Link to home
Create AccountLog in
Avatar of westhelpdesk

asked on


Okay i have been on here and asked lots of questions concerning this but hopefully this question will clear things up...

I have 3 target servers for namespace and 5 shares..we will call target servers a, b, and c..shares 1-5....

Servers a and b in same site...server c in own site...

I want all clients to go to server a then b then c...seems i enable referrals....

I override referrals and set server a as first among all targets..
I leave Server b referrals as is..
I override referrals and set server C as last among all targets...

This is all setup on each shared users should go to Server A then b and then c but i see clients connecting to server b or a or c ...they basically connect to who ever they want...

All sites are setup in ad sites and services correctly..what gives ....why is this and why are clients not going to server a as supposed to....I mean this should work the way it setup...correct???thanks for any help...
Avatar of compdigit44

I would suggest you check the ordering method for your targets...

Make sure you are using the "Lowest Cost" ordering method..
Avatar of westhelpdesk


Yes, using lowest cost ordering method...and read that article while back so all is setup correctly...The only thing i can think of is....Microsoft says a machine doenst have to be a domain controller to be a namespace server....the one machine in question is a member server which is a virtual machine....could this be the cause????

When i am running the DfsMon gui utility and check replication group name and then i look at the member names....this virtual machine is the only machine that the rpc port assignment is dynamic and not a specific port......anythoughts????
IN AD Sites-n-Services you have two sites . One for servers A & B and another one for server C correct?

Have you tried using the dfsdaig tool on a client workstation in your remote site.

Please check out the following artilce, specifically that part regarding IPv6
yes, correct on ad sites and services...

I have looked at that article before and others and their is a check mark next to ipv6...

when i ran dfsdiag /testreferrals it looks like dfs is using the ipv6 or at least it is saying ip addresses with conflictiing site the server then site and then domain contoller then it shows and ipv6 mac address with no mapping exists...

I am not using ipv6 at all nor do i plan to disable or stoop dfs from using it.....thanks for your help...

from the article before it mentioned to make sure there is a check mark beside ipv6 in adapter settings...which their is...i have also went into dns and under interfaces choose to only use the dc ip address and not both ipv6...i have then went into ipv6 under adapter settings and choosen ipv6 not to register with dns....

how can i make this work???Thanks again for you help...
Here is how you can disable IPV6 in 2008 and 7

Also, on your server and client under Network Properties -> Advanced Options make sure IPV4 is listed ahead of IPV6
okay quick questions...i see that it is not recommended to disable ipv6 so what disired affects with this have on the network???

Have you used this for dfs yourself with success? is there anything i need to be worried about disabling ipv6....thanks for all your help....
okay did this and now instead of ipv6 mac address i get ::1 no mapping what....what exactly is ::1 and i am assuming it is showing this from ipv6 being disable....any thoughts?????
::1 is associated with IPV6 did you reboot your server?
can you please upload the following information and block out any sensitive information of course..

1) ipconfig /all
2) dcdidag /v /e >c:\dcdiag.txt
3) Results of dfsdiag
when running number 2 all tests passed on all servers with the exception of this error....all SERVERS failed test NCSecDesc......which reading through microsoft they mentioned that if i did not plan to add a RODC to enviroment then i can disregard this error..which i dont plan on adding a RODC to the is results of ipconfig /all....j

C:ipconfig /all

Windows IP Configuration

   Host Name . . . . . . . . . . . . : Server
   Primary Dns Suffix  . . . . . . . : Domain
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : Domain

Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : HP Network Team #1
   Physical Address. . . . . . . . . : Mac
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : Ge45::5052:18cb:4783:2986%14(Preferred
   IPv4 Address. . . . . . . . . . . : Server IP Address(Preferred)
   Subnet Mask . . . . . . . . . . . : Subnet
   Default Gateway . . . . . . . . . : Gateway
   DHCPv6 IAID . . . . . . . . . . . : 449391234
   DHCPv6 Client DUID. . . . . . . . : MAC

   DNS Servers . . . . . . . . . . . : Primary DNS Server
                                       Other DNS Servers 4......
   Primary WINS Server . . . . . . . : Primary WINS Server
   NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Local Area Connection 3 USED FOR NAS DEVICE:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : HP NC382i DP Multifunction Gigabit Se
 Adapter #54
   Physical Address. . . . . . . . . : MAC
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv4 Address. . . . . . . . . . . :
   Subnet Mask . . . . . . . . . . . :
   Default Gateway . . . . . . . . . :
   NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter isatap.{8574985749f9j430249rj439tu439tyr}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter
   Physical Address. . . . . . . . . : MAC Address
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.{1fdksjfdskldslfsofdmfd}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter #3
   Physical Address. . . . . . . . . : MAC Address...
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 11:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
   Physical Address. . . . . . . . . : MAC Address
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
One things I need to verify is are you using a Stand-Alone or Domain based DFS?

I see you are using A HP NIC Team. ON you NIC team Uncheck or uninstall the Link-Layer items which are associated with IPV6. You can do this for all adapters.
Are you sure you followed all setup on disabling IPV6?

Have you tried to force over ride priority?
i am running Domain based DFS

would rather add ipv6 to ad sites and services..after reading microsoft articles it is recommended to not disable ipv6 because windows 7 and vista uses this for different services and starting to upgrade systems to windows 7 and dont want to mess anything on windows 7 end by disabling to add ipv6 to ad sites and services so ipv6 is associated with site then this should fix issue....

Yes i have over ridden priority with the above post configurations....

Thanks for all your help.....
IS you server Windows 2008 or 2008 R2

Is DFS setup to use Winodws 2008 mode?
2008 R2 and yes DFS setup 2008 mode. Thanks Again!!!!

1) Does a Windows 7 workstation access the correct DFS site location as compared to a Windows XP workstation.
everyone is hit and miss no matter what os.....

i believe the issue is being caused by the link-local ipv6 address that windows gives out....i have read that article before and doesnt apply here for i have tried all suggestions...even giving a static ipv6 address and rebooting the server still leaves the link-local ipv6 address intact which still shows up as not having a static mapping which i believe is confusing dfs and clients...any other suggestions....i appreciated all your help...

I wouldnt think it would be this difficult to just add link-local ipv6 address to active directory sites and services as a subnet but looks like it is..thanks again...
On you DFS server under advanced network properties, is IPV4 listed on top then IPv6 on the bottom in regards to protocal order

Also when i go to each client at respected site and go to the public folder and then under each share i right click and go to properties then under the dfs tab it shows that each folder is in the correct active server....

but when i login to the one of the target servers and under computer management,,,under sessions it shows clients from other sites connected to this server which they should not be....very weird but like i said the only thing left is the stupid ipv6  Link-local address not being associated with a site in adss....thanks again....
In DFS are clients access the server using it's FQDN or NetBios name?
Check out the following thread:

It is very similar to you issue..

Have you run the DFS BPA on your server?
This does not apply to my environment for we are running all windows machines with dns and wins..

Users are connect to namespace.....\domain\public\shares

Thanks again for all your help!!!
yes...all was good with the exception of it showing a large number of replication conflicts due to uses editing same file on different servers which should be using one server not two....
Do you sites use different IP ranges?  Check out the following article:

Also, please read the MS article on DNS netmask ordering:
unfortunately netmask ordering will only work for subnets where we have a DC in that same subnet which unfortunately is not the case in our environment..thanks again for all your help...

P.S...Just ran dfsdiag /testsites and came back with this....

Warning: The server has IP addresses with conflicting site associ
Host name: Domain Controller
Site: Location
Domain controller: Different domain controller at different site
Host IP address                         Subnet-SiteMapping in AD
fe80::5052:18cb:5487:34c%18            No mapping exists

As i stated before..its this stupid ipv6 link local messing everything would this there has to be a way to add this to ad sites and services....Thanks again for you help...
Would it be possible for you to upload the screen shot of your AD Site and Services settings?

ALso,  please see the following link as well.
not sure what this article has to do with me...My connections are not slow or having issues other than local-link ipv6 has know static mapping which is confusing dfs and client..just want to add local-link ipv6 to active directory sites and services.....thanks for you help...

Unfortunately i am not able to post ad sites and services screen shot....although it is setup correctly...
I beleive you tried to disabled IPv6 previoulsy but can you try to do the following on all of your DFS servers, AD and DNS in addition to one client at each site.

This is just a test which can be reversed.
Yes, but after further review have decided against disabling ipv6 because it is not recommended by microsoft and windows vista and 7 machines use this for other services.

I would like to just add link-local ipv6 into ad sites and services....Thanks for all your help...
OK I here what you are saying...

Check out the following article. It may provide some helpful troubleshooting information..
hey, thanks for the article but unfortunately i have already tried those suggestions...have ipv6 checked and even when assigning a static ipv6 i still go link-local as no static mapping.

I actually thought if you assigned a static ipv6 address then the local link would disappear but it didn't...both where visible now which doesn't make sense....

I cant believe it is this difficult to add link-local ipv6 to ad sites and services....

Thanks for all your help i appreciate it...
Thats what i am trying to do add the link-local ipv6 address into ad sites and services but it wont allow if i want to add let say address....


To AD Sites and would i input that??????

Thanks for your help....
What error is it giving you?

CAn you upload a screen shot of what you are gettin?
when i attempt to add

as a subnet it will not let me add it to a site and then click ok to add it....I might be typing something wrong but i have no clue how to add that address as a would you add the address as a subnet....what would you type??? the format?? Thanks Again...

P.S. I dont get an error because i cant add it....
I'm not an IPV6 expert, but I wonder if the problem is the fact you are using a statless IPV6 address????

Here is now to setup a static IPV6 address but I never have had to do this before on any of my servers and usually just completed disabled IPV6 on all of my servers and DC's..
setup static ipv6 before but it still shows link local as not having a static mapping....when created static ipv6 was able to add it to ad site and services and didnt show up as no static mapping so it worked but link local is always showing up as no static mapping for i am not able to add it to ad sites and services....This is very frustrating...this can not be that difficult...dont understand why things should just work the way they should.....thanks for all your help with this....not sure stateless applies here for it is not giving itself its own address...this is an link local address which server 2008 gives its ipv6 adapters address...almost like an apipa address in ipv4.......thanks again for all your help....

Like I mentioned before I haven never had setup anything for IPV6 in my past installs of DFS. Then again I have always disabled IPV6.

I have searching the net and found the following posting for the same issue you are having:
disabled round robin and still nothing......user are still connecting fact it might of made it worse....not sure though...seems more users connecting to that server now....Thanks for all your help....
I'm assuming you have already done the following listed in this artcile but wanted to double check..
Yes, referrals are correct...have 3 namespace servers A,B,C....A&B are in same subnet..both DC....C is in different subnet and DC....Server A marked first among targets...Server B last among targets of equal cost.....Server C marked last among targets....So users should go to Server A and if A is down then B and if A & B down then C.....but user connecting to what ever they want.....Thanks Again for all your help....
Are all servers global catalog servers?
Have you run the File Services Best Practices Analyzer yet?
yes, all in fine with the exception of large file conflicts of replicated folders due to ipv6 having no mapping i believe....
have you though about opening a support case with Microsoft support???
At this point you may want to call in the true experts... ;-)

I would me money well spent
hey just noticed something in ad sites and services...under inter site transport you have IP and smtp...under IP i have my defaultipsitelink...this has one site link with all 4 sites in it..cost is 100 and replication is 180....what if i create 2 site links and make the cost lower on the one.....not sure if this would work or not but i have 3 namespace servers in 2 different sites...have 4 sites all together....i believe you have to has to sites to make a site link...was thinking of making 2 site links out of the 4 sites and then make one of the sites with a lower cost...any thoughts....thanks for everyones help...

P.S.can i create 4 site links and lower cost...say site 1 would be 2 3 80...etc
It sounds like it worth a shot!!!

Let me know how you make out with this..
Here another good article on AD Sites-n-Services:
okay have noticed something my setup is...10sites named 1-10...sites 1 and 2 have namespace 1 has 2serves and site 2 has 1 server...just recapping for long thread...

site 1 servers are a and 2 server is for 1 ,,server a is marked as first among all 1..server b..marked last among all targets of equal cost....and site 2..server c is marked last among all users should go to site 1 server a then b and then site 2 server c...

I have notice the issue lies within site 1 with the two servers a and b....seems users are connecting to these 2 servers 2 server c has no one so it is working as supposed to....does anyone have any thoughts as to why site 1 with both namespace servers could be getting confused....seems like parts of dfs is working....Thanks again for everyones help...
Do either server in site 1 have multiple NIC's? If so are you using NIC teaming?

Are there any duplicate DNS enteris in DNS for your Site 1 servers?
Check this out...

Site awareness is not working correctly because the restrictanonymous registry entry located at HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control/Lsa is set to 2 on Windows 2000 domain controllers. If this registry entry is set to 2, DFS root servers that are not domain controllers (and are running either Windows 2000 Server or Windows Server 2003) randomly sort the targets in a referral, regardless of the namespace type (stand-alone or domain-based), target selection method, or client operating system
Quick question...have 2 site links....a and b....cost link on a is 100 and cost link on b is 90....which link a or b would clients go to first???Thanks for any help...i would think that correct....
Yes one server in site 1 has mutilple nics and using duplicate dns entries for either server

Using server 2008 mode and restrictanonymous is set to 0
P.S..just curious have about 17 sites altogether....4 sites have dc...i have associated the other sites with our main DC i need to have a different site added to ad sites and services and then associate the subnet or can i have tied 13 different subnets to one site where main dc is??? Thanks again for everyones help...
Just for kicks try to desolve you team and just use one NIC.

Again this is just a test.

Also, client will always go to the low cost DFS server first!!!
Did it and users still connecting to it...not as many but they still are...

All sites in ad sites and services are in one ip defaultfirstsite which is cost 100 and replicate 180...if both dc have cost of 100 then how to get around this....would this not then fall back on the referral order.....
Try setting one server cost over than the other..
I assume you have already seen this article:
Yes, have referrals far as setting one server cost over the other where do you do this???? In ad sites and services i only have one linkconnection with all sites in it....even if i split that up the issue is with the 2 servers in same site....thanks again for all your help..
Have you check your DFS target referral settings though
yes...server a in site one setup as first among all targets...server b in site one setup as last among targets as lowest cost and server c in site 2 setup last among all targets
What are your client cache referrals set to?
clients cache set to defaults....I didnt touch those
DO you have your referral set at the folder or root level?
Both...should they be set at one or the other....i perfer the folder level.....could they be conflicting with each other....
I agree with westhelpdesk, I always setup my referrals at the folder level and not the root level
for ad sites and services....i have 17 subnets but only 4 sits...13 subnets is associated with one site where are main dns,gc is....should i have it this way or should i create a site for each subnet and put subnet in correct site or does this not matter for dfs...

prior to dfs the system was setup this way and all working good....didnt know if this matter...thanks for any help...
Hi westhelpdesk, sorry for my confusing previous post.

Can you please clarifiy the following for me.

1) Are you referral set at the root or folder level? If using both try to just use the referrals at the folder level.

2) In regards to your sites: Are you DC's on separate vLAN or subnets as your clients. What about your DFS server same or different subnet as DC's..

Can you please upload some type of text file detailing you site subnet layout ...
had targets setup on both and moved to just folders now...

Have 17 sites all together with all on different subnets....

will call sites 1-17...

Sites 1 -4 have 1 has 3 2 has 1dc...site3 has 4 has 1 dc...

have 3 namespace 1 has 2 and site 2 has 1.....

In ad sites and servers i have 4 1 has 3 dc..site2 with dc...site3..with dc and
site4 with dc....all sites on different subnets....subnets 5-17 are all put in site 1 with 3 dcs....

I hope this explains it a little better and thanks for all your help...if you have anymore questions just ask......
Avatar of compdigit44

Link to home
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
have left settings sit over weekend with no change.....actually made things worse...more clients connecting to other servers now.....

do you disable ipv6 on your network?

any issues with xp or win7 clients having this disabled?

I know they recommend against it but this is ridiculous..this stuff should just work as advertised and i would think it should be this difficult but looks like alot of people experience this and no one thing resolves issue....its like dfs has a mind of it own....

Thanks for all your help....
okay seems thing a little better...all though i have referrals setup on namespace and folders...seems when setup on folders clients connected that setup on namespace and folders seems to be working alot better....clients seem to start connecting to right servers...
This is wonderful news!!!!!

Great job !!!!!!!
ya,,,your not kidding but as to what happened to fix the issue...who knows???? pick one of twenty...all though not complaining by any means....just happy it started working for now...will monitor a little while longer....thanks for everyones help....
Hey you did all of the hard work... haha ;-)
A long trip but worth it!! Thanks for all your help!!!
I'm happy to hear things are working better for you now..