Solved

Can't ccess DFS share in Resource Forest from Account Forest

Posted on 2010-11-15
12
1,233 Views
Last Modified: 2012-05-10
Hi Experts

I need some urgent help here.

So I'm having 2 Account Forests (1 site each) and 1 Resource Forest (2 sites). I setup DFS on a fileserver in one site of the Resource Forest. The plan is to have 2 fileservers in the 2 sites replicating data back and forth. I've setup the the Namespace (public) with Folders and folder targets. Within the Resource Forest everything works fine and I can map to the share with ResourceForest.local\public.
This doesn't work with the Account Forest though.

The conditional forwarders are all setup and I can ping. Even by doing ping resourceforest.local I get a response from the domain controller. So it can't be DNS resolving.

Does it just take a long time to replicate accross and if so what can I do to improve this?

If I'm not clear here please ask. I'm totally stuck on this and I'm desperate to get this fixed.

Thanks in advance
0
Comment
Question by:Dan-IT
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 6
12 Comments
 

Author Comment

by:Dan-IT
ID: 34143149
This is a domain integrated DFS name space
0
 
LVL 24

Expert Comment

by:Awinish
ID: 34144532
You have two different domain or forest & one site & two site is in different domain or different domain in forest?
0
 

Author Comment

by:Dan-IT
ID: 34145970
We have 3 Forest. EU, US and the Resource Forest.
That's in 4 different sites.
US (1 site) Resource Forest (2 sites) and EU (1 site)

Basically like this:

Account Forest -------------------------Resource   Forest -----------------------------------Account Forest
US-------------------------------------------US---------EU--------------------------------------------------------EU
User Account ----------------------DFS\Shared----DFS\Shared-----------------------------------------User Account

I would like the User Accounts to acces the DFS\shared on the server closest to them. So EU user will access DFS\Shared on the EU Fileserver in the resource forest and US User will access DFS\shared on the US Fileserver in the resource forest.
0
The Ultimate Checklist to Optimize Your Website

Websites are getting bigger and complicated by the day. Video, images, custom fonts are all great for showcasing your product/service. But the price to pay in terms of reduced page load times and ultimately, decreased sales, can lead to some difficult decisions about what to cut.

 
LVL 24

Expert Comment

by:Awinish
ID: 34146379
DFS replication is dependent on Active Directory replication & it uses AD replication mechanism to replicate the data.

You can use repadmin /replicate /force

http://www.windowsitpro.com/article/file-systems/q-forcing-dfs-replication-dfsr-members-to-replicate-.aspx
http://blogs.technet.com/b/filecab/archive/2008/10/24/what-does-dfsdiag-do.aspx

As i said,dfsr depends on AD,so i force replication on AD will initiate replication & there is tool called dfsrdiag & it can used to monitor,test DFSR.

References:
http://blogs.technet.com/b/askds/archive/2008/02/12/get-out-and-push-getting-the-most-out-of-dfsr-pre-staging.aspx
http://blogs.technet.com/b/filecab/archive/2006/06/19/437214.aspx

http://technet.microsoft.com/en-us/library/cc773238%28WS.10%29.aspx
0
 

Author Comment

by:Dan-IT
ID: 34146501
That's cool and replication within the resource forest works just fine.

What we are trying to do is access the DFS share from the Account Forest. One way transitive Forest Trust is in place.
0
 
LVL 24

Expert Comment

by:Awinish
ID: 34146579
You are using three different forest any special requirement of setting three different forest as i have seen different domain in forest but 3 different forest the only thing i can think of having different exchange organization.

0
 
LVL 24

Expert Comment

by:Awinish
ID: 34146585
Do clients from account forest can resolves dfs share servername using nslookup & can ping?
0
 

Author Comment

by:Dan-IT
ID: 34146726
NSlookup and Ping is succesfully yes.
0
 

Author Comment

by:Dan-IT
ID: 34146739
and clients in the account forest can even resolve the \\fileserver\share
0
 
LVL 24

Expert Comment

by:Awinish
ID: 34146816
What error they are getting while access dfs share?
0
 

Author Comment

by:Dan-IT
ID: 34146942
I found out what was the problem.
I had to add the DNS suffix from the Resource Forest althought I have conditional forwarders in place.
Would you recommend using a Stubzone instead? Would this improve performance maybe?

I have set roaming profile on one useraccount and logon/logoff times are very poor. It takes about 5 minutes to save the profile. The user account has the right access permissions to that \\domain.local\DFS share\userprofiles\%username%\


The error message was

Windows cannot access \\domain.local\shared\....etc
Check the spelling of the name. Otherwise, there might be a problem with your network. To try to identify and resolve network problems, click Diagnose.
0
 
LVL 24

Accepted Solution

by:
Awinish earned 500 total points
ID: 34147088
Stub(Only Dns host server records i.e name server record,SOA) zone or secondary (it includes all the records from other domain dns)zone,so secondary dns can be best but as you have created one way trust so i would recommend stub zone in this scenario which will have faster name resolution as it will have all the dns server listed for other domain.

http://www.windowsnetworking.com/articles_tutorials/DNS_Stub_Zones.html


You can enable universal group caching from ADSS for fast logi.
http://msmvps.com/blogs/donna/archive/2004/03/31/4452.aspx
http://www.windowsnetworking.com/kbase/WindowsTips/Windows2003/AdminTips/ActiveDirectory/Whentouseandnotuseuniversalgroupmembershipcaching.html
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

717 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question