requested security information is either unavailable or can't be displayed. Removed and reinstalled client for microsoft windows and file and printer sharing for microsoft networks. Tried doing a system restore but it failed. However now I notice when I check file properties, the security tab isn't there at all. The files show up on the client computer that created the file, but none of the other users can see them. Ran sfc and western digital hard lifeguard scan and drive on client pc shows ok. Not sure what to do besides reinstall windows, and theres a lot of cad programs installed that would involve quite  a bit of downtime. The client pc is a Dell Optiplex 7040

diskperf and task manager and mounted volume - How to force task manager to also show MOUNTED VOLUMES?

I have a Win2012 Server using a secondary volume mounted as c:\DATA insted using drive letters

when i use task manager i can see the C: drive and i ALSO can see the C:\DATA volume and it sperformance information on task manager

But in several other windows servers, also using mounted volumes, the task manager does not show any mounted folder expect the volumes using "simple" letters, like "D", "E:", "V:" and so on

After some tests, i discovered something weird, but i couldn´t reproduce the problem

if i hit a DISKPERF -YD at the first attempt, this machine can show mounted volumes on task manager, but if i try not to use diskperf -YD at the firsta attempt, firts using diskperf -Y or other combination.. task manager NEVER shows the mounted volumes

y settings i´m trying to compare some registr like HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\partmgr, but the parameter  EnableCounterForIoctl is identical on both machines (i checked using procmon, is the reg key sued by diskperf commands)

so, the final issue is: Why can t I enable my mounted volumes on TaskManager in several servers?

How to show a volume mouting point in task manager?

I have several WIn2008R2/2012R2 servers and most of then have additional disks mounted as paths insted drive letters

i have a few "d:" or "f:" volumes and a lot of "c:\data" or "c:\cluster" volumes

Sometimes i see the volume mount point in task manager and sometimes not

i´ve noticed, particularly in Hyper-V clsuters, none of then, have its mounting poins being shown in task manager, not even using diskperf -Y

At least one time i could see the change, after the diskperf command, before and after and seems to have a relation, using diskperf and showing volume mount points in task manager

but not in my cluster nodes, why is that?

in some occasions, not even in regular servers it works, there is something else i can do?

in my case:

...

nothing...

no mount point in task manager

The PERC8 disk controller and it s disks are configured for better performance and to do write caching

Maybe it is a driver/firmware limitation?

Hi,

I have a 4 node 2-way mirror resi. and I see the following on some of the disks. Is this going to effect the performance or/and disk is about to fail?

Get-PhysicalDisk | Get-StorageReliabilityCounter | ? Readerrorsuncorrected -gt 0

DeviceId Temperature ReadErrorsUncorrected Wear PowerOnHours
-------- ----------- --------------------- ---- ------------

2009                 310                   0    2827
1004                 28                    0    2802
3003                 31                    0    3430
4006                 63                    0    2826
1014                 145                   0    2802
2010                 5                     0    2827
1008                 45                    0    2802
2003                 1                     0    2827
3005                 1                     0    2645
2012                 213                   0    2827
2007                 5                     0    2827
4008                 1                     0    2826
3012                 378                   0    3430
4011                 13                    0    2826
4005                 12                    0    2826
3010                 6                     0    3430
1012                 74                    0    2802

On Windows Server 2012 R2 (and reproduced on 2016), we see significantly faster performance from our SANs (both Compellent and SolidFire) when accessing files through a drive letter.  For example:

1. Move-ClusterGroup to attach the storage
2. Run WinDirStat against 43,484 directories under C:\BuildCluster\STORAGE\RootFolder: 1m 38s
   

Versus:

1. Move-ClusterGroup to attach the storage
2. Set-WmiInstance to assign a drive letter to C:\BuildCluster\STORAGE
3. Run WinDirStat against 43,484 directories under Q:\RootFolder: 21s

Why would assigning a drive letter make file performance that much faster?  We'd actually prefer NOT to have to use a drive letter, but we can't argue against the performance gains.

Hello - sorry if this is the wrong forum, but since it deals with printers shared over SMB, I thought it might fit in the "file services" section.

We have 500 users using \\print2008 to print right now, so I can't just stand up the new machine, \\print2016 and immediately change our DNS server to have a CNAME pointing print2008 to the new print2016 machine until I'm sure everything works.

So I thought that perhaps I could use the hosts file on my office workstation to do a simple alias.

I stick:

<ip address> print2008
<ip address>print2008.fqdn

into the hosts file and just hope it will work.

However, sadly, none of my printers previously mapped to print2008 are working on my workstation post reboot. Whenever I try to print, I get a GUI-based "access is denied error" and in Event Viewer, I get the following:

The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server print2016$. The target name used was host/print2008. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password.

So, I'm guessing that for security's sake, print2016 is refusing to handle my requests because my workstation is offering them to print2008. I followed what instructions I was able to from here, like turning off StrictNameChecks and turning on DNSonWire. I also added the BackConnectionHostNames entry. Basically everything that didn't give me an error message, but I couldn't do the dreaded SPN record for kerberos authentication.... because of course, I get the "duplicate SPN found, aborting operation!" error.

Of course there's a duplicate SPN; print2008 is being used by 500 users!

If I was 100% sure that everything was working great on print2016 I'd go ahead and just make the changes in DNS, like adding the CNAME record that the link in the previous paragraph describes, but I can't riskanything happening to print2008 when it's in active use.

Can anyone recommend a good way to set up my testing environment so I can basically fool my workstation into being okay with sending "bad" kerberos tickets to print2016, and have print2016 be okay with accepting them?

Thanks.

We're retiring a 2008r2 file server using NTFS and migrating the files to a Server 2016 server using ReFS.  Using robocopy to pre-seed the files, a small percentage of the files failed to copy.  The robocopy log reported:

ERROR 665 (0x00000299)...The requested operation could not be completed due to a file system limitation

Trying to manually copy the file generated the error:

Error 0x80070299 the requested operation could not be completed due to a file system limitation

The files copy correctly to NTFS volumes, but trying to copy to any ReFS volume on any server generates the error.  If I copied the file to a FAT32 partition (to strip the NTFS metadata), it would then copy to an ReFS volume with no error, but trying to strip the attributes by going to the file properties, Details tab, and using the "Remove properties and Personal Information" option had no effect (it still failed to copy).

I was able to narrow it down to the presence of a particular Alternate Data Stream (ADS).  All the files that failed have an ADS called "AFP_Resource", which is apparently for Mac compatibility (https://msdn.microsoft.com/en-us/library/dn392833.aspx).  If I remove that data stream or clear the contents of it, the file will then copy with no error.

However, we have a lot of files that also have that ADS that do copy successfully.  We have a fair number of Mac users, so I'd prefer not to remove that data stream from all the files that have it.  Ideally I'd like to remove whatever is problematic about the data stream and leave the rest intact.  Alternatively, it would also be helpful if anyone could re-assure me that removing that data stream won't negatively impact our Mac users.  I suspect it's not important, but I'd rather not find out by stripping the stream from thousands of files and end up getting a bunch of phone calls. ;)

I suspect I'm going to end up using robocopy to identify the problematic files and then script removing this ADS just from those files, but if anyone has more info on this I would love to hear it.

More info below for those who might also be struggling with this.  It took me a few hours to track this down, so hopefully this will save someone else some time.

You can see what alternate datastreams exist for a file using either of the following:
dir /w
get-item <filename> -stream * | select Stream,Length

Remove a data stream:
remove-item <filename> -stream <stream name>

Clear contents of a data stream:
clear-content <filename> -stream <stream name>

View contents of a data stream:
get-content <filename> -stream <stream name>

Decent blog post explaining NTFS attributes (particularly $DATA, but also $STANDARD_INFORMATION, $FILE_NAME, etc.):
https://blogs.technet.microsoft.com/askcore/2009/10/16/the-four-stages-of-ntfs-file-growth/

I recently deleted my user account from ADUC and recreated it (with the same user name). The Group Policy should automatically map the drives, and it did, for one of them. When I look at a GP result it tells me that all of the drive mappings were a success. I tried manually mapping the drives but I get an error, "The network folder specified is currently mapped to a different user name and password...first disconnect any existing mappings to this network share."  I have a hunch it's my old account that's blocking me.

A few things to note:

- All 3 folders I'm attempting to connect  to (including the one that is successful) on are the exact same file server.

- Running the net use command I only see a connection to the one share that's currently visible

- I went to the "C:...AppData/Roaming/Microsoft/Windows/Network Shortcuts" folder on my old account to make sure there wasn't anything listed.

-WMIC useraccount get name,sid verifies that the old SID isn't lingering around on the domain

- The old account wasn't deleted from the computer prior to making the new one so under users I now show as [username.domain] rather than just username.

Do I need to completely delete the user account from the C: of the local machine or is there some way to view/manage mappings from the File Server itself?

Hi,

I plan to upgrade my DFS servers from 2008 to 2016.  I need some advise before my migration take place :-

How many DFS Namespace & DFS replication I can create in my Domain?. Currently in 2008 I only have 5 Namespace.  Iplan to come out with 10 - 15 DFS Namespace and Replication. What is the outcome if I increase my DFS Namespace in windows 2016?

Thank you!

Hi,

I've been searching for month now and couldn't find anything about this problem, so decided to ask here.
We successfully deployed Work Folders and it works well except one user - his files are synchronizing, but he can't see sync state in WorkFolders directory in explorer. Explorer should show green icon when file is synchronized or red icon when it's not, but right now it doesn't show anything.

I tried re-deploying Work Folders for his account, but it didn't work. I couldn't find anything suspicious in eventviewer.
Maybe he needs some permission to view sync state?
I'm stuck :(