DFS namespaces disapear on machines running Windows 7 SP1

We have been using DFS for 4 years now with Windows Xp, Vista and Windows 7 workstations.

We have just started testing SP1 for Windows 7.  Now when a user browses to the DFS root, some of the namespaces are missing.
We immediately go to another Windows 7 machine wiothout SP1, Namespaces are available.

No server changes made, No DFS services have changed, all computers are in the same site at this time (there are no SP1 machines offsite)

Microsoft have not been able to help, so hopefully someone here can help me



dtome74Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

ChiefITCommented:
I am going to explain the problem, but we are going to have to work with script writers to create a group policy.

---Distributive File shares are accessed by Netbios resolution.

Netbios broadcasts are sent out by clients every 15 minutes and servers every 5 minutes. This broadcast holds information that will populate things like My network places, printers, and some other forms of software.

Also when these netbios broadcasts are sent out, the information is used to select a "domain Master browser". This process is called a browser election.

Traditionally, through a browser election. The latest and greatest operating system with holder of roles wins the election process. The holder of roles in this case is the FSMO role holder, (Domain Controller). However, Newer OS versions like VISTA or WIN7, as well as Linux and MAC operating systems may periodically fight the domain controller for control of the master browser service, (because of this election process).

What you have to do is tell the clients, they are NOT the domain master browser. Then, you have to tell the DC (with FSMO roles) it IS the domain master browser. This is done with a registry edit.

What I am going to do is provide you with a Microsoft Article on the domain master browser. It explains a registry edit that needs to be performed. (So, this is background information)
http://www.microsoft.com/resources/documentation/windowsnt/4/server/reskit/en-us/net/chptr3.mspx?mfr=true

Here is the solution provided by Experts Exchange, Pber:
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_22135295.html
0
dtome74Author Commented:
We have tried the suggestions and it made no difference.

DFS is still unavailable to users with Windows 7 SP1, but available to the rest of the company using Windows XP or Windows 7 RTM.

Any other idea's that could help lead us in the right direction??
0
ChiefITCommented:
Upon installing SP1 for Windows 7, maybe it re-enabled Windows firewall. Windows Firewall on a client computer traditionally blocks netbios resolution. In order to resolve this issue, go into windows firewall and make an exception to Netbios, (otherwise known as 'file and print sharing')

I know that upon installing Serivice packs with XP and Vista, Windows Firewall re-enables itself.
0
IT Pros Agree: AI and Machine Learning Key

We’d all like to think our company’s data is well protected, but when you ask IT professionals they admit the data probably is not as safe as it could be.

ChiefITCommented:
There are also a couple of tests I would like to look at:

1) explore your "network" to see if you can see computers and shares on your network.

2) also go to the command prompt and type IPconfig /all to see if netbios is enabled, and what node type you are working with.

3) can you ping computers using netbios name (host name)?

4) if not, can you ping by IP or FQDN?
0
dtome74Author Commented:
We can resolve NetLogin and Sysvol regardless of OS level.

We can also see SOME of the DFS shares from the Windows 7 SP1 machines, just not all.  This is where the query lies,  How is the DFS OS restricted?

All folders are available in previous versions of OS prior to Windows 7 SP1.  WE have a machine on Windows 7 with a user. they can see everything, Upgrade to SP1 and same user now can't see Folders with the DFS.  No changes to DFS folder security, or anything changed, same user logs back onto either Windows XP or Windows 7 workstation and had full access again.

We have checked the firewall and all is correct, hence they can see some of DFS folder structures.

1) explore your "network" to see if you can see computers and shares on your network.
      Yes we can.  The users can see some of the DFS structure within the environemt and other server shares as well

2) also go to the command prompt and type IPconfig /all to see if netbios is enabled, and what node type you are working with.
   Node type is 0x8

3) can you ping computers using netbios name (host name)?
  Yes - but all shortcuts and users use FQDN by default.  Netbios is only used as a last resort

4) if not, can you ping by IP or FQDN?
      All work.  Regardless of server we point at, certain folders remain unavailable.
0
ChiefITCommented:
go to the domain controller and look in event viewer  logs, for events in the 8000's. These events tell you of problems with netbios resolution and the master browser.

8021 or 8032 should look like this:

XXXcomputer thinks its the domain master browser, the browser service has stopped and an election has been forced.

Do you see any of these errors??? If so, what client computer is "XXXcomputer"
0
dtome74Author Commented:
We found we had to download a new dfsc.sys file from another Windows Patch file, and place it in the C:\Windows\System32\Drivers

after a restart of the machine DFS was available as a while again. nothing was unavaailable.

Microsoft still have not posted this as an issue.

a fellow workmate came across the file by accident and solved this one for us. Am still trying to source the original patch file that contained the DFSC.SYS file
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
dtome74Author Commented:
This took too long to solve as there is no document occurences or solutions. We were just luckky a fellow staff member found a solution
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.