Solved

Can't create any new DFS links: Access Denied

Posted on 2008-10-09
3
1,066 Views
Last Modified: 2009-01-25
I'm getting an error trying to add a new dfs link (first in a few years) to our existing root. The error says "The following error occurred while creating the DFS link: Access is denied". All the existing links seem to be working fine though. The link I'm trying to create is to a share on a new DC. I've tried creating test links to the same folders as the existing working links but that didn't work either so I don't think the problem is specific to the new server. All the servers involved are 2003 SP2.

Thanks,

Steve
0
Comment
Question by:smandell
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 4

Expert Comment

by:placebo69a
ID: 22682369
There might be a problem with the secure channel from your server to active directory. Run the following command from command prompt on the computer you are trying to create the DFS link from:
NLTEST.EXE /SC_RESET:<Domain Name>
Don't have NLTEST.EXE? Download it here.
Make sure the secure channel is reset successfully and then try creating the DFS link again.
Let me know if this helps. :)
0
 

Author Comment

by:smandell
ID: 22684211
Thanks but that didn't work. I ran it on the server that serves as the dfs root.

"Flags: 30 HAS_IP  HAS_TIMESERV
Trusted DC Name \\<DomainController>
Trusted DC Connection Status Status = 0 0x0 NERR_Success
The command completed successfully"
0
 

Accepted Solution

by:
smandell earned 0 total points
ID: 23423417
Eventually we worked around the issue by creating an entirely new DFS.

Thanks,

Steve
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
Recently, Microsoft released a best-practice guide for securing Active Directory. It's a whopping 300+ pages long. Those of us tasked with securing our company’s databases and systems would, ideally, have time to devote to learning the ins and outs…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

617 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question