gpchicago08
asked on
DFS linked folders access denied
We're trying to get DFS folder redirection up and running in our environment. We've got everything setup to where it looks like it should work, but end users are not able to access the link folders. The links work fine from the file server end.
What we're working on doing.
* Take two existing shares, stop sharing them, and reshare them as DFS domain roots.
* Add links to each root pointing to other Hard Drives on the same server.
Existing folders:
Jobs Location D:\Data\Jobs
Work Location G:\kdata\work
DFS location of new folders
* DFS-Jobs-Target location H:
**2010
**Marketing
* DFS-Work-Target location H:
**2010
**Marketing
We've shared the DFS shares with Everyone having full perms on the sharing tab, and the same pre-existing NTFS permissions on all the folders under Jobs and Work. Users are able to use the existing folders fine.
We've also setup the same permissions on the DFS-Jobs-Target and DFS-Work-Target folders, for both the sharing tab, and the NTFS permissions tabs.
Each subfolder in the DFS target folders has the same NTFS permissions as everything else, and these folders are -not- shared.
Whenever anyone, including domain administrators try to access these linked subfolders we gat an access denied error.
When accessed on the file server when logged on as the domain Administrator account we can access these folders without problem.
We assume is a permission issue, but we can't quite figure out where. Any advice on what to check next would be helpful.
Thank you for your comments,
What we're working on doing.
* Take two existing shares, stop sharing them, and reshare them as DFS domain roots.
* Add links to each root pointing to other Hard Drives on the same server.
Existing folders:
Jobs Location D:\Data\Jobs
Work Location G:\kdata\work
DFS location of new folders
* DFS-Jobs-Target location H:
**2010
**Marketing
* DFS-Work-Target location H:
**2010
**Marketing
We've shared the DFS shares with Everyone having full perms on the sharing tab, and the same pre-existing NTFS permissions on all the folders under Jobs and Work. Users are able to use the existing folders fine.
We've also setup the same permissions on the DFS-Jobs-Target and DFS-Work-Target folders, for both the sharing tab, and the NTFS permissions tabs.
Each subfolder in the DFS target folders has the same NTFS permissions as everything else, and these folders are -not- shared.
Whenever anyone, including domain administrators try to access these linked subfolders we gat an access denied error.
When accessed on the file server when logged on as the domain Administrator account we can access these folders without problem.
We assume is a permission issue, but we can't quite figure out where. Any advice on what to check next would be helpful.
Thank you for your comments,
milindsm
Does DFS namespace root have all required permissions???
As I understand it, you have used local path as the target of the DFS link making it available only when logged on the local server.
The DFS links nead to point on a file shared folder \\servername\share$ (not local H:\folder) as target
The DFS links nead to point on a file shared folder \\servername\share$ (not local H:\folder) as target
ASKER
Henjoh09,
Sorry I should have specified better, that is just the physical location. On the DFS console we've mapped to the DFS-Work-Target and DFS-Jobs-Target folder as shares \\servername\DFS-Work-Targ
\\Servername\DFS-Jobs-Targ
Milindsm,
By namespace root you mean the DFS-Jobs-Target and DFS-Work-Target folders?
I've seen no way to set permissions in the DFS console. the only thing I have when I click properties on one of the domain root shares is a publish tab.
Sorry I should have specified better, that is just the physical location. On the DFS console we've mapped to the DFS-Work-Target and DFS-Jobs-Target folder as shares \\servername\DFS-Work-Targ
\\Servername\DFS-Jobs-Targ
Milindsm,
By namespace root you mean the DFS-Jobs-Target and DFS-Work-Target folders?
I've seen no way to set permissions in the DFS console. the only thing I have when I click properties on one of the domain root shares is a publish tab.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.