Solved

DFS redirect

Posted on 2011-03-01
13
474 Views
Last Modified: 2012-06-27
Hi,

I have inherited a DFS system and am confused.  We have 3 servers, each with the same DFS folder structure set up.   Our namespace is my.local.  We are using an application that requires a UNC path which names the server eg \\server2\applications\data as opposed to the DFS path my.local\applications\data.  This has not been an issue until now.  
All dfs folders were originally set up on server1.  Two additional servers were added and replication set up. We have come to set up a new user who reqiures access to the application the uses the direct mapping, eg \\server2\applications\data.  Having set the permissions on the folders, the user cannot access the data.  On checking in the DFS Management App, it seems that server1 has a status of enabled and the other two have the status of disabled.  Checking the Data itself and the last date a file was amended, both server1 and server 2 have the same dates, but the application points to server2. No replication is currently configured to run.
Anyone any ideas on this?
Thanks
0
Comment
Question by:Zbiebu
  • 7
  • 6
13 Comments
 
LVL 20

Expert Comment

by:woolnoir
ID: 35006005
can you browse directly to the UNC path that the application uses from start-> run ?

you should be able to enable the targets for the root without to much issue from DFS management console but it would be useful to know the error the application is generating (and the start -> run generates) before continuing.
0
 

Author Comment

by:Zbiebu
ID: 35006040
Hi,
We get a message box asking for user name and password.
Thanks
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 35006048
and if you enter a domain user or domain admin user (try both) does it allow you access ?
what are the permissions on the share
is the server to which the DFS target points still on the domain and showing no errors in the event log ?
0
 

Author Comment

by:Zbiebu
ID: 35006123
I can access the data when logged in as myself no problem.  The server is on the domain and is not showing any errors in the event log.  I have checked the permissions for the folder and share on server2 and they are the same as for a user that has no problem accessing the data.  
Thanks
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 35006130
So is it one 'user' that is having issues, or one 'machine' ? test this my logging the problem user onto a known good machine and trying it, or logging a known working user onto the problem machine.
0
 

Author Comment

by:Zbiebu
ID: 35006168
I have logged a working user on using the problem machine and they can access the data ok.
0
Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

 
LVL 20

Expert Comment

by:woolnoir
ID: 35006191
Assuming the user you have used is not a admin, i.e has similar permissions to the problem user then you may want to try logging the problem user onto a known machine. If it works it suggests its something in the users profile (maybe a profile re-create). If the problem user on the 'ok' machine files then its something specific to the user and i'd double check permissions etc.

0
 

Author Comment

by:Zbiebu
ID: 35006222
I have checked the permissions for the problem user on Server1 and they do not have permissions on the share.  Although the application points to server2, would this be the issue?
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 35006229
You are testing this by browsing to \\server2\applications\data ? and is this 100% the same UNC path that your application tries to browse too ?

0
 

Author Comment

by:Zbiebu
ID: 35006247
Yes, that's correct
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 35006255
Well if you have added the user with permissions then they should be fine - i'd test the problem user on a known working machine as the next step.
0
 

Author Comment

by:Zbiebu
ID: 35006631
Hi,

I have given the problem user admin rights on their local machine.  They can access the data, but are unable to write to it.
0
 
LVL 20

Accepted Solution

by:
woolnoir earned 500 total points
ID: 35006707
check the NTFS and share permissions on the server2 share... specifically the share permissions as the user may only have read on this one.
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Join & Write a Comment

Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now