Hi All

My Scenario: I have two 2008 Sp2 servers, one in Site A and Another In Site B. both have DFS replica's of our data, Server A is primary site and Server B is DR Site

The Server in Site B ran out of disk space, I had a bunch of dramas with old data writing over the top of new data when I tried to compress files to get disk space etc, which I sorted out in another thread.

 I needed to add additional disk space to Server B (requiring me to move my DFS shares to the new disk) so decided to remove the DFS replica from Server B completely and set it up from scratch so save any data replicating in the wrong direction again.

So,

- I removed all the replication groups

- removed the folder target

- removed Server B from being a name space server

- unshared all the files

- Created new shares on the new disk

- added the Server B back as a name space server

- added the new shared folder targets

- set up the replication groups

from this point everything said it was successful, no errors in the event log etc

here is my problem:

All of the DFS targets seem to replicate a few 100 mb of data over to the new shares and then just stops, no errors in the event log or anything out of place, just no more data appearing in the shares on the new disk on server B except small ammount

If i use dfsdiag to check the backlogged files, it says there are loads of files qued up, but I can't figure out why it only replicates a few and then stops

I have checked permissions and disk space and all the obvious stuff

I have tried this a few times (removing them and re-adding them) I even went into the system volume info and removed the old DFSR folders as recommended in another post, but still get the same result when I set it all up again, a few 100mb of data and then everything stops

Can anyone shed some light on why this would be happening?

Thanks in advance 

Hello

is it possible to somehow "disable" the option "Delete volume" if you rightklick a volume in disk management?

Regards

I have 8 different OUs. I will call them OU1 - OU8.

Each OU has a GPO assigned to it to redirect client Desktops and My Documents to domain-based DFS shares. The GPO for OU1 redirects to \\Domain\OU1\data. OU2 redirects to \\Domain\OU2\data, and so on. Most of the clients in the network are XP SP3. Redirection for all clients is working perfectly.

The problem is with Offline Files. None of the clients in OU1, OU2, OU5, and OU8 can use offline files. The computers redirect their folders perfectly, and they even synchronize the offline files. If I check in the My Documents folder properties under Offline Files, I can view the offline files and see they are synchronized. But when I unplug the network cable, all the files on the desktop vanish and I only receive an error message when I try to open the My Documents folder. Clients in OU3, OU4, OU6, and OU7 can access offline files normally.

.

• I have reviewed all permissions on all shares and all folders. All settings for all the OU's target folders are identical. There is no difference between the ones that work and the ones that do not.
• The problem is not with the GPO in the OU. I have rebuilt the GPO and it still doesn't work. They have the exact same settings as the OUs that work. There are no other GPOs acting on the OU.
• I have deleted and rebuilt the DFS Domain-Based Namespace for the broken OUs. This did not fix the problems. The DFS namespaces that do not work have the exact same settings at the those that are working.
• The Offline File Settings found in Share and Storage Management on the DFS servers show all the same settings for all shared folders, both those that work and those that do not allow access to offline files. They are all currently set for "Only the files and programs users specify are available offline." I have also tried setting this to "All Files..." for the affected users and it had no effect.

MOST IMPORTANTLY:

• Moving a user from an OU that doesn't work to an OU that is working DOES NOT fix the problem. 

• Changing the broken OU's redirection to access a single DFS server directly allows the client to use offline files properly. For example, intructing the client via GPO to redirect to  \\Domain\OU1\data DOES NOT WORK, but changing the GPO to use \\Server\share  (where this is the same folder target as the DFS path) allows the client to work with offline properly. 

.

What setting would cause problems only for some clients, in specific OUs, that are trying to use offline files ONLY when the originals are stored in folder targets accessed via DFS Namepsace path. but NOT when the originals are stored using standard UNC path to a server directly?

I have a Windows 2008 R2 server environment.  Forest and Domain are set as Windows 2008.  My 2 file servers are Windows 2008R2.  I have created a name space in the domain and now have 2 folder targerts on the 2 file servers. When I try to configure replication I get a error

"The folloing folder targets cannot be added as DFS Replication members.  Click Details for more information."

Details:

\\servername\sharename

Domain\servername$: The Windows NT 4.0 account name cannot be converted to a fully qualifies distinguisedname on server.domain.local.  The name returned with an error.

I have tried adding a different share and even adding the folder targets as FQDN and NETBIOS name and get the same error.  I can't seem to find anyything in my searches that would lead me to fixing this issue.  There is nothing in the event log.  I cannot to a replication diagnostic since the option is not there in DFS managment.

I've recieved a VolSnap 20 error in system event viewer before our server rebooted on its own.  Odd thing is shadow copies are disabled on this server.  This has happened twice now.  And the only errors I see before the unexpected shut down is VolSnap 20.  The server isn't a file server, and it's running Server 2003 R2 Enterprise.  This issue look familiar to anyone?

We have a san with a pretty deep folder structure. When someone needs access to a folder several levels down, we'd rather create shortcuts directly to the folder than give traversal rights all the way down. We can map a separate drive to the folder, but that will get pretty messy for some users after a while.

It seems to work on our 2008 terminal servers, but not to the windows based san. Is there a way to do this on the san?

Hi all,

This is more of a technical clarification than a problem we're having...

Firstly, we have a bunch of file servers in various EMEA regions, which are set up to replicate back to a central hub server at our UK datacentre in order to take backups. These spoke servers are the only location where the data is changed.

We are in the middle of migrating the hub server over to Windows Server 2008R2, meaning we can use the supported one-way replication method instead of disabling one end of the member connections.

My question is this:

Which member do we need to make read-only? This would have seemed obvious to me, however there is some confusion amongst our systems engineers.

I would have said that you make the spoke member read-only, as you don't want the hub replicating anything back to it. This makes perfect sense to me, but not everyone is so sure.

Could someone please clarify?

Hello! 

I recently setup a Dell PE410T server that has 6 (2x500GB 4x2TB) drives using Windows server 2008 R2 SP1. Unfortunately the card came with a SAS card instead of a PERC card. I was unaware of the difference be tween the two and my Dell rep never pointed it out.. surprise surprise. The SAS wont do RAID5. So to work around this I configured hardware mirroring for the system drives and decided to use Windows Software RAID5 for the 4x2TB drives. Due to client demands I had to roll-out the server before the initial sync was completed. I find the sync keeps having to rebuild after each reboot. It's brand new so there are no disk failure problems.

Is there any way to speed up this process? They are obviously seeing the performance hit. The machine is a quad-core Xeon and overhead is at 25% on the disks at the moment. I noticed it's also taking an exorbitant amount of time to sync.. like days just to do 25%. Is this normal?

Rob Holmes

Hello,

I have a doubt here for a shared location, for an example: \\server01\public\data ( Windows Server 2003 )

A user has Read and Write Access on it. I want him to be blocked from moving/copying data from this folder to any.

Is that possible? If Yes, How?

Thanks,

Noufal

We have a situation where we need to access the Win 2008 shared folder files from IPAD app. The problem is that
the app does not consider the security settings of the shared folder. It shows all the files despite restrictions. This works fine in Win 2003 but has issues in Windows 2008. Using WebDav is not an acceptable solution. Any ideas?

OK, I have a file server, migrated from 2003 to 2008r2.  The file system is extensive, and there are permissions set in many unknown places, and there is no single user who has access to all the files that is NOT an administrator.

I have had some problems with missing files, so I want to turn on auditing (delete and change privs).  When I go to do this, UAC blocks me from doing it at the root folder d:\folder  (standard access denied error, add privs, blah blah).  Force inherit wipes out existing priv's.  Adding the Audit to the root is not auto propigating down the file system.  Best I can tell, I have to;

1. Turn off UAC, make the changes, and turn UAC back on.  This will require a reboot of the system, twice since we want it on.
2. Reset the permissions on the entire Directory structure, seize ownership, add my user by name, and set auditing.  This will wipe out any existing acl's.  Clearly this is not what I want, OR what MS intended.

There MUST be a better option.  I did try the icacls command to add a user, but the UAC stopped it as well, even when run as admin.

BlankMonkey

On my DC (Server 2003 R2 SP2) I have 3 volumes with VSS taking snapshots twice daily.  2 of the 3 work flawlessly.  The other one has started failing regularly with several errors:

ID: 7001 VssAdmin: Unable to create a shadow copy: The shadow copy provider had an error. Please see the system and application event logs for more information.
Command-line: 'C:\WINDOWS\system32\vssadmin.exe Create Shadow /AutoRetry=5 /For=\\?\Volume{b50a79eb-7418-49f6-a185-679e1fdebc9a}\'.

ID: 12298 Volume Shadow Copy Service error: The I/O writes cannot be held during the shadow copy creation period on volume \\?\Volume{b50a79eb-7418-49f6-a185-679e1fdebc9a}\. The volume index in the shadow copy set is 0. Error details: Open[0x00000000], Flush[0x00000000], Release[0x80042314], OnRun[0x00000000].

ID: 12310 Volume Shadow Copy Service error: The shadow copy could not be committed - operation timed out. Error context: DeviceIoControl(\\?\Volume{b50a79eb-7418-49f6-a185-679e1fdebc9a} - 000001C0,0x0053c010,00AA0048,0,00AA1050,4096,[0]).

I am running version 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) of vssvc.exe

A reboot allowed 2 successful snapshots on this volume but then it failed again.  There are no errors from a vssadmin list writers command and the only provider listed from a vssadmin list providers is:

Provider name: 'Microsoft Software Shadow Copy provider 1.0'
   Provider type: System
   Provider Id: {b5946137-7b9f-4925-af80-51abd60b20d5}
   Version: 1.0.0.7

Is there a hotfix I am missing or a newer version of VSS i should install?  Or perhaps this is related to the volume since VSS works fine on the other two volumes.

Your assistance is appreciated!

Thanks,

Tzuriel Kastel

Hi

I had to do a clean install on a CPU Running XP Pro.  I lost my network connection via the LAN.

My CPU sees the network wirelessly, but I prefer to run a wired network.

My previous 'settings' were found via network connection wizard.

But I still don't have LAN access.

I am not sure how to better ask this question in a clear manner.

Thanks

AS

Can anyone tell me the framework version of VSS/VDS for windows serves 2012? 

I know that for Win2008 R2 it was 2.0, 3.0.

Also was curious to know if Microsoft has release or planning to release itanium based win 2012 server.

Cheers!

V

HI,

Hi Guys,

I am trying to extend a virtual disk on storage spaces.On the GUI, i am able to do it, but just want to seek for your opinion what should be the right way of doing this in powershell. What I have did is the following

a)Extending the storage spaces by using the following command

Add-PhysicalDisk –StoragePoolFriendlyName “Storage Spaces Pool” –PhysicalDisks (Get-PhysicalDisk –friendlyname PhysicalDisk5

b)I want to extend the virtual disk and how should I do it?

c)the last part would be extending the volume, and I think would be using diskpart, do correct me if I am wrong.

Looking forward on your kind advise on this.

We have a brand new DFS namespace (called "Data") which is currently hosted on a Windows Server 2008 R2 DC with no replication enabled at the moment.

"\\domain.local\Data"

Within this, we need to create other directories such as:

 - "Users" containing subdirectories for each user home directory, e.g. "\\domain.local\Users\John.Smith". Only the user in question and admin team (defined by a security group) must be able to access each home directory folder.
 - "Management" containing confidential company data. Only the admin team and the directors (again, defined by a security group) are allowed to access this.
 - "Departments" containing subdirectories for each department, e.g. "\domain.local\Departments\Sales". Only users in the appropriate department must be able to access their department's folder and not those belonging to other departments.
 - "Shared" which will be an area that all users can read and write to (Domain Users).

Previously, we have taken a least-privilege approach, whereby only the System account, Administrator account and built-in Domain Admins group have Full Access to the root of the folder structure. All subdirectories inherit their NTFS permissions from the parent and additional permissions are granted where necessary down the directory structure. This approach seemed to work well for basic file shares, but not so well when we used domain-based namespaces in DFS.

As an example, we have seen that if a user does not have at least "List Folder Contents" priviliges to the directories above their DFS-based home directory, Microsoft Office applications seem to hang when using the File > Open method to open files. Word/Excel/PowerPoint simply waits on "Trying to connect to \\domain.local\Users\John.Sm..." for about 20 mins, times out and then carries on as normal without any issues when browsing through folders. This is then fine until the application is restarted, at which point the same thing happens again.
Simply granting "List Folder Contents" NTFS permissions to all users on the "Users" directory or root namespace folder seems to correct this. However, with inheritance enabled, this will then allow all users to view the contents of all other home directories unless the inheritance is removed and the permissions manually set on each home directory.

I have found a lot of articles suggesting different approaches to securing DFS roots and folders, but was hoping to clarify the recommendations and best practices for assigning NTFS permissions to DFS namespaces and directories.

Also, I have read that it is recommended to apply any permission changes to the local data path (e.g. D:\Data\Departments and not \\domain.local\Data\Departments). Is this correct?

Finally, I was also interested to know if there is any benefit to creating new folders through DFS Management or if it is best to simply create them as normal through Explorer?

Thanks for any comments.

Hi all,

I have a big problem with the performance during file access over a SMB share. The performance drop is always done with small files. If I copy a single large file, I have the full Gigabit speed (transfer rate: 120 MB / s). As soon as I but many small files (about 1000 with a size between 100kb and 5MB), the speed breaks to 10 - 15 MB / s one.

The HDD cannot be the problem, if tested it also with a SSD drive.

I copied the same files locally (no network) and so I get a speed of 300 MB/s. If I do it over the network (Gigabit) (on the PC itself, via IP or localhost), I get a speed of 70 MB / s. I tested the same between two PCs (same configuration as before) with a Gigabit Switch (various types tested), the speed breakes down to 15 MB / s.

The same I have tested with various switches, PCs, servers, and network cards. I have always the same problem.

I have already done the Guideline Performance Tuning for Windows Server 2008 R2, and (disable SMB2, adjust MTU value, Send Offload disabled, etc.) other tips. Unfortunately, none of the entire Board entries has helped .

Does anyone experience this problem? Would be great if someone could help me.

For hardware and software:

- HP EliteBook 8460p with 240 GB SSD 6 Gb

- ProLiant BL 460 X5670 64GB RAM, 4x 300GB SAS 6GBs

- ProLiant BL 680 E7-4830, 64GB RAM, 4x 200GB SAS SSD 6GBs

- Various HP all Gigabit Switch (J9559A, ProCurve 1800-24G, etc)

- Tested with Wndows 7 Pro, Windows 2k8 R2, all up-to-date

Thanks very much!!

Regards

Dennis

I have a Win 2008 R2 server setup as a terminal server. I have installed DFS management and created a new folder on the C: drive called test. Enumeration is enabled on the namespace. I created a standard user called "Test" and denied Test access to the test folder. When I log into the server under the test account, I can still see the test folder.

I have tried setting explicit view permissions and inherited permissions from the local file system. Neither setting hides the folder.

What I am looking for is a way to visually hide folders from users logging in to the terminal server if they do not have read/write access to said folders. Am I going about this the wrong way?

Dear Support,

I am going to build up a new file server.

we found that Microsoft have a storage server 2008 support user to upload and download file in share folder at  website like NAS.

Can Windows Server 2008 R2 standard or enterprise support this function.

Thanks