We help IT Professionals succeed at work.

Can't ccess DFS share in Resource Forest from Account Forest

1,267 Views
Last Modified: 2012-05-10
Hi Experts

I need some urgent help here.

So I'm having 2 Account Forests (1 site each) and 1 Resource Forest (2 sites). I setup DFS on a fileserver in one site of the Resource Forest. The plan is to have 2 fileservers in the 2 sites replicating data back and forth. I've setup the the Namespace (public) with Folders and folder targets. Within the Resource Forest everything works fine and I can map to the share with ResourceForest.local\public.
This doesn't work with the Account Forest though.

The conditional forwarders are all setup and I can ping. Even by doing ping resourceforest.local I get a response from the domain controller. So it can't be DNS resolving.

Does it just take a long time to replicate accross and if so what can I do to improve this?

If I'm not clear here please ask. I'm totally stuck on this and I'm desperate to get this fixed.

Thanks in advance
Comment
Watch Question

Author

Commented:
This is a domain integrated DFS name space
AwinishSenior Solution Architect

Commented:
You have two different domain or forest & one site & two site is in different domain or different domain in forest?

Author

Commented:
We have 3 Forest. EU, US and the Resource Forest.
That's in 4 different sites.
US (1 site) Resource Forest (2 sites) and EU (1 site)

Basically like this:

Account Forest -------------------------Resource   Forest -----------------------------------Account Forest
US-------------------------------------------US---------EU--------------------------------------------------------EU
User Account ----------------------DFS\Shared----DFS\Shared-----------------------------------------User Account

I would like the User Accounts to acces the DFS\shared on the server closest to them. So EU user will access DFS\Shared on the EU Fileserver in the resource forest and US User will access DFS\shared on the US Fileserver in the resource forest.
AwinishSenior Solution Architect

Commented:
DFS replication is dependent on Active Directory replication & it uses AD replication mechanism to replicate the data.

You can use repadmin /replicate /force

http://www.windowsitpro.com/article/file-systems/q-forcing-dfs-replication-dfsr-members-to-replicate-.aspx
http://blogs.technet.com/b/filecab/archive/2008/10/24/what-does-dfsdiag-do.aspx

As i said,dfsr depends on AD,so i force replication on AD will initiate replication & there is tool called dfsrdiag & it can used to monitor,test DFSR.

References:
http://blogs.technet.com/b/askds/archive/2008/02/12/get-out-and-push-getting-the-most-out-of-dfsr-pre-staging.aspx
http://blogs.technet.com/b/filecab/archive/2006/06/19/437214.aspx

http://technet.microsoft.com/en-us/library/cc773238%28WS.10%29.aspx

Author

Commented:
That's cool and replication within the resource forest works just fine.

What we are trying to do is access the DFS share from the Account Forest. One way transitive Forest Trust is in place.
AwinishSenior Solution Architect

Commented:
You are using three different forest any special requirement of setting three different forest as i have seen different domain in forest but 3 different forest the only thing i can think of having different exchange organization.

AwinishSenior Solution Architect

Commented:
Do clients from account forest can resolves dfs share servername using nslookup & can ping?

Author

Commented:
NSlookup and Ping is succesfully yes.

Author

Commented:
and clients in the account forest can even resolve the \\fileserver\share
AwinishSenior Solution Architect

Commented:
What error they are getting while access dfs share?

Author

Commented:
I found out what was the problem.
I had to add the DNS suffix from the Resource Forest althought I have conditional forwarders in place.
Would you recommend using a Stubzone instead? Would this improve performance maybe?

I have set roaming profile on one useraccount and logon/logoff times are very poor. It takes about 5 minutes to save the profile. The user account has the right access permissions to that \\domain.local\DFS share\userprofiles\%username%\


The error message was

Windows cannot access \\domain.local\shared\....etc
Check the spelling of the name. Otherwise, there might be a problem with your network. To try to identify and resolve network problems, click Diagnose.
Senior Solution Architect
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.