DFS issues

Hello,

I am having some DFS issues and have narrowed it down to a windows firewall issue.  When the firewall is on I cannot connect to the share and FRS does not work between two different shares.  When the firewall is off, I can connect to the share and FRS works.

My question is, what needs to be added to windows firewall in order for DFS and FRS to work properly.

I have added the following:
TCP - 137, 139, 389, 135, 445
UDP - 137, 138, 389, 445
File and Printer Sharing

But still no success.  What else needs to be done?

Thanks in advance.
BRI-ConsultingAsked:
Who is Participating?
 
BRI-ConsultingAuthor Commented:
I followed this article:  http://technet.microsoft.com/en-us/library/bb727063.aspx

Specifically:

Next, navigate to this registry key:

HKEY_LOCAL_MACHINE
SYSTEM\
CurrentControlSet\
Services\
NTFRS\
Parameters\

Add a new DWORD value called RPC TCP/IP Port Assignment (include the spaces). Set the value's data to the port number that you want to use (remember to change the displayed base to decimal before you enter the data).

Do this on all your Active Directory servers. You must restart them for the change to take effect.

I restarted FRS on both and opened the port on the firewall.  This seemed to have done the trick.  Still testing.
0
 
RobinHumanCommented:
Take a look at the following article re: dfsrdiag (this would suggest that you need to allow this .exe through the firewall as well)
http://www.experts-exchange.com/Security/IDS/Q_22746536.html
0
 
BRI-ConsultingAuthor Commented:
I allowed the dfsrdiag.exe and still no luck.

I also did:
dfsrdiag StaticRPC /port:nnnnn /Member:Branch01.sales.contoso.com

and the operation failed.  Any other suggestions?
0
Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

 
RobinHumanCommented:
when you ran dfsrdiag, did you set it to a particular static port and open that port on the firewall?
the command should look something like this: dfsrdiag staticRPC /port:{port number} /Member:{your server's fqdn - ie. server1.joebloggs.com}
see this article:
http://rockstarguys.com/blogs/colin/archive/2008/01/25/locking-down-dfs-for-windows-firewall.aspx
0
 
BRI-ConsultingAuthor Commented:
I get this:

C:\WINDOWS\ServicePackFiles\i386>dfsrdiag StaticRPC /port:135 /Member:<computer>

[ERROR] Failed to connect to WMI services on computer: <computer>

Operation Failed
0
 
RobinHumanCommented:
You need to start the Windows Management Instrumentation services on the server;
 
0
 
BRI-ConsultingAuthor Commented:
That service is started.
0
 
BRI-ConsultingAuthor Commented:
DFS shows both targets as 'online'.  However, files and folders still won't sync.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.