User Slowness on Clustered File Share for S2D without Domain Admin Privileges
Microsoft File Share using Storage Spaces Direct Fail-over Clustering Servers.
This File share is used for many millions of small files. For end users the search, and simply loading of each folder contents takes forever!!! 1 minute + at times maybe up to 30 mins for searches. The interesting part about this is it only happens for "users" When myself or a few other IT members attempt it works instantly! Speed isn't an issue and server resources aren't contended for that i'm seeing. It is appearing to be something with permissions.
User A - slow to load, takes forever, searches spin for 30 mins.
When we give User A Domain Admin rights - Everything becomes instant!!!!!
Remove Domain Admin and the user is back to the normal slowness.
The user has Modify Privileges on the file share.
Sadly do I have to give permissions to the CNO in AD? If so, what permissions do I need to allow?
This File share is used for many millions of small files. For end users the search, and simply loading of each folder contents takes forever!!! 1 minute + at times maybe up to 30 mins for searches. The interesting part about this is it only happens for "users" When myself or a few other IT members attempt it works instantly! Speed isn't an issue and server resources aren't contended for that i'm seeing. It is appearing to be something with permissions.
User A - slow to load, takes forever, searches spin for 30 mins.
When we give User A Domain Admin rights - Everything becomes instant!!!!!
Remove Domain Admin and the user is back to the normal slowness.
The user has Modify Privileges on the file share.
Sadly do I have to give permissions to the CNO in AD? If so, what permissions do I need to allow?
Last Comment
ASKER
CNO = Certified Nerd Observer? ? No, I believe it is "Cluster Name Object"
Correct The Domain Admins have Full Control on the CNO and at the Share level.
We have two users that use this heavily. The two users that are having issues are granted Modify privileges at Share level.
Yes, they are user based permissions.
Correct The Domain Admins have Full Control on the CNO and at the Share level.
We have two users that use this heavily. The two users that are having issues are granted Modify privileges at Share level.
Yes, they are user based permissions.
ASKER CERTIFIED SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
Please clarify: Is Storage Spaces Direct hosting a shared folder directly on the cluster CSV that users are storing files on?
If the answer is yes, then that's a no go.
Scale-Out File Server services on S2D are to host .VHDX files only.
File Sharing/Services has been a request from day one, but is not a feature/role for S2D at this time.
Set up a VM on the cluster, move the data into the VM, and publish the folders/files that way.
EDIT: If up time is a concern, then set up a guest cluster with each guest node set to reside on a different S2D cluster node. Just keep in mind that backing up guest clusters is a challenge.
If the answer is yes, then that's a no go.
Scale-Out File Server services on S2D are to host .VHDX files only.
File Sharing/Services has been a request from day one, but is not a feature/role for S2D at this time.
Set up a VM on the cluster, move the data into the VM, and publish the folders/files that way.
EDIT: If up time is a concern, then set up a guest cluster with each guest node set to reside on a different S2D cluster node. Just keep in mind that backing up guest clusters is a challenge.
Active Directory
Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.
86K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
TRUSTED BY
File enumeration/Open is one of the slowest items that windows does.
The Domain Admins probably have full control at the directory level (and inherited)
I don't know your ACL settings whether or not you are using Role Based or per user based Security Settings.
If you are using user based then the OS has to for each file first check for group permissions, failing that check the user permissions. All of this takes time.. multiply that time by the # of files to process. I've seen files with hundreds of users in the security tab.