Question

DFS Access is denied when trying to add\remove links or targets

Asked by: brett_apfc

I need to create a new linkt to my DFS system.  When I attempt to create the new link to a shared folder I get the following error message:

"The following error occurred while creating the DFS link:  Access is denied"

I get the same error if I try to remove a target, add a target, or remove a link.  I can't seem to make any changes at all to the DFS system.

The current DFS links and targets are all still functioning -- users haven't seen any issues at all.

Any suggestions?

This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.

Subscribe now for full access to Experts Exchange and get

Instant Access to this Solution

  • Plus...
  • 30 Day FREE access, no risk, no obligation
  • Collaborate with the world's top tech experts
  • Unlimited access to our exclusive solution database
  • Never be left without tech help again

Subscribe Now

Asked On
2009-03-25 at 10:30:59ID24264227
Topics

File Servers

,

Windows 2003 Server

,

Active Directory

Participating Experts
1
Points
0
Comments
14

Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.

  • "The time we save is the biggest benefit of Experts Exchange to Warner Bros. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange." Mike Kapnisakis, Warner Bros.
  • "Our team likes having a resource that is more secure than just using Google and most experts using this service really know their stuff. It's nice to look here first versus using Google." Dayna Sellner, Lockheed Martin
  • "Anytime that I've been stumped with a problem, 9 out of 10 times Experts Exchange has either the accepted solution or an open discussion of the potential solution to the problem." Kenny Red, eBay Inc.

See what Experts Exchange can do for you.

Got a question?

We've got the answer.

Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.

Screenshot of Experts Exchange Knowledgebase

Need individual assistance?

Our experts are ready to help.

If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.

Screenshot of Experts Exchange Knowledgebase

Want to learn from the best?

Read articles from industry experts.

Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.

Screenshot of an Article

Working on a long term project?

Store your work and research.

Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.

Screenshot of Experts Exchange Knowledgebase

Access the answers to your technology questions today.

Subscribe Now

30-day free trial. Register in 60 seconds.

What Makes Experts Exchange Unique?

Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Trusted by the world's most respected brands.

image of each brand's logo

Faithfully serving IT professionals since 1996.

Experts Exchange Logo

Try it out and discover for yourself.

Subscribe Now

30-day free trial. Register in 60 seconds.

Related Solutions

  1. DFS acess denied ???
    I have 2 servers, one is a w2k and the other is a novel 4.0. i made a dfs root and then a dfslink to an folder on the novel server. if i click on the dfs link it opens the folder on teh other server, but if i go to my shared folder and clic on the fonder to the dfslink i get ...
  2. Setting up Dfs across domains?
    We currently have a Native 2003 domain with a root domain called company.com where we house the majority of our server infrastructure. In addition to our root domain we have a child domain in the same forest called branch.company.com where we house our users and compute...
  3. DFS Issue
    My inherited network: VPN Connection over T1 lines. Win2k Server at one location and Win2k3 server at the other both domain controllers on the same domain. Replication works fine but my problem is the workstations seem to connect to the remote server's dfs and not the one ...
  4. Problem with DFS root replication.
    I have 2 domain controllers and several member servers (all 2003 standard) I want to set up a basic DFS structure so that in the event of a server going offline I can restore data to a different server and update the DFS target instead of having to mess about remapping users...
  5. DFS linked folders access denied
    We're trying to get DFS folder redirection up and running in our environment. We've got everything setup to where it looks like it should work, but end users are not able to access the link folders. The links work fine from the file server end. What we're working on doing. *...

Free Tech Articles

  1. WARNING: 5 Reasons why you should NEVER fix a computer for free.
    It is in our nature to love the puzzle. We are obsessed. The lot of us. We love puzzles. We love the challenge. We thrive on finding the answer. We hate disarray. It bothers us deep in our soul. W...
  2. SCCM OSD Basic troubleshooting
    SCCM 2007 OSD is a fantastic way to deploy operating systems, however, like most things SCCM issues can sometimes be difficult to resolve due to the sheer volume of logs to sift through and the dispe...
  3. Migrate Small Business Server 2003 to Exchange 2010 and Windows 2008 R2
    This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Windows 2008 R2 with Exchange 2010. For this migration to work you will need the fo...
  4. Create a Win7 Gadget
    This article shows you how to create a simple "Gadget" -- a sort of mini-application supported by Windows 7 and Vista. Gadgets can be dropped anywhere on the desktop to provide instant information, ...
  5. Outlook continually prompting for username and password
    There have been a lot of questions recently regarding Outlook prompting for a username and password whilst using Exchange 2007. There are a few reasons why this would happen and I will try to cover t...
  6. Backup Exchange 2010 Information Store using Windows Backup
    There seems to be quite a lot of confusion around the ability to backup Exchange 2010 using the built in Windows Backup feature. This stems from the omission of this feature prior to Exchange 2007 s...

Cloud Class Webinars

  1. Avoiding Bugs in Microsoft Access
    Alison Balter takes and in-depth look at avoiding bugs in Access. In this webinar you will learn about using the immediate window to debug your applications, invoking the debugger, using breakpoints to troubleshoot, stepping through code, setting the next statement to execute, ...
  2. Top 10 Best New Features in Visio 2010
    Scott Helmers gives live demonstrations of the top 10 new features in Visio 2010. This webinar will teach you how to create compelling diagrams by adding shapes to the page with a single click, linking the shapes in a diagram to data in Excel (or SQL Server, or SharePoint), ...
  3. IT Consultant Business Secrets Revealed
    Michael Munger, Experts Exchange tech pro and IT consultant, pulls back the curtain on his very successful businesses and answers question on every IT consultant and business owner should know about. He shares secrets on what he did to solve the 5 most common problems in IT, ...
  4. Disaster Recovery and Business Continuity
    Quest CTO, Mike Billon, gives an overview of the steps involved in building a dunamic disaster recovery plan. Through case studies and an examination of software/hardware tooles for monitoring and testing, you'll gain a better understandin of where you are, where you want ...
  5. Organize Your Visio Diagrams with Containers and Lists
    Scott Helmers uses cross functional flowcharts, wireframe diagrams, data graphic legends and seating charts to teach you: how to ustilize all three new structured diagram components in Visio 2010, the best practices for organizeing shapes in previous version of Visio, how to organize ...
  6. How to Us Objects, Properties, Events and Methods in Microsoft Access
    Alison Dalter gives an in-depbth look at objects, properties, events and methods in Microsoft Access. In this webinar you will learn about using the object browser, referring to objects, working with properties and methods, working with object variables, understanding the ...

Join the Community

Give a Little. Get a Lot.

Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.

Join the Community

Answers

 

by: dstewartjrPosted on 2009-03-30 at 11:00:45ID: 24021403

This is probably  because  the administrator account by default does not have by default write permissions on the DFS-Staging folder:

http://support.microsoft.com/kb/261015

1. Click Start, click Run, type mmc, and then click OK.
2. On the Console menu, click Add/Remove Snap-in, and then click Add.
3. Click Distributed File System, click Add, click Close, and then click OK.
4. Click Distributed File System, click Display an existing Dfs Root, and then click OK.
5. Click the domain, and then click DFS Root.
6. Expand the root by clicking the plus sign (+) to view the Dfs links.
7. Right-click the Dfs link, and then click Replication Policy.
8. Click the shared folder that you want to set as the master, and then click Set Master.
9. Click another shared folder to which you want to replicate, click Enable, and then click OK to establish the replication policy.


http://support.microsoft.com/kb/261015

 

by: brett_apfcPosted on 2009-03-30 at 11:05:09ID: 24021442

When I right-click on a link I have no "Replication Policy" item in the menu.

This DFS root is not being replicated to any other servers.  It is a stand-alone DFS root.

Any other suggestions?

 

by: dstewartjrPosted on 2009-03-30 at 11:08:34ID: 24021489

Did you try to assign the domain Administrator account at least write permissions on the root of the drive where the Frs-Staging folder is created?

 

by: brett_apfcPosted on 2009-03-30 at 11:17:32ID: 24021574

Yes.  The Domain Admins group has Full Access to the root drive.

This DFS system has been in place for about 2 years.  No access changes have been made that I am aware of.  We noticed this issue about a month ago when we attempted to modify an existing link.

 

by: dstewartjrPosted on 2009-03-30 at 11:39:19ID: 24021809

Not sure if this will help

from here

http://support.microsoft.com/kb/969382

The file server shares specified by the "LogicalShare" and "RootShare" registry values must exist and be accessible for proper operation of a DFS root.  Access will be denied to a root if the share is missing or is configured with inappropriate permissions.  It is recommended to never directly edit these registry values.

 

by: dstewartjrPosted on 2009-03-30 at 11:42:24ID: 24021843

Also, if you havent already


add or verify explicit permissions in "Active Directory Users and Computers" in
advanced mode under your domain and the "System" folder look for
"Dfs-Configuration".

 

by: brett_apfcPosted on 2009-03-30 at 11:56:33ID: 24022016

I looked at the permissions in Active Directory under the DFS-Configuration folder, and Domain Admins again has Full Control.

Is it time to attempt to blow the DFS root away, and create a new one  (if possible)?


I appreciate your help.

 

by: dstewartjrPosted on 2009-03-30 at 12:06:05ID: 24022114

Hmmm....that's frustrating!!!

Checking to see what I can find.

What do your event logs say?

 

by: brett_apfcPosted on 2009-03-30 at 12:07:16ID: 24022123

Absolutely nothing in the event logs.

 

by: dstewartjrPosted on 2009-03-30 at 12:24:47ID: 24022305

Try this


HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Mup\Parameters  
Add a DWORD value:  
EnableDfsLoopbackTargets  
Change its value to 1.  
Reboot the system.

 

by: brett_apfcPosted on 2009-03-30 at 12:28:32ID: 24022346

I've created the DWORD value.  I can't reboot until tonight.  I'll give you an update tomorrow.

Can you give me an explanation of what this entry will do?

 

by: dstewartjrPosted on 2009-03-30 at 12:31:51ID: 24022380

Found that mentioned here(i know it says XP)

http://www.1stbyte.com/2008/04/18/dfs-links-to-shares-on-windows-xp-sp2-do-not-work-on-local-system/

still looking for other solutions

 

by: brett_apfcPosted on 2009-04-01 at 12:14:46ID: 24042718

DWORD value did not help the situation.

I plan on moving forward with an attempt to destroy the DFS Root, then rebuilding.

 

by: brett_apfcPosted on 2009-04-01 at 16:16:17ID: 24044881

I used the following instructions to successfully decommission my root server:

Use the following procedure to decommission a root server:

1.  Remove the root server from the DFS namespace by using one of the following methods:
     
           A.  In the Distributed File System snap-in, right-click the root target you want to remove, and then click Remove Target.   (THIS RESULTED IN:  ACCESS DENIED)      

           B.  Using the version of Dfsutil.exe included in the Windows Server 2003 Support Tools, run the following command, where RootTargetServer refers to the root server to be decommissioned:

Dfsutil /UnmapFtRoot /Root:<dfsname> /Server:RootTargetServer /Share:<share>

2.   On the decommissioned root target, remove DFS information from the registry by using the following Dfsutil.exe command:

Dfsutil /Clean /Server:RootTargetServer /Share:<rootname>

3.  On the decommissioned root target, at the command prompt, type net stop dfs & net start dfs.


Once the root DFS was removed I was able to create a new DFS root using the same name as the deleted root.  After creating the new root links were successfully created.



I still have no idea why I could not modify \ create \ delete existing links in the old DFS root.
</rootname></share></dfsname>

20120131-EE-VQP-002

3 Ways to Join

30-Day Free Trial

The Experts

98% positive feedback on 31,087 answers since March 2000. angeliii is a Microsoft Most Valuable Professional for his work with MS SQL Server & Develoment.

He has also proven his knowledge of Visual Basic Programming, PHP Scripting and Oracle Databases.

The Experts

97% positive feedback on 10,752 answers since July 2000. lrmoore has more than 18 years experience in the networking industry.

The six-time Mircosoft MVPs specialties include firewalls, virtual private networking, and network management.

Testimonials

"...and excellent source for support... Kind of like having your very own IT dept." Electriciansnet

Testimonials

"I was apprehensive at signing up at first. However... it has already made my life as an IT administrator much easier." JaCrews

Testimonials

"WOW! You guys have great, active, and knowledgeable people on here." moore50

Business Clients

Business Clients

In the Press

"If you’ve got a question... Experts Exchange can supply an answer.”

In the Press

"...an invaluable aid for both IT professionals and those who require tech support."

In the Press

"where IT professionals provide quick answers on just about any topic"

Business Account Plans

Loading Advertisement...