asked on 1/8/2009

DFS issues

Hello,

I am having some DFS issues and have narrowed it down to a windows firewall issue. When the firewall is on I cannot connect to the share and FRS does not work between two different shares. When the firewall is off, I can connect to the share and FRS works.

My question is, what needs to be added to windows firewall in order for DFS and FRS to work properly.

I have added the following:
TCP - 137, 139, 389, 135, 445
UDP - 137, 138, 389, 445
File and Printer Sharing

But still no success. What else needs to be done?

Thanks in advance.

Security Windows Server 2003

Last Comment

BRI-Consulting

1/8/2009

Robin Human

1/8/2009

Take a look at the following article re: dfsrdiag (this would suggest that you need to allow this .exe through the firewall as well)
https://www.experts-exchange.com/questions/22746536/What-SPECIFIC-ports-does-DFS-under-Windows-2003-R2-require.html

BRI-Consulting

1/8/2009

ASKER

I allowed the dfsrdiag.exe and still no luck.

I also did:
dfsrdiag StaticRPC /port:nnnnn /Member:Branch01.sales.contoso.com

and the operation failed. Any other suggestions?

Robin Human

1/8/2009

when you ran dfsrdiag, did you set it to a particular static port and open that port on the firewall?
the command should look something like this: dfsrdiag staticRPC /port:{port number} /Member:{your server's fqdn - ie. server1.joebloggs.com}
see this article:
http://rockstarguys.com/blogs/colin/archive/2008/01/25/locking-down-dfs-for-windows-firewall.aspx

BRI-Consulting

1/8/2009

ASKER

I get this:

C:\WINDOWS\ServicePackFiles\i386>dfsrdiag StaticRPC /port:135 /Member:<computer>

[ERROR] Failed to connect to WMI services on computer: <computer>

Operation Failed

Robin Human

1/8/2009

You need to start the Windows Management Instrumentation services on the server;

BRI-Consulting

1/8/2009

ASKER

That service is started.

BRI-Consulting

1/8/2009

ASKER

DFS shows both targets as 'online'. However, files and folders still won't sync.

ASKER CERTIFIED SOLUTION