DFS Offline Files

Posted on 2011-10-27
Last Modified: 2012-05-12
Really need help on this.  Have DFS setup no issues similar to fashion to below

\\domain.local\homedrives\country1 -> \\Fileserver\country1$
\\domain.local\homedrives\country2 -> \\Fileserver\country2$
\\domain.local\homedrives\country3 -> \\Fileserver2\country3$

All this works as expected, offline files sync no problems.

The issue I am having is we need to move the Target folder for \\Fileserver2\Country3$ to \\Fileserver\country3$.  This is to centralise all the services in the UK.  So set up copying of all the files and permissions/shares as required.

Once 2 are in sync with each other and tests have been completed to ensure files/permissions are the same change the target to be

\\domain.local\homedrives\country3 -> \\Fileserver2\country3$ now becomes \\Fileserver\country3$

The issue we have is some people get "Access Denied" when trying to access via the DFS share.  This is when accessing the UNC path name and when syncing (Windows 7 Clients)

When testing can access \\Fileserver\country3$ no issues.  Can access \\domain.local\homedrives\country2 and \\domain.local\homedrives\country1 with no issues but when trying to access \\domain.local\homedrives\country3, get "Access Denied".  This is a big issue since most of these people are working remotely over a WAN link and have gigs worth of data.

The file server is moving from a Windows 2003/2008 to a Netapp CIFS share but I do not think this is the issue since only a few people are being affected.  The permissions are identical on both the original and the new server for both NTFS and Shares.

I assume this is something to do with the CSC cache, since clearing it down and resyncing will resolve the issue, but the problem is some people have >10GB of data and will take 3-4 hours to replicate and sometimes more.  Also the fact only some people are effected by this is the other cause for concern.

Any help or ideas greatly appreciated.

Question by:ltwarner75
    LVL 76

    Accepted Solution

    Check the share permissions as well as security permissions of the folder on the server.

    You should maintain both targets for awhile and then define the \\fileserver\country as the preferred. The clients still may have cached DFS target references that point to \\fileserver2.

    Did you add the new one and then remove the old one or ....

    Author Comment

    Share permissions are Everyone - Full Control

    How can I force the target reference to update to \\fileserver

    LVL 76

    Expert Comment

    It takes time for these changes to propagate, 10-15 minutes.
    if you have dfsutil (support tools) you can flash the DFS cache on the workstation.
    Is fileserver2 still available that it can be readded so that the share will exist while the transition occurs?

    Author Closing Comment

    Did not fully answer but provided good insight on where to look to fix the problem

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    In this article, I provide some information on storage disks which go into calculations that will help you figure out how much Input/output Operations Per Second (IOPS) your disk subsystem can deliver. To effectively size & tune up applications l…
    Learn about cloud computing and its benefits for small business owners.
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now