Solved

Cannot Access DFS Share from XP Clients, UNC is fine

Posted on 2009-05-06
4
5,083 Views
Last Modified: 2012-05-06
I have been running DFS for a while now. There is a namespace \\XXXX\Public and underneath the folders Shared & Secure.

Up until a few days ago these were present on servers in 2 sites in London & Kent (and replicating). The Kent server was just a temp server, so I have recently added a new permanent server and effectively moved the DFS shares from the temp to the new permanent server using DFS replication. I have disabled the DFS folders on the old servers.

The trouble is whilst the 2003 terminal servers see the new DFS share fine, most of the XP clients do not. When you try and access the DFS share you get the following message:

"\\XXXX\Public\Shared is not accessible. You might not have permission to use this network resource....

Configuration information could not be read from the domain controller, either because the machine is unavailable, or access has been denied.

If you access the path using the true server UNC it works fine \\XXXXX\SharedDrive

I have tried using dfsutil with the following switches /pktflush, /spcflush, /purgemupcache with no success.

The results of dfsutil /pktinfo are as follows

Entry: \XXXXX\public
ShortEntry: \XXXXX\public
Expires in 0 seconds
UseCount: 1 Type:0x8081 ( REFERRAL_SVC DFS FAILBACK_ENABLED )
   0:[\XXXXX\Public] State:0x119 ( ACTIVE TARGETSET )

Entry: \XXXXX\public\shared
ShortEntry: \XXXXX\public\shared
Expires in 0 seconds
UseCount: 0 Type:0x8010 ( OUTSIDE_MY_DOM FAILBACK_ENABLED )
   0:[\XXXXX\SharedDrive] State:0x121 ( TARGETSET )

It may be worth adding that I have created a new DFS root on the new server and the clients can access it with no problems.

I really don't want to have to delete and recreate the dfs links if possible because the replication is tied into it and I'm worried it might break.

Any ideas would be greating appreciated.
0
Comment
Question by:delkent
  • 2
  • 2
4 Comments
 
LVL 38

Expert Comment

by:ChiefIT
ID: 24313892
Lots of things can cause this. Most likely it is the inability to access the DFS share by netbios name resolution.

I would like to see if a few things may be the solution first off.

Since you can access one of the root servers, maybe your problem is more of a security component than a communications one. Do you have internet explorer enhanced security on the server and/or client. This would prevent you from running .exe,.bat, .xls, .vbs, .msi, and other operating system intrusive files. You could try to add the unc path as a trusted site in internet explorer to see if this is your issue.

Now that the security component is check and found to not be the problem, maybe we should check the permissions of the SHARE as well as the permissions of NTFS. When setting up the namespace, you will have to configure your namespace's share permissions. Those allow you access to the share. Like any other share, the share permissions allow you access to the folders and subfolders within the share from a remote location. Then, the NTFS share allows you access to the drive sectors the share resides on. With the inability to access the share, it sounds like your SHARE permissions are off, not the NTFS permissions. To redo this, you may have to recreate the namespace and edit the share permissions to full control. It's easiest to control the permissions at the NTFS level than the share level.  
0
 

Author Comment

by:delkent
ID: 24317473
Hi - the DFS folder share permissions were everyone - full control, so I'm not sure that's it.

I'm thinking I will need to recreate the namespace but it is a last resort as I will have to set up replication again and that has proved to be a bit shaky if there is existing data in a directory
0
 
LVL 38

Expert Comment

by:ChiefIT
ID: 24337335
Well, let's do a lookup to the namespace:

http://support.microsoft.com/kb/830578

Let's use this tool to troubleshoot the namespace connection. NBlookup troubleshoots netbios translation.

Do you have a WINS server?
0
 

Accepted Solution

by:
delkent earned 0 total points
ID: 24483773
Hi there are no WINS servers on the network.

Thanks for your help, but the only thing I could do to get it working is delete and recreate the namespace. Everything seems to work fine now
0

Featured Post

Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

Join & Write a Comment

cPanel is a Unix based web hosting control panel that provides a graphical interface and automation tools designed to simplify the process of hosting a web site. cPanel utilizes a 3 tier structure that provides functionality for administrators, rese…
When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup". After a while, you have entered a loop for Auto repair which does not fix anything and you will be in a  panic as all your work w…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now