Recently set up a new file server (VM running Server 2012 R2). Server has separate OS and Data partitions (each on different physical disk array) and I've enabled Shadow Copies on the Data volume. Server is also running DFS/DFSR and replicating the files on the Data volume with other file servers. The VM is running on Hyper-V host, which is also Server 2012 R2.  

Each day, when a shadow copy snapshot is taken, the file server generates an ESENT Event ID 508 similar to the following:

DFSRs (1192) \\.\D:\System Volume Information\DFSR\database_5464_BC1C_64BC_2B2\dfsr.db: A request to write to the file "\\.\D:\System Volume Information\DFSR\database_5464_BC1C_64BC_2B2\fsr.log" at offset 4075520 (0x00000000003e3000) for 4096 (0x00001000) bytes succeeded, but took an abnormally long time (25 seconds) to be serviced by the OS. This problem is likely due to faulty hardware. Please contact your hardware vendor for further assistance diagnosing the problem.

So first thought was maybe I do have faulty hardware. But I set up a second file server (on separate physical host with identical hardware) and am seeing the same behavior on that server as well. The odds of both servers having faulty hardware are pretty low, so it must be my configuration.

I noticed the Shadow Copy storage area was set to the same volume as the snapshot being taken, so I changed that to use the OS volume instead, but that didn't fix it:

Then I tried turning off Windows write-cache buffer flushing on the Data volume, but that didn't help:

Tried allocating more (and static) memory to the server, rather than having it use Dynamic Memory, but no change there either. 

Using Hyper-V manager, tried moving the vhdx file from IDE controller to SCSI, but no change there.

Anyone else have any suggestions/insight into what the problem might be or how I can fix it?

Shaun

Hi,

I have a file server where I assigned NTFS permissions on hundreds folders for specific users. Now, I have a lot of users who left the company and I would like to remove permissions. Is there any method to delete all permissions for specific user from the entire server? or... delete permisions for all inactive users? 

I can't delete AD users and as far as I know, the SID still remain on security tab if I'm removing users from AD.

Thank you.

Hi guys, 

Scenario : DFS not working

Source Server = Windows 2012 R2 Standard

Destination Server = Windows 2012 R2 Standard

Both the servers are in different AD sites.

Verify Topology = Ok

I tried to create a set of replicated folders

Getting this error when i run diagonistic report.

tfernandes

Hi There,

Massive shot in the dark here but I am struggling with a pretty major issue atm.  We have a production file server that is hosted on the following:

Dell MD 3220i -> iSCSI -> Server 2008 R2 Hyper-v Cluster -> Passthrough Disk -> Server 2012 R2 File Server VM

Essentially 3 times now, roughly a month or so apart.  The file server stops accepting connections.  During this time, the server is perfectly accessible through rdp or with a simple ping.  I can browse the files on the server directly but no-one appears to be able to access the shares over SMB.  A reboot of the server fixes the issue.  

As per a KB article I removed nod antivirus from the server to rule out a conflicting filter mode driver after the second fault.  Sadly yesterday it happened again.

The only relevant errors in the servers log files are:

SMB Server Event ID 551
SMB Session Authentication Failure

Client Name: \\192.168.105.79
Client Address: 192.168.105.79:50774
User Name: HHS\H6-08$
Session ID: 0xFFFFFFFFFFFFFFFF
Status: Insufficient server resources exist to complete the request. (0xC0000205)

Guidance:

You should expect this error when attempting to connect to shares using incorrect credentials.

This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.

This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled

and

SMB Server event ID 1020
File system operation has taken longer than expected.

Client Name: \\192.168.105.97
Client Address: 192.168.105.97:49571
User Name: HHS\12J.Champion
Session ID: 0x2C07B40004A5
Share Name: \\*\Subjects
File Name:
Command: 5
Duration (in milliseconds): 176784
Warning Threshold (in milliseconds): 120000

Guidance:

The underlying file system has taken too long to respond to an operation. This typically indicates a problem with the storage and not SMB.

I have checked the underlying disk/iscsi/network hyper-v cluster for any other errors or issues, but as far as I can tell everything is fine. 

Is it possible that something else is left over from the NOD antivirus installation?  

Looking for suggestions on how to troubleshoot this further.

Thanks

This is on Server 2012 R2

Try to delete this file:  con.spc.98-8.PDF
And I get an error message saying "Invalid File Handle".
Can't rename the file.  Get the same message.
Can't view the NTFS permissions for the file.
I Googled and saw a suggestion to use FSUTIL;  tried - FSutil reparsepoint delete <filename>
And I get "this is not a reparse point"
I cannot copy or move the file.
I ran the Attrib command.  It only has the archive bit set.

I cannot get rid of this file.  Any suggestions?

Here at work we have a storage server (windows server 2003) VM in Hyper-V. We recently installed a new VM in Hyper-V with server 2012 R2 and would like to migrate our storage server to this new VM. We have a a virtual HD allocated to the 2003 server with all of our shares. Would the following steps work for migrating between VMs?:

Copy Volume registry info from 2003 Storage Server

Shutdown 2003 Storage Server

Allocate the VHD to the new VM (2012 R2)

Import the Registry info to retain all shares and permissions

Update the IP on the new VM to match the old VM. 

Done....

Does this work or should I approach it differently?

Hi everyone,

I am just wondering if there is a way of getting the USB devices to mount on to a certain location, so that AutoPlay doesn't need to pop-up all the time. This includes with a message on the bottom right corner and automatically open the file content that is on the USB stick. Or it could have the message on the bottom right corner until a user clicks on it before it opens File Explorer with the file content that is stored on the USB stick.

For example, a balloon message pops up saying: "USB device name is mounted to U: " then opens up the file content off from the USB stick (you don't have to make it so it comes up immediately, make it so that a user clicks on it first before opening it)

Is there a way of doing this by the Group Policy or would you have to do this through the registry (doing this on the server, so it can be deployed to all computers on our network)

Many explanations and discussions would be very helpful!

Thanks,

Ben

Regards, ~Benjamin Hall

Hi

I am facing some issue with DFS on 2008 server R2 . when i try to add namespaces to display getting error an item with the same key already been added, how to resolve this .

-Roshan

I have 15-20 number of user groups. Please consider a group as a team. If i create a share folder for a team 1, i need team 1 to access to that folder and other team's shouldn't have access for that folder. I can able to do that by adding that group and giving them DENY permission for that folder for user group's. And coz of the number of group is high,its very difficult to add each and every group for every shared folder and deny the access. Is there any other way around for deny permission's to a folder for user group.

Thanks in advance,

Rajendran.K

Hi everyone,

Do it possible work folders synced data access from https (web based)?

As like One Drive. We can access web-based and sync application based both.

Regards

Tariq Muhammad

The member server is not getting replicated insipte of having correct configuratio.

dsdiag to find backlog files throws the below error :

[ERROR] Failed to execute GetVersionVector method. Err: -2147217406 (0x80041002)

Please help.

Hi there,

there's a kinda complicated request from IT Security guys:

Shared Folder on Win 2012 R2 Fileserver has a set of NTFS permissions for various groups/users.

ITSec group needs access to the shared folder to audit NTFS permissions (view security tab in properties of a file/folder)

But at the same time ITSec group doesn't want to be able to read the actual file (e.g. open a docx,pdf,whatever)

Trying to get my head around this, but so far no luck.

Any help appreciated

I was recently testing command lines for Robocopy on Windows 7. I failed to have quotations around the path and file name of the log file, so it was rejected as an invalid parameter.

D:\K_DRIVE\Delphi XE projects\Backup Menu\SynchronizeFiles.log  << this is the full path for the log file that I asked for - not part of the error message. I don't see how it generates any improper command line switches.

Now, every time the machine reboots, Robocopy appears to run with one of the bad command lines and tries to display the resulting error file. I have to tell it to use Notepad, then the error messages looks like this: (the first time this happened was May 6 and the error is always May 6, so perhaps it is just displaying the error every time the machine boots?) Notepad does not show a file name in File > SaveAs so it appears to be generated during each boot.

-------------------------------------------------------------------------------
   ROBOCOPY     ::     Robust File Copy for Windows     ::     Version XP010
-------------------------------------------------------------------------------

  Started : Fri May 06 17:07:49 2016

   Source - D:\My Documents\Diary\
     Dest - X:\diary\

    Files : XE
        
  Options : /TS /L /TEE /S /E /COPY:DAT /PURGE /MIR /XA:ET /R:1 /W:1

------------------------------------------------------------------------------

ERROR : Invalid Parameter #13 : "projects\Backup"



       Simple Usage :: ROBOCOPY source destination /MIR

             source :: Source Directory (drive:\path or \\server\share\path).
        destination :: Destination Dir  (drive:\path or \\server\share\path).
               /MIR :: Mirror a complete directory tree.

    For more usage information run ROBOCOPY /? or read Robocopy.Doc.

NOTE: Read "True Replication" in Robocopy.Doc prior to first use of /MIR !
****  /MIR can DELETE files as well as copy them !
=============================================================

I have searched the registry, taskmanager, event viewer, msconfig, and StartupCop. I can find nowhere that Robocopy is being run. I have never deliberately used the scheduling commands for RoboCopy. I've also searched the hard drive for some of the text in this message. No luck.

Can anyone explain where this bogus message is coming from during bootup? And better yet, how to stop it?

Using 2012 R2 Essentials.

My storage pool is 8 jbods & 2 SSD. Mirror with Fixed Provisioning. Capacity 1.62TB Allocated 1.62TB Tiered With a 1GB Wright-Back cache ReFS

Dashboard reports "One or more new hard drives are connected to the server."

Disk manager shows a 1661.81GB blue Basic disk 14 in read only. It has the same capacity as my Storage Space volume (basic disk 11) except the unallocated space is different.

Access to my storage space drive is not affected.

If I reboot the server, the new disk 14 will usually disappear until the next reboot or two.

What should I do to assess the health of Storage Spaces? Is windows seeing the Storage Space VHD and reporting it when it should be hidden?

I appreciate feedback and any help. 

Hello,

call me paranoid, but I would like to have a combination of truecrypt and bitlocker enabled on the same drive. With using NTFS no problem, but with ReFS the performance dropped dramatically. I want to use ReFS for its cool features, especially combating bit rots in combination with storage spaces (see below after cases). Here is what I have done:

First, I created a storage space/pool (mirror setup) with 2x4TB drives. I didn't touch anything here again after creation for any of the next cases described.

a) format drive with ReFS, activate bitlocker, create a truecrypt file volume on that drive, format it with ReFS

=> write speeds at ~5MBpS

b) format drive with ReFS, activate bitlocker, create a truecrypt file volume on that drive, format it with NTFS

=> write speeds at ~5MBpS

c) format drive with NTFS, activate bitlocker, create a truecrypt file volume on that drive, format it with ReFS

=> write speeds at ~80MBpS - nice! Thats absolutely ok

d) format drive with truecrypt (whole disk encryption) with ReFS

=> cannot enable bitlocker on that drive thereafter. they dont work together like this, but write speeds are around 80 as well

e) just use bitlocker

Alright so I have the option to go with e) and everything will probably be just fine. Since being paranoid I would, however, prefer case c) and since my current setup looks like d) I would prefer d over e as well.

I read:

"To combat bit rot, ReFS (again, when combined with Storage Spaces) uses its "scrubbing" feature to read all copies of a file in the array and compare their metadata with one another. If a corrupted file is found anywhere in the array, it is replaced by a good copy" (link: http://www.anandtech.com/show/5433/microsofts-refs-filesystem-for-windows-8-server-explained).

Now, my questions are:

1) In scenario d I do have ReFS + storage space but with a truecrypt layer inbetween. Will the array repair itself (bit rots)?

2) In case c I have an ReFS drive in a NTFS environment. So I assume the array won't repair itself (bit rots)?

3) If you cannot answer 1/2 is there a tool or c-function or powershell command or something to test if an array can repair itself?

4) Does the bit-rot-combating feature of storage-spaces+ReFS work with mirror setup at all, or only with parity space?

Please dont discuss truecrypt vs veracrypt vs bitlocker etc

Thank you for any help

Hello,

We need the patch kb888419 to be run on our server. Please send me the patch as soon as possible.

Greetings

Setup:

Six node Cluster, windows 2012 r2 OS w/latest patches, two nodes that have direct control over the Storage bays and the other four nodes use SMB/CSV to communicate with the storage through the storage control nodes. Storage is three drive bays with enclosure awareness enabled and a mix of spinning disks and SSD's (24 spinners and 6 SSD) evenly spread among the bays and connected to the Storage control nodes via HBA's. One pool with all drives assigned to it and two vDisks in Mirror 2 mode and added as CSV storage to the cluster.

This cluster is dedicated to running VM's, mostly on the Non-storage control nodes but all six nodes run VM's via Hyper-v and Failover Clustering.

Problem:

5120 event kicks out form seemingly random hosts, loss of connectivity to one of the Virtual Disks hosting most of the configs and OS VHDX's, VM's stop, Host moves VM's, manual intervention on some VM's to recover, then all is well until next time. Whole outage is usually less than ten minutes.

We had originally thought we had a networking issue and took some steps to cleanup the networking connections and still suffered another event.

Went back and gathered event logs from all nodes, merged and time sorted them. This was a very useful task (and is now a powershell script). Now we see that a drive (HDD) is causing entries in the logs and while we don't see a 5120 every time we see this drive entry, we don't see a 5120 without a drive entry. 

This leads us to suspect a drive problem but SS isn't flagging a drive as failed, damaged or otherwise wounded.

Ran the following command in Powershell:

Get-PhysicalDisk | Get-StorageReliabilityCounter |  ft DeviceId,ReadErrorsTotal,ReadLatencyMax,WriteErrorsTotal,WriteLatencyMax -AutoSize

and got a list of all the drives. One in particular stands out. mini snap shot of output:

DeviceId ReadErrorsTotal ReadLatencyMax WriteErrorsTotal WriteLatencyMax
-------- --------------- -------------- ---------------- ---------------

12       0                         1205 0                           1147
13       0                         2030 0                           1782
16       0                         1849 0                           1741
25       0                       240825 0                         240775
10       0                         1025 0                            978
8        0                         1405 2                           1329

In the list above disk 25 has a far greater incidence of latency. It is also the disk that keeps alerting in the logs as mentioned above.

So, we want to replace this drive. 

Question: How?

This doesn't seem to be as easy as a simple physical swap as the drive is part of a Storage Pool and is used by multiple Virtual Disks. Both are maxed out in available space (little design flaw we didn't catch until a year after building it out).

So, how do we mark a drive for removal, remove it and then replace the drive safely without affecting the size of the allocated Pool and vDisks?

I have seen processes for parity, but they don't seem to match up directly with our type of layout.

If someone could point me to a tech article that handles the above type of scenario or possibly list a set of PS commands that we could follow, we would really appreciate it.

Thanks

Mike