Quantcast
Channel: File Services and Storage forum
Viewing all 10672 articles
Browse latest View live

Cannot Access Network Shares After Windows Update

$
0
0

Just updated my windows 2012 r2 server but now cannot access the shared drives/folders on my other machines.

HELP!!


AD change read permission for non-admin users

$
0
0

Hi,

I have requirement to read an changes in AD, for example if user gets deleted or modification to group happens I should be able to read the same in my IBM Tivoli LDAP tool in rad only mode.


Regards, Deepak Sharma

DFSRDIAG as a user - permissions

$
0
0

I am using a script on a scheduled task to check DFS Backlog counts and to alert if the count is over 1000.  I have the script working and it does a great job of checking all the replicated groups dynamically and alerts.

Moving this to a scheduled task has been an issue.  For security reasons we want to run this task as a service account (dummy user account) but it isn't running.

I have give the user account the permissions outlined here...

https://blogs.technet.microsoft.com/filecab/2006/07/06/delegating-permissions-to-run-dfsrdiag/

1. Added to local dcom user group - both servers

2. added the list WMI permissions for the rootmicrosoftdfs (also added to root as a test)

3. in DFS Management Console added user account to "Replication" and also an individual replication group I set up for testing "AAA"

4. Gave the user log on as a batch job rights

Still not working.

I opened a cmd.exe as the user account to test dfsrdiag and all I get is "Operation Failed" nothing in the logs... 

---

C:\Windows\system32>dfsrdiag backlog /receivingmember:DFS01 /sendingmember:DFS02 /RGname:AAA /RFName:AAA

Operation Failed

---

Can anyone suggest a way to track down the permission issue?

Thanks

John


Slow syncing on a new member after DFSR Cloning

$
0
0
Hello.

I am experiencing some strange behavior of DFSR on a new member after DFSR Cloning.
So the situation is next: there are 4 different members for the replication group RG01 - SRV01, SRV02, SRV03 and SRV04.
SRV01 - is the upstream server (users change files on that server), SRV02, SRV03 and SRV04 - are downstream servers for that RG01 group. All servers are configured in a full-mesh topology. All servers are Windows Server 2012 R2. The size of RG01 folder is up to 2TB.
SRV01, SRV02 and SRV03 are fully synced for that RG01 group and all changes are propagated between them immediately. I've performed a DFSR Cloning for the new member SRV04 using this step-by-step guide:
https://blogs.technet.microsoft.com/filecab/2013/08/21/dfs-replication-initial-sync-in-windows-server-2012-r2-attack-of-the-clones/
The DFSR Cloning process went according to the guide.
This is the second time I've performed DFSR Cloning and the first one was successful.

The problem that I am talking about is the slow synchronization of this new member SRV04 with other members.
Below is what I was able to investigate by myself:
1. There are no events in Event Viewer on SRV04 that should be mentioned. There were only lots of 4412 events "The DFS Replication service detected that a file was changed on multiple servers. A conflict resolution algorithm was used to determine the winning file. The losing file was moved to the Conflict and Deleted folder." after adding this SRV04 to the RG01 group which is pretty much normal according to the guide.
2. On other servers there were also lots of events 4412 and events 4304 "The DFS Replication service has been repeatedly prevented from replicating a file due to consistent sharing violations encountered on the file. The service failed to stage a file for replication due to a sharing violation."
3. For some unknown reason I've found almost 21.5k files or folders in DfsrPrivate\PreExisting folder on SRV04 after the cloning process which is so weird because I am 100% sure that these files weren't modified on downstream server during the cloning process.
4. DFSR backlog between SRV01, SRV02 and SRV03 servers are empty. Backlog from SRV01 to SRV04 is always more than 1.5k files. When there are too many changes on upstream server during the daytime the backlog count grows up to 30-40k files and it only grows during that time. It looks like that it is reducing only during the night, when there are almost no activity on upstream server. At night the backlog is reducing to 1.5-2k files (but I've never seen it completely empty in the past 7 days).
5. "dfsrdiag replicationstate" command on SRV04 shows 768 scheduled files in queue (256 files from each of 3 inbound connections) all the time. They are always there. It looks like that filenames in the this output change from time to time, but it is still 768 files scheduled. "dfsrdiag pollad" command doesn't change anything.
6. I can see a lot of entries in C:\Windows\debug\Dfsr0100.log file on SRV04 like these:

20160926 12:58:34.804 11736 MEET  4274 Meet::ProcessUid Uid related found uidRelatedGvsn:{394700C7-AA12-4FC0-A143-3EBFC065AE46}-v34390 updateName:522125 uid:{7A2FC06E-B6EB-4864-8F0E-8CE82B131573}-v61362 gvsn:{2FEE1F47-6FAC-475B-8810-C56DDB83090C}-v70913144 connId:{C16EF5A3-EA5D-49CB-9674-757E9EB9D5EB} csName:RG01
20160926 12:58:34.804 11736 MEET  6356 Meet::LocalDominates Remote version dominates localgvsn:{394700C7-AA12-4FC0-A143-3EBFC065AE46}-v34390 updateName:522125 uid:{7A2FC06E-B6EB-4864-8F0E-8CE82B131573}-v61362 gvsn:{2FEE1F47-6FAC-475B-8810-C56DDB83090C}-v70913144 connId:{C16EF5A3-EA5D-49CB-9674-757E9EB9D5EB} csName:RG01
20160926 12:58:34.804 11736 MEET  6225 Meet::CheckInSync -> WAIT Related record not in sync with file system. relatedRecordUid:{7A2FC06E-B6EB-4864-8F0E-8CE82B131573}-v61362 updateName:522125 uid:{7A2FC06E-B6EB-4864-8F0E-8CE82B131573}-v61362 gvsn:{2FEE1F47-6FAC-475B-8810-C56DDB83090C}-v70913144 connId:{C16EF5A3-EA5D-49CB-9674-757E9EB9D5EB} csName:RG01 csId:{C953FA71-E2FB-40AF-ABEF-0E5A8107FD7F}

I am pretty much sure that sync issues and these entries are interconnected, but I don't know why are they came all the time and what can I do.

7. SRV01, SRV02 and SRV04 are also configured as members for RG02 group on separate drive volumes which works perfectly fine (initial sync was performed to configure them).

That is pretty much all I was able to find during my research. And I need your help to solve this issue because basically I don’t know what should do and what all these messages in Dfsr0100.log mean. Please advice. Thank you in advance.

DFS Moved Files

$
0
0

I have two file server both 2012r2.  I installed the DFS Namespaces and DFS replication roles on both servers.  I then created a simple namespace called ITDFS and added a folder to the namespace called IT Test1.  I added the second server from the DFS managment console and added a folder by the same name to it.  I then added a replication group via the wizard.  I was able to add text and excel file and have them replicate between the two servers.

About an hour later I received a call that folders (on the server that I initially configured DFS on) were missing.  After using a utility called tree size I was able to see that several hundred gigs of software was moved into the DFSR/Private/PreExisting folder.

1.  At no point did I ever configure this set of folders to be included in DFS replication.  It was several folders deep so there is no chance I accidentally navigated to it during my DFS testing.  Also, I would have never selected some 200 folders at a size of 347 GB for a simple DFS test.  I have no idea why these files would have been moved to the preexisting folder, which I understand is readying the files for replication.

2.  I cannot get into the DFSR private folder for the life of me.  I have forced the permissions on it numerous times to no avail.

Any idea why my files would have been moved and how do I get them back?


~Eric

Slow copying to network shares

$
0
0

Hi all,

We are an SMB, and have installed new hardware to run our virtual servers.
We run 2 ESXi hosts, and one of them, a Windows SBS 2008 SP2 VM is running.

The new SAN and its 10gbe connection to the hosts has increased the disk performance of the virtual machines a lot :
The SBS 2008 VM can now read and write to disk (locally) at about 500MB/s.

As our entire network is 1 gigabit, I was expecting that the clients could now copy from and to the network shares (on the SBS 2008) at 110MB/s. However reading is only at 80MB/s and writing at 60MB/s. I am trying to find out why this netowrk copy performance is throttled.

I think it has to do with a setting on the SBS 2008, but I can't found out which.

These are the things that I have already tried :

- Check that it is indeed the SBS 2008 VM that is throttling performance : I have created a network share on a VM (Win7) that is running on the same host as the SBS 2008. so the Win7 VM is running 'next to' the SBS2008 VM. Clients can copy to the share on this VM at 110MB/s. So this means that there are no client, network or host bottlenecks.

- The SBS 2008 VM is running on ESXi 6, is hardware version 8, has an VMXNET3 network interface. Same as the other VM to which we can copy at full speed.

- SBS 2008 has 8 cores at 32 GB RAM dedicated. During copying the CPU is not maxing out.

- Same anti-virus and anti-malware is running on SBS 2008 and Win7 VM. So anti virus is not bringing down performance.

- No bandwidth limits at Esxi level. Also I tried disabling QoS at SBS 2008 level. Did not help.

- SMBv2 was disabled. Enabled and rebooted. No help.

- All test were done at night (no clients/load)

- Disabled gpo 'digitally sign communications (always)

Can anyone please advise?

thx.

"Target account name is incorrect" error when mapping a network drive.

$
0
0
Hello,

First, I apologize if I did not include enough details, I am not sure what to include.

I am looking into an issue at my friend's business. He has a Windows Server 2008 R2. Some Windows updates occurred at 3 AM and ever since then, "Target account name is incorrect" error message comes up when attempting to access a network drive via all the computers. Can't find the network mapping component in the Group Policy Management area to map the drive out through a group policy.

The drive in question was mapped out into each computer individually through "Map Network Drive" previously. Removed it and tried to re-add it on one of the computers, the same error occurs when attempting to add it through "Map Network Drive".   The computers its occurring in have Windows XP, 7 and 10.
The Driver in question shows up under Share & Storage Management.  Shows also that everyone has permission.

I then tried to add it via Group Policy Management and did gpupdate /force.  First, I got "Error (0x80070070) occurred saving settings file. There is not enough space on the disk".  I ensured that the quota management is disabled. When attempting to gpupdate /force , I got this error "the processing of group policy failed. Windows could not authenticate to the active directory service on a domain controller".

I hope someone can help me look into it. Thank you so much. My apologies if I missed out any details, not sure what else needs to be included.

Disable "Security tab" in shared folders for specific users - windows server 2012

$
0
0

Hello everyone,

I'm trying to disable "Security tab" in shared folders for specific users, so they don't know which permissions is linked to him or for his colleagues.

I'm using windows server 2012 R2 and applying to windows 10.


Add multiple files to include in FSRM File Group

$
0
0

Hi,

I have implemented File Screening Management in our File Server (Windows Server 2008 R2). I would like to add multiple file name patterns to aFile Group. However, the GUI only allows me to add Files to include one-by-one. I have quite a list of file name patterns, and I wouldn't want to add them individually to each file server.

Is there a way to add file name patterns to the Files to include -list in bulk?

Regards

lakend

Accessing network share broken but ip address works

$
0
0

Hi all,

I have a few remote users that from time to time have trouble accessing network shares on our file server. Normally the path to the network drive is, for example, \\domain.local\dfs\NameOfShare. However, some users are having problems connected to it. When I have them edit the path to reflect the IP address of that server they can connect to the share. For example, \\10.0.0.1\NameOfShare. 

This is only affected some remote users but not all. They are connected through a VPN but I don't believe that to be the issue. 

Any ideas?



Windows 2008 R2 upgrade from 2003

$
0
0
I have moved my ISCSI volumes from connecting to a Windows 2003 server over to connect to the Windows 2008 R2 server.  All of the rights came over for many of the volumes, but there are some which I can not access at all, even if I log in as local administrator or a domain admin.  It will let me look at the file permissions but I get an access denied when going into the folder or volume.  I have also tried to reset the whole drive with permissions and taking ownership and I still get the same thing, permission denied.

SanDisk

$
0
0
<g class="gr_ gr_92 gr-alert gr_gramm gr_run_anim Grammar multiReplace" data-gr-id="92" id="92">Disk</g> does not open. Tried another and same results. How do I check the computer to see if it is trying to read the San Disk?

User Appdata folders appearing on DFS servers

$
0
0

Just noticed that user appdata folders are appearing on our 3 DFS file servers. For random users, not all of them. Don't recall ever looking at the User folder on these servers so don't know how long they've actually been there.

My first thought was that a GPO redirection could be causing this but the only ones we applied are for the user documents folders.

Notes:

 - These are Windows 2008 servers

 - We do not use roaming profiles

 - There are no files under the AppData subfolders, just the folders themselves.

Any ideas are appreciated.

Thanks in advance,

BL


bl




Strange issues trying to rename folder in DFS Namespace - both old and new folder names are showing up.

$
0
0

Environment: All servers involved (and domain functional level) are 2008 R2 SP1

I have a namespace with 14 namespace servers.  1 is at corporate headquarters, the other 13 are each at a remote site.  Each remote server is a DC, File/Print server, DHCP, etc....

Namespace is optimized for scalability.

There is a folder in the namespace for each remote location.  Each namespace folder has 2 targets - a shared folder at corporate, and a shared folder on that site's server.  The folders replicate.

I use MMC with the Share & Storage Mgmt + DFS Mgmt snap-ins.  I went through and renamed each folder in the namespace.
The new names were not showing up for remote clients in the namespace.  Content in the folders were up to date however. This was for a couple of days.  During this time, I restarted DFS services on the remote servers and rebooted clients to no avail.

I did not modify the names of any of the shares, or the names of the actual folders in the file system. ONLY the name of the folder as it appears in the namespace.

I wound up running dfsutil root forcesync \\remoteserver\namespace\
After I did this, the new folder names showed up, but this was in duplicate.  The old folder names were still in the namespace.

What's weird: if I go into the DFS Management console on ANY server, the old names do not appear there.   If I look in the C:\DFSRoot\Namespace\ folder on the remote servers, there are links in there for both new and old names.

When I try to run dfsutil link remove \\namespace\OLDname, I get an error that the command could not execute the command successfully - system error - element not found.

Here's the most frustrating part.  This link: https://support.microsoft.com/en-us/kb/2619531 describes my problem almost to a T.  However, it says that it's only applicable to Server 2008 SP2.

Any guidance would be greatly appreciated.

Thanks!

-Brad

No DFSR Event ID 4104 and many 4412

$
0
0

Greetings,

I followed the document Export a Clone of the DFS Replication Database to the letter.  I was really impressed with how quickly the initial sync progressed.  Many GB of data synchronized in a matter of hours instead of days.  However, there were a few peculiarities:

  1. I got about 15,000 instances of event id 4412 on the source server, despite the only pre-existing data being that which I robocopied exactly as the document explained (or actually as the Export-DFSRClone explained).
  2. The last 24 files in the backlog just will not sync.  The are the only ones in the backlog and have been for 8 hours.
  3. The diagnostics report for the replication group shows the folder is 'Normal' on both servers.
  4. There are a few locked files but I'm sure that's just an anomaly on the source server.

The destination server is brand new and has all the hotfixes installed (as does the source).


DFSR read only validation.

$
0
0

I currently have a setup like the one below and DFSR

console says it's disconnected.  When I open the interface to see the disconnected members, there are 2 sets of connected members.

Based on the documentation I am reading it would seem that this is a valid configuration.

All RW members have bi-directional connections.  RO members have a single direction connection from their RW member.

Thanks,

C


-Chris

2012R2 file server "guest access" not working this week

$
0
0

Hello,

I have a 2012R2 server with some shares on it that was setup to use "anonymous login" (which shows at the server as the guest user) for authentication. All of a sudden, this week we are getting many access denied errors on Win10 clients. I understand that there are now also some Win7 clients with the issue. The workflow used to be 1) Access \\server in explorer 2) see the shares without entering any creds. None of the clients are on our domain so this is the way we set it up to not have to used credentials.

When the credential dialog pops up, I can put in any username without a password and it displays the shares. If I just click enter without any username or password, it gives me the access denied message. Same behavior at the commandline with "net view" or "net use"

At first, I figured it was the 1607 Win10 update, but now I've found some 1511 clients that are doing it. Worse is that I have at least one Win10 1607 client that works just fine with no creds. Could this be something that changed as part of patch Tuesday? If I can have some help in troubleshooting I'm very willing to provide logs.

DFSR

$
0
0
Running DFS between  a couple w2k12 servers. Everything is working. We moved some old data to archive. Deleted the name space, deleted the replication group and deleted teh data off the servers. Under system volume dfsr\private are directories with a lot od data that we cant identify. When we run WMIC.EXE /namespace:\\root\microsoftdfs path dfsrreplicatedfolderconfig get replicatedfolderguid,replicatedfoldername our active replication folders show up. Can the unidentified directories be deleted?

DFS-R WMI duplicate results - Wmic /namespace:\\root\microsoftdfs path dfsrreplicatedfolderinfo

$
0
0
Hello everyone,

I am facing a very weird issue with DFS-R. Recently I had to recreate two Replication Groups (Data Collection) in order to restore file replication after a disaster with one of the servers. Everything went well during the whole process and both servers are already in sync with each other. However, when I run a WMI query (Wmic /namespace:\root\microsoftdfs path dfsrreplicatedfolderinfo get replicationgroupname,replicatedfoldername,state) to see the status of the Replication Groups, I see duplicate values for a given RG with a status of '0' (Uninitialized). I have already checked everything I could... If I open the DFS Management console I don't see any duplicate Replication Groups there; the contents of the XML configuration files under "C:\System Volume Information\DFSR" & "E:\System Volume Information\DFSR" - being the latter one where the replicated data resides - are OK (no duplicate entries); and on registry (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\DFSR), I also only see what's really configured (again, no duplicate values).

I strongly suspect it's some sort of left over on the WMI repository that was not handled properly by DFS-R when the Replication Groups were re-created, but as I've never had to delete spefic instances from WMI, I am wondering whether someone out there has already faced the same issue or has any clues on how to get rid of these disturbing duplicate results being returned on "Wmic /namespace:\root\microsoftdfs path dfsrreplicatedfolderinfo get replicationgroupname,replicatedfoldername,state".

Just wanted to emphasize that replication is working fine between the two boxes (in both directions), the only issue being faced here is the duplicate thing.

Thanks in advance! :-)


Server 2012 R2 File Server Stops Responding to SMB Connections

$
0
0

Hi There,

Massive shot in the dark here but I am struggling with a pretty major issue atm.  We have a production file server that is hosted on the following:

Dell MD 3220i -> iSCSI -> Server 2008 R2 Hyper-v Cluster -> Passthrough Disk -> Server 2012 R2 File Server VM

Essentially 3 times now, roughly a month or so apart.  The file server stops accepting connections.  During this time, the server is perfectly accessible through rdp or with a simple ping.  I can browse the files on the server directly but no-one appears to be able to access the shares over SMB.  A reboot of the server fixes the issue.  

As per a KB article I removed nod antivirus from the server to rule out a conflicting filter mode driver after the second fault.  Sadly yesterday it happened again.

The only relevant errors in the servers log files are:

SMB Server Event ID 551

SMB Session Authentication Failure Client Name: \\192.168.105.79 Client Address: 192.168.105.79:50774 User Name: HHS\H6-08$ Session ID: 0xFFFFFFFFFFFFFFFF Status: Insufficient server resources exist to complete the request. (0xC0000205) Guidance: You should expect this error when attempting to connect to shares using incorrect credentials. This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients. This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled

and

SMB Server event ID 1020
File system operation has taken longer than expected.

Client Name: \\192.168.105.97
Client Address: 192.168.105.97:49571
User Name: HHS\12J.Champion
Session ID: 0x2C07B40004A5
Share Name: \\*\Subjects
File Name:
Command: 5
Duration (in milliseconds): 176784
Warning Threshold (in milliseconds): 120000

Guidance:

The underlying file system has taken too long to respond to an operation. This typically indicates a problem with the storage and not SMB.

I have checked the underlying disk/iscsi/network hyper-v cluster for any other errors or issues, but as far as I can tell everything is fine. 

Is it possible that something else is left over from the NOD antivirus installation?  

Looking for suggestions on how to troubleshoot this further.

Thanks


Viewing all 10672 articles
Browse latest View live