Avatar of Donna H
Donna HFlag for United States of America

asked on 

User Slowness on Clustered File Share for S2D without Domain Admin Privileges

Microsoft File Share using Storage Spaces Direct Fail-over Clustering Servers.

This File share is used for many millions of small files. For end users the search, and simply loading of each folder contents takes forever!!! 1 minute + at times maybe up to 30 mins for searches. The interesting part about this is it only happens for "users" When myself or a few other IT members attempt it works instantly! Speed isn't an issue and server resources aren't contended for that i'm seeing. It is appearing to be something with permissions.

User A - slow to load, takes forever, searches spin for 30 mins.
When we give User A Domain Admin rights - Everything becomes instant!!!!!
Remove Domain Admin and the user is back to the normal slowness.

The user has Modify Privileges on the file share.
Sadly do I have to give permissions to the CNO in AD? If so, what permissions do I need to allow?
* file sharingStorageActive Directory* User permissions* Failover Cluster

Avatar of undefined
Last Comment
Philip Elder
Avatar of David Johnson, CD
David Johnson, CD
Flag of Canada image

CNO = Chief Networking Officer? (Chief of Naval Operations?)

File enumeration/Open is one of the slowest items that windows does.
The Domain Admins probably have full control at the directory level (and inherited)
I don't know your ACL settings whether or not you are using Role Based or per user based Security Settings.
If you are using user based then the OS has to for each file first check for group permissions, failing that check the user permissions. All of this takes time.. multiply that time by the # of files to process.  I've seen files with hundreds of users in the security tab.
Avatar of Donna H
Donna H
Flag of United States of America image


CNO  = Certified Nerd Observer? ?  No, I believe it is "Cluster Name Object"

Correct The Domain Admins have Full Control on the CNO and at the Share level.

We have two users that use this heavily. The two users that are having issues are granted Modify privileges at Share level.

Yes, they are user based permissions.
Avatar of Donna H
Donna H
Flag of United States of America image

Blurred text
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
Avatar of Philip Elder
Philip Elder
Flag of Canada image

Please clarify: Is Storage Spaces Direct hosting a shared folder directly on the cluster CSV that users are storing files on?

If the answer is yes, then that's a no go.

Scale-Out File Server services on S2D are to host .VHDX files only.

File Sharing/Services has been a request from day one, but is not a feature/role for S2D at this time.

Set up a VM on the cluster, move the data into the VM, and publish the folders/files that way.

EDIT: If up time is a concern, then set up a guest cluster with each guest node set to reside on a different S2D cluster node. Just keep in mind that backing up guest clusters is a challenge.
Active Directory
Active Directory

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.

Top Experts
Get a personalized solution from industry experts
Ask the experts
Read over 600 more reviews


IBM logoIntel logoMicrosoft logoUbisoft logoSAP logo
Qualcomm logoCitrix Systems logoWorkday logoErnst & Young logo
High performer badgeUsers love us badge
LinkedIn logoFacebook logoX logoInstagram logoTikTok logoYouTube logo