DFS Referral one AD server not displaying folders
I have DFS setup on two servers FILESERVER and FILESERVER2 and have 3 AD servers AD1 AD2 & AD3 all servers bar AD3 are running Win2k8r2 AD3 is running Win2k3r2.
I'm not sure what's changed as we were implementing a new SAN and reconfiguring that so servers were restarted but other than that and perhaps a windows update I'm not aware of why this issue should have occurred.
The issue:
One of the three servers is not displaying the list of folders defined in the DFS.
When users login one of the 3 AD servers gives them access to the DFS list of folders. ie: I can right click on the domain folder and see in the DFS tab a referral list showing the three servers with one of those three servers listed as active.
I can see \\domain.com\staff at the top and three lines with \\ad1\staff \\ad2\staff and \\ad3\staff
One of these is active and on clicking check status all three show as OKAY.
Now if either AD2 or AD3 is selected as active everything works just fine and the users see all the paths and their files as expected. If AD1 is made active then the list of folders disappears. ie: I can switch between servers making each active in turn and refreshing the window with \\domain.com\staff open and when AD1 is active the folders disappear on refresh when AD2 or AD3 is active then the folders re-appear on a refresh.
So for some reason AD1 isn't serving up the list of DFS shortcuts. Any suggestions?
NB. AD1 is a Windows 2008r2 SP1 server. AD2 is the same and AD3 is a Windows 2003R2 SP3 server. So no consistency in versions vs the problem server.
I'm not sure what's changed as we were implementing a new SAN and reconfiguring that so servers were restarted but other than that and perhaps a windows update I'm not aware of why this issue should have occurred.
The issue:
One of the three servers is not displaying the list of folders defined in the DFS.
When users login one of the 3 AD servers gives them access to the DFS list of folders. ie: I can right click on the domain folder and see in the DFS tab a referral list showing the three servers with one of those three servers listed as active.
I can see \\domain.com\staff at the top and three lines with \\ad1\staff \\ad2\staff and \\ad3\staff
One of these is active and on clicking check status all three show as OKAY.
Now if either AD2 or AD3 is selected as active everything works just fine and the users see all the paths and their files as expected. If AD1 is made active then the list of folders disappears. ie: I can switch between servers making each active in turn and refreshing the window with \\domain.com\staff open and when AD1 is active the folders disappear on refresh when AD2 or AD3 is active then the folders re-appear on a refresh.
So for some reason AD1 isn't serving up the list of DFS shortcuts. Any suggestions?
NB. AD1 is a Windows 2008r2 SP1 server. AD2 is the same and AD3 is a Windows 2003R2 SP3 server. So no consistency in versions vs the problem server.
Last Comment
ASKER
All tests pass bar SystemLog with this error and other variants at 5 min intervals.
A warning event occurred. EventID: 0x0000043D
Time Generated: 08/09/2011 11:43:36
Event String:
Windows failed to apply the IP Security settings. IP Security settin
gs might have its own log file. Please click on the "More information" link.
A warning event occurred. EventID: 0x00000443
Time Generated: 08/09/2011 11:43:36
Event String:
Windows could not record the Resultant Set of Policy (RSoP) informa
tion for the Group Policy extension <IP Security>. Group Policy settings success
fully applied to the computer or user; however, management tools may not report
accurately.
Which is an annoying thing that's been around for ages but afaik unrelated to the issue.
A warning event occurred. EventID: 0x0000043D
Time Generated: 08/09/2011 11:43:36
Event String:
Windows failed to apply the IP Security settings. IP Security settin
gs might have its own log file. Please click on the "More information" link.
A warning event occurred. EventID: 0x00000443
Time Generated: 08/09/2011 11:43:36
Event String:
Windows could not record the Resultant Set of Policy (RSoP) informa
tion for the Group Policy extension <IP Security>. Group Policy settings success
fully applied to the computer or user; however, management tools may not report
accurately.
Which is an annoying thing that's been around for ages but afaik unrelated to the issue.
ASKER CERTIFIED SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
ASKER
Unresolved
Windows Server 2003
Windows Server 2003 was based on Windows XP and was released in four editions: Web, Standard, Enterprise and Datacenter. It also had derivative versions for clusters, storage and Microsoft’s Small Business Server. Important upgrades included integrating Internet Information Services (IIS), improvements to Active Directory (AD) and Group Policy (GP), and the migration to Automated System Recovery (ASR).
129K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
TRUSTED BY
Try to run dcdiag.exe and see what you can get from it.
//zaZagor