Hi,
I am trying to setup DFS replication on tow servers. I am local admin on the servers but NOT domain account. Is it possible to create Replication group anyway? or should i contact the Domain administrator to the job?
Thanks
↧
DFS - The replication group cannot be created - insufficient permissions - NOT DOMAIN ADMIN, LOCAL ADMIN
↧
Deduplication - Server 2012 R2 - disk relocation
Hello all!
I have question for you, that is bothering me and my colleague.
Tbh, I didn't read the documentation for Deduplication feature in 2012 R2 version of the Server OS, but my colleague did, and came up with a hypothetical quetion.
1) We have our virtual file server with Server 2012 R2 OS installed. We have switched on the Deduplication feature on the main file share disk and we are quite happy with the space savings! But what will happen, if the server crashes, and we will be forced to shut it down, detach the main file share disk and connect it to another virtual file server with2012 R2 OS on it?
2) Based on the previous scenario, is it possible to connect the drive that has the deduplication feature swtiched on, from Server 2012 R2 to Server 2008 R2? I mean, the scenarion will be that I have no other choice, than to connect the drive from 2012 R2 to 2008 R2.
Thank you for your time in advance!
The IT guys from LukOIL
↧
↧
Do changes in shares get logged?
Hi there,
Recently we found out Access Based Enumeration on all DFS namespaces has been disabled. We don't know how this happened. We would like to see some log files with changes in DFS namespaces or shares.
Does anybody know where we can find log files? I cannot find anything in the Event Viewer.
↧
Query on DFS namespace
We have a DFS namespace consisting 4 virtual servers running window server 2012 as shown below.
The 4 servers are located in 2 different AD site, with 2 server running in AD site 1 and another 2 servers running in AD Site 2
AD Site 1 | AD Site 2 | ||
Site1_fs1 | Site1_fs2 | Site2_fs1 | Site2_fs2 |
The referral list order is as follows:
- Site1_fs2 (first among all targets)
- Site2_fs2 (first among targets of equal cost)
PS C:\EDIPortal\Scripts> .\dfsutil /pktinfo 3 entries... Entry: \myNamespace.com\EDIPortal ShortEntry: \myNamespace.com\EDIPortal Expires in 188 seconds UseCount: 95 Type:0x81 ( REFERRAL_SVC DFS ) 0:[\SITE1_FS1\EDIPortal] AccessStatus:0xc00000be ( TARGETSET ) 1:[\SITE1_FS2\EDIPortal] AccessStatus: 0 ( ACTIVE TARGETSET ) 2:[\SITE2_FS1\EDIPortal] ( TARGETSET ) 3:[\SITE2_FS2\EDIPortal] ( TARGETSET ) Entry: \myNamespace.com\Public ShortEntry: \myNamespace.com\Public Expires in 226 seconds UseCount: 0 Type:0x81 ( REFERRAL_SVC DFS ) 0:[\SITE1_FS2\Public] AccessStatus: 0 ( ACTIVE TARGETSET ) 1:[\SITE1_FS1\Public] AccessStatus:0xc00000be ( TARGETSET ) 2:[\SITE2_FS2\Public] ( TARGETSET ) 3:[\SITE2_FS1\Public] ( TARGETSET ) Entry: \MYNAMESPACE.COM\sysvol ShortEntry: \MYNAMESPACE.COM\sysvol Expires in 0 seconds UseCount: 0 Type:0x1 ( DFS ) 0:[\SITE1_DC1.MYNAMESPACE.COM\sysvol] ( TARGETSET ) 1:[\SITE1_DC2.MYNAMESPACE.COM\sysvol] AccessStatus: 0 ( ACTIVE ) 2:[\SITE2_DC2.MYNAMESPACE.COM\sysvol] ( TARGETSET ) 3:[\SITE2_DC1.MYNAMESPACE.COM\sysvol] ( TARGETSET ) |
Dfsutil Output from Site1_bzt1b
Base on the above information, we would like find out
- From the above dfsutil info, one of the node, SITE1_FS1, is indicating “AccessStatus: 0xc00000be ( TARGETSET )” . What does this access code meant ? Will it have any impact on the DFS performance ?
- If all the DFS nodes (Site1_fs1 and Site1_fs2) in AD site 1 goes down, will DFS clients be automatically route to the DFS nodes residing in AD SITE2
- Should the Site1_fs2, goes down, and Site1_fs1 is still working, how can we force DFS clients to target DFS nodes residing in AD SITE2 when it access the DFS namespace without shutting down Site1_fs1
↧
Windows 2012 DFS stopped working for one machine after reboot
I have 2 Windows 2012 servers that replicate a folder two-way sync using DFS. They have done so happily for a few years now. Recently, both servers suffered a power failure. After getting back online, the event log states that replication on both machines have resumed and there is nothing wrong.
However, currently there is no replication happening from machine A -> B. Strangely, files created on machine B do get replicated to machine A. So replication machine B -> A is working correct whereas A-> B does not.
I have checked health, topology, and nothing is reporting errors. The backlogs for both machines are empty. The files in c:\windows\debug\ also doesn't show anything with the word 'error'.
I tried stopping/starting DFS service. Clean rebooting machines. Filesystem checks (all ok). Force resume replication. I really don't have any ideas anymore.
So if someone does have an idea, I'm happy to hear them!
Regards,
Erwin.
↧
↧
Utility to migrate user directories from Server 2003 to Server 2012 R2
Are there any utilities that help streamline migrating users from a Server 2003 server to a Server 2012 R2 server? We currently map a drive for their home directory, then group policy uses that path to build the path to redirect their Desktop and
Documents folders to.
↧
About DFSR performance & efficiency
Hello everyone. Maybe some guru's know how DFS-R works ;).
I'm very interested in DFS replication for a very large number of small files, whick appear every day. (let's say +10000-100000 files < 64K). During last checking of replica backlog & scom reported about large number of non-replicated files. For instance, I have a replica between two 2012 clusters, they have 1 Gbps link and replication schedule is set to 256 Mbps night \ 32 Mbps day. Replica cannot complete replication in 1-2, even 5 days (i'll say never). That's why it is very interesting, is it worth use DFSR for such files, or I need to search third-party product.
Second question - how DFSR are 'divided' between replication groups? If we have 2-5 replica groups on the same servers, wil they work independently or they are wainting for each other?
↧
Reenabling Previous Versions after being disabled for an extended period
Have a server that was in-place upgraded from 2008 r2 to 2012 r2. Went a few months before I realized that during the update Previous Versions settings did not come across. Looks like the old shadow copy is there but not active. Is it safe to just reenable
Previous Versions on the volume in question?
↧
DFS Restore command fails: Access Denied
I have 2 DFS Servers with Replication on the 2 of them
File01 and File02 with File01 as the primary
I performed a robocopy that deleted some user profiles so I tried to restore the files but I am getting access denied errors on DfsrPrivate folder.
I followed the guide here:
I took ownership of the whole folder and subfolders to Domain Admins on File02
Opened PS in Admin mode
Restore-DfsrPreservedFiles -Path "C:\RF01\DfsrPrivate\ConflictAndDeletedManifest.xml" –RestoreToOrigin
Error: Restore-DfsrPreservedFiles -Path "C:\RF01\DfsrPrivate\PreExistingManifest.xml" –RestoreToOrigin "Folder/Filename" is denied.
How can I resolve this issue? Thanks.
↧
↧
How to setup both a separate [public] Anonymous Login share (without login prompt) and a [private] Authenticated User share (with login prompt) on the same server
Hey All,
Any help in resolving this issue would be greatly appreciated.
Environment Details:
Windows Server 2012 R2 (Non-domain)
Two shares:
\\server2012\anon_share
\\server2012\private_share
Intended Solution:
I have two shares \\ server2012\anon_share and \\ server2012\private_share. For the anon_share would like to allow
users to connect to it anonymously and without a login prompt (e.g. as a symbol server), for the private_share would like it so that you are always presented with a login prompt (e.g. user folder shares) and anonymous users are blocked.
For \\ server2012\anon_share would like the following functionality:
- Anonymous Logon without Login Prompt
For \\ server2012\private_share would like the following functionality:
- User Login Prompt when attempting to connect
- Anonymous Logon is not allowed
- Restricted to list of Authenticated Users (existing as local user accounts on the server)
Actual Results:
Have tried a number of combinations of Sharing Permissions, Local FS Permissions, and Local/Group Policy settings to no avail.
\\ server2012\anon_share (Public) Settings:
Sharing
People to Share with:
Read/Write Everyone
Read/Write Anonymous Logon
Read/Write Guest
Owner LocalAdminUser
Advanced Share Permissions:
Allow – Full Control Everyone
Allow – Full Control LocalAdminUser
Allow – Full Control Guest (server2012\Guest)
Allow – Full Control Administrators (server2012\Administrators)
Allow – Full Control ANONYMOUS LOGON
Security
Permissions:
Allow – Full Control Everyone
Allow – Full Control SYSTEM
Allow – Full Control LocalAdminUser
Allow – Full Control GuestAllow – Full Control ANONYMOUS LOGON
\\ server2012\private_share(Private) Settings:
Sharing
People to Share with:
Read/Write AuthUser1
Read/Write AuthUser2
Read/Write Everyone
Owner LocalAdminUser
Advanced Share Permissions:
Allow – Full Control Everyone
Allow – Full Control LocalAdminUser
Allow – Full Control Authenticated Users
Allow – Full Control AuthUser1
Allow – Full Control AuthUser2
Allow – Full Control Administrators (server2012\Administrators)
Deny – Full Control ANONYMOUS LOGON
Security
Permissions:
Allow – Full Control Everyone
Allow – Full Control Authenticated Users
Allow – Full Control SYSTEM
Allow – Full Control LocalAdminUser
Allow – Full Control AuthUser1
Allow – Full Control AuthUser2
Allow – Full Control Administrators (server2012\Administrators)Deny – Full Control ANONYMOUS LOGON
Policy Settings (current settings):
Enabled Accounts: Guest account status
Disabled Network access: Allow anonymous SID/Name translation
Enabled Network access: Do not allow anonymous enumeration of SAM accounts
Enabled Network access: Do not allow anonymous enumeration of SAM accounts and shares
Enabled Network access: Let Everyone permissions apply to anonymous users
Enabled Network access: Restrict anonymous access to Named Pipes and Shares
Enabled (\\server2012\anon_share) Network access: Named Pipes that can be accessed anonymously
Enabled (\\server2012\anon_share) Network access: Shares that can be accessed anonymously
Guest only – local users authenticate as Guest Network access: Sharing and security model for local accounts
Send LM & NTLM – use NTLMv2 session security if negotiated Network security: LAN Manager authentication level
I have observed one of the two following results:
- an anon_share that doesn't have a login prompt, however the private_share returns a permission denied error (no login prompt appears)
- Breaks other automation tools that depend on the authenticated login for the private share
- Breaks other automation tools that depend on the authenticated login for the private share
- an anon_share that has a login prompt (Guest), however the private_share prompts for a login as intended
- Breaks the use of the anonymous share as a Symbol Store
Any help in addressing this would be greatly appreciated! (Figure I am either missing something, or have some conflicting settings). Or if the solution I am trying to achieve is not possible using the setup I have, please let me know of any alternative approaches to achieve the same goal. Thanks!
↧
File server data migration from Windows Server 2003 to Windows Server 2008r2
Hi, I am just in the middle of planning a file server migration from Windows 2003 to Windows 2008 R2.
The files that need to come over to our new 2008 file server are our Users data from their home drives and applications, both shared folders and have permissions set as to who can access them.
I've been testing a basic robocopy script as a bat file, as follows:
@echo on
robocopy c:\test\source c:\test\target /mir
I tested this on my 64 bit Windows 7 Enterprise Laptop and was able to copy a test folder from the source to the destination and it also brought over the permissions which is what I was looking for.
The only thing that didn't seem to work was the folder shares, which did not come across.
Is there anything by way of another switch in the robocopy syntax that I'm missing to bring over the folder shares?
↧
Windows Server 2008 - Share and storage manager - automatically delete sessions?
Hi All,
We have a problem on one of our servers in which users are unable to access network drives when they log on. It comes with with an error message along the lines of you are unable to connect as their are too many connections. This is critical as major software being run on the server relies on database files stored on these network drives.
The only way to get around this is to go into Server Manager --> Roles --> File Services --> Share and Storage Management and then going to Manage Sessions and closing all of these. I was wondering if their was any way to stop this from happening or a .bat file I can use within Task Scheduler to automate this instead of me having to do it when a user calls up and complains of not being able to access the software.
Any ideas or suggestions are appreciated.
↧
Error/warning message "you don't have permission to modify files in this network location"
Hi,
We have a windows server 2008 running, and we access it via remote desktop. And there's this certain folder that all users access, and where we save important files. So, since this is where important files are stored, we wanted to disable deletion (and if possible moving) of the folder and everything under it. However, it's harder than i thought. Right now, we have the permissions "Delete" and "Delete files and subfolders" disabled already, BUT when we try to save a file to this folder, we got this warning/error message:
"You don't have permission to modify files in this network location"
The file is saved however, but there's no content. But when we try to cut/copy an existing file to this folder, it works.
Does anyone know how a workaround on this issue. I've already spent days configuring the settings, and when one works, another issue comes up. This is really frustrating.
Thank you.
↧
↧
Replace files across directories
A client was hit with a Crypto virus recently. To resolve the issue, I have restored their backup to a directory on a server. After days of replacing a corrupt with a 'clean' file, the client expects us to replace each corrupt file.
Is there a quick way to replace all .doc, .xls, .PDF, and JPG files in a directory sturcture that has been modified prior to the 22nd but not after the 24th?
A nice file copy utility may event do the job.
Thanks.
-svm
Genius is always standing in the midst of smarter company...
↧
Work Folder System Tray executable error
We're currently looking to deploy Work folders across our organization now that a Windows 7 client is available, however we receive a .Net application error when installing the Work Folders client on a Win7 machine, and configuring via Group Policy.
Details on the config:
- configured via GPO (user a member of an AD group)
- folder encryption enabled
- password policies disabled
- Folder re-direction applied to move My Docs, Favorites and Links into the Work Folders folder
Upon login or when accessing the Work Folders config app, and error appears on screen indicating WorkFoldersSystemTray.exe "Work Folders has stopped working" and "Check online for a solution later and close the program". Work folders continues to sync however and it does not appear to cause any fault from any actual application level.
The following event error is recorded in the application log:
Fault bucket 97957300, type 22
Event Name: CLR20r3
Response: Not available
Cab Id: 0
Problem signature:
P1: workfolderssystemtray.exe
P2: 6.3.9600.17021
P3: 5344cbf1
P4: mscorlib
P5: 2.0.0.0
P6: 5174de33
P7: 2d4f
P8: 2b
P9: System.UnauthorizedAccess
P10:
Attached files:
C:\Users\zak\AppData\Local\Temp\WER7498.tmp.WERInternalMetadata.xml
These files may be available here:
C:\Users\zak\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_workfolderssyste_66c088aba79d83e91b9427c7767d96cfc09acd64_09ee7f52
Analysis symbol:
Rechecking for solution: 0
Report Id: c7633f34-539f-11e4-8531-028037ec0200
The obvious sign would be the "P9: System.UnauthorizedAccess" error, however I don't know how this related to the actual application. Would anyone be able to provide assistance?
↧
Roaming Profiles and Home Directory Questions
I wanted to ask some advice before making changes to AD for roaming profiles, folder redirection and the home folder. We run Server 2008 with Windows 7 computers. The XP workstations will be gone by the end of the month so I am not worried about those.
I currently have two shares set up as Profile$ and Home$.
From my research it looks like AppRoaming, Desktop and StartMenu should be set up on Profile$ and then set those folders to Basic - create a folder for each user.
Then Documents, Pictures, Videos, Music should be configured on the Home$.
In the user's AD account Profile properties profile path would be \\server\profile$\%username% and the Home Directory should be set as connect to H: (Home$)\\server\home$\%username%
In the GPO under user configuration folder redirection the three profile folders (AppRoaming, Desktop, Start) should point to Profile$ and the rest should point to Home$.
Is this the best way to set this up? Are the paths correct? Thanks for the help and advice!
↧
Windows 2012 R2 Fileserver - Files open sometimes slow
We have problems - file open sometimes slow. Fileserver isWindows 2012 R2 (all updates) and Window 7 clients. The Fileservers are virtual and running von VMWare vShpere 5.1. (paravirtual, vmxnet3 NICs) On the fileserver
is no bottleneck CPU, RAM, NIC, DISC, TCP-Connections visable. Performance Reports are alway green, system resports are alway green. On some volumes dedublication ist enabled but this issueoccurson all volumes. Nothing interessting to see in the eventlogs.
The issue lookfollows: A useropen a filethat takes long time.Another useropensother files and has no problem at the same time! Especiallyfilesare affected thatotherusers have
in accessat that time. This affects allFiles(from simple textfilestoExcel,Word,... )
The followingthingshave beentriedwithoutsuccess:
- install the system again with default smb settings (without AV, ... )
- disable SMBv2 on Client side
- stop backup software
- move the disc files of the VM (Fileserver) to an other storage system
- move the VM to an other host
- and settings from the performance tuning guide
Does anyone have suggestionshow to geta solution?
↧
↧
Shadow copy on File server
Hello!
I have:
1) Failover cluster with 2 hosts on Windows server 2012 r2
2) Role: File Server
3) I configure shadow copy: http://technet.microsoft.com/en-gb/library/cc771305.aspx
On Computer Management - Shadow Copy I see my shadow copy and i can back to need version. But I can't see my shadow copy's on properties disk\file\folder.. Why?
C уважением к Вам, Я
↧
Windows 10 Volume Replica vs StarWind
Hi,
I know Server 10 isn't finished yet, but I am interested in the storage replica feature which I believe does synchronous synchronisation. Was just wondering if someone else had some more experience with testing this feature and could explain some of the major differences between Microsoft's replication and StarWind replication. Do we need extra hardware for the MS way, anything special? can it be run on a 2 node cluster? if it does the same job, what reasons would we have to purchasing a third party product, can the MS implementation be a virtual SAN and be competing against the likes to StarWind and DataCore?
I would be interested to know the technical details of the differences, and why one is better than the other.
Cheers
Steve
↧
Do changes in shares get logged?
Hi there,
Recently we found out Access Based Enumeration on all DFS namespaces has been disabled. We don't know how this happened. We would like to see some log files with changes in DFS namespaces or shares.
Does anybody know where we can find log files? I cannot find anything in the Event Viewer.
↧