Solved

Can't create any new DFS links: Access Denied

Posted on 2008-10-09
3
1,064 Views
Last Modified: 2009-01-25
I'm getting an error trying to add a new dfs link (first in a few years) to our existing root. The error says "The following error occurred while creating the DFS link: Access is denied". All the existing links seem to be working fine though. The link I'm trying to create is to a share on a new DC. I've tried creating test links to the same folders as the existing working links but that didn't work either so I don't think the problem is specific to the new server. All the servers involved are 2003 SP2.

Thanks,

Steve
0
Comment
Question by:smandell
  • 2
3 Comments
 
LVL 4

Expert Comment

by:placebo69a
ID: 22682369
There might be a problem with the secure channel from your server to active directory. Run the following command from command prompt on the computer you are trying to create the DFS link from:
NLTEST.EXE /SC_RESET:<Domain Name>
Don't have NLTEST.EXE? Download it here.
Make sure the secure channel is reset successfully and then try creating the DFS link again.
Let me know if this helps. :)
0
 

Author Comment

by:smandell
ID: 22684211
Thanks but that didn't work. I ran it on the server that serves as the dfs root.

"Flags: 30 HAS_IP  HAS_TIMESERV
Trusted DC Name \\<DomainController>
Trusted DC Connection Status Status = 0 0x0 NERR_Success
The command completed successfully"
0
 

Accepted Solution

by:
smandell earned 0 total points
ID: 23423417
Eventually we worked around the issue by creating an entirely new DFS.

Thanks,

Steve
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question