Just updated my windows 2012 r2 server but now cannot access the shared drives/folders on my other machines.
HELP!!
Just updated my windows 2012 r2 server but now cannot access the shared drives/folders on my other machines.
HELP!!
Hi,
I have requirement to read an changes in AD, for example if user gets deleted or modification to group happens I should be able to read the same in my IBM Tivoli LDAP tool in rad only mode.
Regards, Deepak Sharma
I am using a script on a scheduled task to check DFS Backlog counts and to alert if the count is over 1000. I have the script working and it does a great job of checking all the replicated groups dynamically and alerts.
Moving this to a scheduled task has been an issue. For security reasons we want to run this task as a service account (dummy user account) but it isn't running.
I have give the user account the permissions outlined here...
https://blogs.technet.microsoft.com/filecab/2006/07/06/delegating-permissions-to-run-dfsrdiag/
1. Added to local dcom user group - both servers
2. added the list WMI permissions for the rootmicrosoftdfs (also added to root as a test)
3. in DFS Management Console added user account to "Replication" and also an individual replication group I set up for testing "AAA"
4. Gave the user log on as a batch job rights
Still not working.
I opened a cmd.exe as the user account to test dfsrdiag and all I get is "Operation Failed" nothing in the logs...
---
C:\Windows\system32>dfsrdiag backlog /receivingmember:DFS01 /sendingmember:DFS02 /RGname:AAA /RFName:AAA
Operation Failed
---
Can anyone suggest a way to track down the permission issue?
Thanks
John
I have two file server both 2012r2. I installed the DFS Namespaces and DFS replication roles on both servers. I then created a simple namespace called ITDFS and added a folder to the namespace called IT Test1. I added the second server from the DFS managment console and added a folder by the same name to it. I then added a replication group via the wizard. I was able to add text and excel file and have them replicate between the two servers.
About an hour later I received a call that folders (on the server that I initially configured DFS on) were missing. After using a utility called tree size I was able to see that several hundred gigs of software was moved into the DFSR/Private/PreExisting folder.
1. At no point did I ever configure this set of folders to be included in DFS replication. It was several folders deep so there is no chance I accidentally navigated to it during my DFS testing. Also, I would have never selected some 200 folders at a size of 347 GB for a simple DFS test. I have no idea why these files would have been moved to the preexisting folder, which I understand is readying the files for replication.
2. I cannot get into the DFSR private folder for the life of me. I have forced the permissions on it numerous times to no avail.
Any idea why my files would have been moved and how do I get them back?
~Eric
Hi all,
We are an SMB, and have installed new hardware to run our virtual servers.
We run 2 ESXi hosts, and one of them, a Windows SBS 2008 SP2 VM is running.
The new SAN and its 10gbe connection to the hosts has increased the disk performance of the virtual machines a lot :
The SBS 2008 VM can now read and write to disk (locally) at about 500MB/s.
As our entire network is 1 gigabit, I was expecting that the clients could now copy from and to the network shares (on the SBS 2008) at 110MB/s. However reading is only at 80MB/s and writing at 60MB/s. I am trying to find out why this netowrk copy performance
is throttled.
I think it has to do with a setting on the SBS 2008, but I can't found out which.
These are the things that I have already tried :
- Check that it is indeed the SBS 2008 VM that is throttling performance : I have created a network share on a VM (Win7) that is running on the same host as the SBS 2008. so the Win7 VM is running 'next to' the SBS2008 VM. Clients can copy to the share on this VM at 110MB/s. So this means that there are no client, network or host bottlenecks.
- The SBS 2008 VM is running on ESXi 6, is hardware version 8, has an VMXNET3 network interface. Same as the other VM to which we can copy at full speed.
- SBS 2008 has 8 cores at 32 GB RAM dedicated. During copying the CPU is not maxing out.
- Same anti-virus and anti-malware is running on SBS 2008 and Win7 VM. So anti virus is not bringing down performance.
- No bandwidth limits at Esxi level. Also I tried disabling QoS at SBS 2008 level. Did not help.
- SMBv2 was disabled. Enabled and rebooted. No help.
- All test were done at night (no clients/load)
- Disabled gpo 'digitally sign communications (always)
Can anyone please advise?
thx.
First, I apologize if I did not include enough details, I am not sure what to include.
I am looking into an issue at my friend's business. He has a Windows Server 2008 R2. Some Windows updates occurred at 3 AM and
ever since then, "Target account name is incorrect" error message comes up when attempting to access a network drive via all the computers. Can't find the network mapping component in the Group Policy Management area to map the drive out through
a group policy.
The drive in question was mapped out into each computer individually through "Map Network Drive" previously. Removed it and tried to re-add it on one of the computers, the same error occurs when attempting to add it through "Map Network Drive". The computers its occurring in have Windows XP, 7 and 10.
The Driver in question shows up under Share & Storage Management. Shows also that everyone has permission.
I then tried to add it via Group Policy Management and did gpupdate /force. First, I got "Error (0x80070070) occurred saving settings file. There is not enough space on the disk". I ensured that the quota management is disabled. When attempting to gpupdate /force , I got this error "the processing of group policy failed. Windows could not authenticate to the active directory service on a domain controller".
I hope someone can help me look into it. Thank you so much. My apologies if I missed out any details, not sure what else needs to be included.
Hello everyone,
I'm trying to disable "Security tab" in shared folders for specific users, so they don't know which permissions is linked to him or for his colleagues.
I'm using windows server 2012 R2 and applying to windows 10.
Hi,
I have implemented File Screening Management in our File Server (Windows Server 2008 R2). I would like to add multiple file name patterns to aFile Group. However, the GUI only allows me to add Files to include one-by-one. I have quite a list of file name patterns, and I wouldn't want to add them individually to each file server.
Is there a way to add file name patterns to the Files to include -list in bulk?
Regards
lakend
Hi all,
I have a few remote users that from time to time have trouble accessing network shares on our file server. Normally the path to the network drive is, for example, \\domain.local\dfs\NameOfShare. However, some users are having problems connected to it. When I have them edit the path to reflect the IP address of that server they can connect to the share. For example, \\10.0.0.1\NameOfShare.
This is only affected some remote users but not all. They are connected through a VPN but I don't believe that to be the issue.
Any ideas?
Just noticed that user appdata folders are appearing on our 3 DFS file servers. For random users, not all of them. Don't recall ever looking at the User folder on these servers so don't know how long they've actually been there.
My first thought was that a GPO redirection could be causing this but the only ones we applied are for the user documents folders.
Notes:
- These are Windows 2008 servers
- We do not use roaming profiles
- There are no files under the AppData subfolders, just the folders themselves.
Any ideas are appreciated.
Thanks in advance,
BL
bl
Environment: All servers involved (and domain functional level) are 2008 R2 SP1
I have a namespace with 14 namespace servers. 1 is at corporate headquarters, the other 13 are each at a remote site. Each remote server is a DC, File/Print server, DHCP, etc....
Namespace is optimized for scalability.
There is a folder in the namespace for each remote location. Each namespace folder has 2 targets - a shared folder at corporate, and a shared folder on that site's server. The folders replicate.
I use MMC with the Share & Storage Mgmt + DFS Mgmt snap-ins. I went through and renamed each folder in the namespace.
The new names were not showing up for remote clients in the namespace. Content in the folders were up to date however. This was for a couple of days. During this time, I restarted DFS services on the remote servers and rebooted clients to no avail.
I did not modify the names of any of the shares, or the names of the actual folders in the file system. ONLY the name of the folder as it appears in the namespace.
I wound up running dfsutil root forcesync \\remoteserver\namespace\
After I did this, the new folder names showed up, but this was in duplicate. The old folder names were still in the namespace.
What's weird: if I go into the DFS Management console on ANY server, the old names do not appear there. If I look in the C:\DFSRoot\Namespace\ folder on the remote servers, there are links in there for both new and old names.
When I try to run dfsutil link remove \\namespace\OLDname, I get an error that the command could not execute the command successfully - system error - element not found.
Here's the most frustrating part. This link: https://support.microsoft.com/en-us/kb/2619531 describes my problem almost to a T. However, it says that it's only applicable to Server 2008 SP2.
Any guidance would be greatly appreciated.
Thanks!
-Brad
Greetings,
I followed the document Export a Clone of the DFS Replication Database to the letter. I was really impressed with how quickly the initial sync progressed. Many GB of data synchronized in a matter of hours instead of days. However, there were a few peculiarities:
The destination server is brand new and has all the hotfixes installed (as does the source).
I currently have a setup like the one below and DFSR
console says it's disconnected. When I open the interface to see the disconnected members, there are 2 sets of connected members.
Based on the documentation I am reading it would seem that this is a valid configuration.
All RW members have bi-directional connections. RO members have a single direction connection from their RW member.
Thanks,
C
-Chris
Hello,
I have a 2012R2 server with some shares on it that was setup to use "anonymous login" (which shows at the server as the guest user) for authentication. All of a sudden, this week we are getting many access denied errors on Win10 clients. I understand that there are now also some Win7 clients with the issue. The workflow used to be 1) Access \\server in explorer 2) see the shares without entering any creds. None of the clients are on our domain so this is the way we set it up to not have to used credentials.
When the credential dialog pops up, I can put in any username without a password and it displays the shares. If I just click enter without any username or password, it gives me the access denied message. Same behavior at the commandline with "net view" or "net use"
At first, I figured it was the 1607 Win10 update, but now I've found some 1511 clients that are doing it. Worse is that I have at least one Win10 1607 client that works just fine with no creds. Could this be something that changed as part of patch Tuesday? If I can have some help in troubleshooting I'm very willing to provide logs.
Hi There,
Massive shot in the dark here but I am struggling with a pretty major issue atm. We have a production file server that is hosted on the following:
Dell MD 3220i -> iSCSI -> Server 2008 R2 Hyper-v Cluster -> Passthrough Disk -> Server 2012 R2 File Server VM
Essentially 3 times now, roughly a month or so apart. The file server stops accepting connections. During this time, the server is perfectly accessible through rdp or with a simple ping. I can browse the files on the server directly but no-one appears to be able to access the shares over SMB. A reboot of the server fixes the issue.
As per a KB article I removed nod antivirus from the server to rule out a conflicting filter mode driver after the second fault. Sadly yesterday it happened again.
The only relevant errors in the servers log files are:
SMB Server Event ID 551
SMB Session Authentication Failure Client Name: \\192.168.105.79 Client Address: 192.168.105.79:50774 User Name: HHS\H6-08$ Session ID: 0xFFFFFFFFFFFFFFFF Status: Insufficient server resources exist to complete the request. (0xC0000205) Guidance: You should expect this error when attempting to connect to shares using incorrect credentials. This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients. This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled
and
SMB Server event ID 1020 File system operation has taken longer than expected. Client Name: \\192.168.105.97 Client Address: 192.168.105.97:49571 User Name: HHS\12J.Champion Session ID: 0x2C07B40004A5 Share Name: \\*\Subjects File Name: Command: 5 Duration (in milliseconds): 176784 Warning Threshold (in milliseconds): 120000 Guidance: The underlying file system has taken too long to respond to an operation. This typically indicates a problem with the storage and not SMB.
I have checked the underlying disk/iscsi/network hyper-v cluster for any other errors or issues, but as far as I can tell everything is fine.
Is it possible that something else is left over from the NOD antivirus installation?
Looking for suggestions on how to troubleshoot this further.
Thanks