On one of my members I get the following error:

The same server is a member of other DFS Repliaction Groups, which reports no problems...

I cannot see any related messages in DFS Replication Event logs.

I'm replicating between two servers in two sites (Server A - Server 2012 R2 STD, Server B - Server 2008 R2) over a VPN (Sonicwall Firewall).  Though the initial replication seems to be happening it is very slow (the folder in question is less than 3GB).  I'm seeing these in the event viewer every few minutes:

The DFS Replication service is stopping communication with partner PPIFTC for replication group FTC due to an error. The service will retry the connection periodically.

Additional Information:

Error: 1726 (The remote procedure call failed.)

and then....

The DFS Replication service successfully established an inbound connection with partner PPIFTC for replication group FTC.

-------------------------------------------

Here are all my troubleshooting steps (keep in mind that our VPN is going through a SonicWall <--I increased the TCP timeout to 24 hours):

-Increased TCP Timeout to 24 hours 

-Added the following values on both sending and receiving members and rebooted server

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters

Value =DisableTaskOffload

Type = DWORD

Data = 1

Value =EnableTCPChimney

Type = DWORD

Data = 0

Value =EnableTCPA

Type = DWORD

Data = 0

Value =EnableRSS

Type = DWORD

Data = 0

---------------------------------more troubleshooting--------------------------

-Disabled AntiVirus on both members

-Made sure DFSR TCP ports 135 & 5722 are open

-Installed all hotfixes for 2008 R2 (http://support.microsoft.com/kb/968429) and rebooted

-Ran NETSTAT –ANOBP TCP and the DFS executable results are listed below:

Sending Member:

[DFSRs.exe]

  TCP    10.x.x.x:53            0.0.0.0:0              LISTENING       1692

[DFSRs.exe]

  TCP    10.x.x.x:54669        10.x.x.x:5722          TIME_WAIT       0

  TCP    10.x.x.x:54673        10.x.x.x:5722          ESTABLISHED     1656

 [DFSRs.exe]

  TCP    10.x.x.x:64773        10.x.x.x:389           ESTABLISHED     1692

[DFSRs.exe]

  TCP    10.x.x.x:64787        10.x.x.x:389           ESTABLISHED     1656

 [DFSRs.exe]

  TCP    10.x.x.x:64795        10.x.x.x:389           ESTABLISHED     2104

Receiving Member:

[DFSRs.exe]

  TCP    10.x.x.x:56683        10.x.x.x:389           ESTABLISHED     7472

 [DFSRs.exe]

  TCP    10.x.x.x:57625        10.x.x.x:54886         ESTABLISHED     2808

[DFSRs.exe]

  TCP    10.x.x.x:61759        10.x.x.x:57625         TIME_WAIT       0

  TCP    10.x.x.x:61760        10.x.x.x:57625         TIME_WAIT       0

  TCP    10.x.x.x:61763        10.x.x.x:57625         TIME_WAIT       0

  TCP    10.x.x.x:61764        10.x.x.x:57625         TIME_WAIT       0

  TCP    10.x.x.x:61770        10.x.x.x:57625         TIME_WAIT       0

  TCP    10.x.x.x:61771        10.x.x.x:57625         TIME_WAIT       0

  TCP    10.x.x.x:61774        10.x.x.x:57625         TIME_WAIT       0

  TCP    10.x.x.x:61775        10.x.x.x:57625         TIME_WAIT       0

  TCP    10.x.x.x:61776        10.x.x.x:57625         TIME_WAIT       0

  TCP    10.x.x.x:61777        10.x.x.x:57625         TIME_WAIT       0

  TCP    10.x.x.x:61778        10.x.x.x:57625         TIME_WAIT       0

  TCP    10.x.x.x:61779        10.x.x.x:57625         TIME_WAIT       0

  TCP    10.x.x.x:61784        10.x.x.x:52757         ESTABLISHED     7472

[DFSRs.exe]

  TCP    10.x.x.x:63661        10.x.x.x:63781         ESTABLISHED     4880

------------------------------more troubleshooting--------------------------

-Increased Staging to 32GB

-Opened the ADSIedit.msc console to verify the "Authenticated Users" is set with the default READ permission on the following object:

a. The computer object of the DFS server

b. The DFSR-LocalSettings object under the DFS server computer object

-Ranping <var>10.x.x.x</var> -f -l 1472 and got replies back from both servers

-AD replication is successful on all partners

-Nslookup is working so DNS is working

-Updated NIC drivers on both servers

- I ran the following to set the Primary Member:

dfsradmin Membership Set /RGName:<replication group name> /RFName:<replicated folder name> /MemName:<primary member> /IsPrimary:True

Then Dfsrdiag Pollad /Member:<member name>

I'm seeing these errors in the dfsr logs:

20141014 19:28:17.746 9116 SRTR   957 [WARN] SERVER_EstablishSession Failed to establish a replicated folder session. connId:{45C8C309-4EDD-459A-A0BB-4C5FACD97D44} csId:{7AC7917F-F96F-411B-A4D8-6BB303B3C813} Error:
+ [Error:9051(0x235b) UpstreamTransport::EstablishSession upstreamtransport.cpp:808 9116 C The content set is not ready]
+ [Error:9051(0x235b) OutConnection::EstablishSession outconnection.cpp:532 9116 C The content set is not ready]
+ [Error:9051(0x235b) OutConnection::EstablishSession outconnection.cpp:471 9116 C The content set is not ready]

---------------------------------------more troubleshooting-----------------------------

I've done a lot of research on the Internet and most of it is pointing to the same stuff I've tried.  Does anyone have any other suggestions?  Maybe I need to look somewhere else on the server side or firewall side? 

I tried replicating from a 2012 R2 server to another 2012 server and am getting the same events in the event log so maybe it's not a server issue. 

Some other things I'm wondering:

-Could it be the speed of the NICs?  Server A is a 2012 Server that has Hyper-V installed.  NIC teaming was initially setup and since Hyper-V is installed the NIC is a "vEthernet (Microsoft Network Adapter Multiplexor Driver Virtual Switch) running at a speed of 10.0Gbps whereas Server B is running a single NIC at 1.0Gbps

-Could occasional ping timeout's cause the issue?  From time to time I get a timeout but it's not as often as the events I'm seeing.  I'm getting 53ms pings.  The folder is only 3 GB so it shouldn't take that long to replicate but it's been days.  The schedule I have set for replication is mostly all day except for our backup times which start at 11pm-5am.  Throughout the rest of the time I have it set anywhere from 4Mbps to 64 Kbps.  Server A is on a 5mb circuit and Server B is on a 10mb circuit. 

Hi Everyone,

I have a DFS Replication structure with just over 20 Replication Groups and wrote a batch file that runs a backlog check on each writing the results to a text file.

It works perfectly except for three RGs.  The only common factor I can see so far is that the Replicated Folder name in each of the RGs has spaces in it.  But, here's the weird part:

I have the command saved in OneNote and if I copy and paste it from there into a DOS box, it reports the backlog status of the group just fine.  The command is:

dfsrdiag backlog /smem:eng-V28 /rmem:ENG-G03 /rgname:V28-Acct-EIS/rfname:"Acct – EIS"

If I copy and paste this command into a batch file and save it, the batch run fails; reports back: 

[ERROR] Cannot find DfsrReplicatedFolderConfig object. Possible reasons:
   + The replicated folder is not configured on the member 
   + Access is denied to its configuration information

[ERROR] Replicated folder <acct – eis> not found. Err: -2147217406 (0x80041002)


Operation Failed

This is the exact same command that just worked when pasted into the same DOS window;  I paste directly from the clipboard into DOS, it works - then immediately paste it from the clipboard into a batch file, run the batch and it fails.

Then, if I copy the command from in the batch file I just created - that failed - back into the clipboard and then paste into the DOS window it fails.  I go back to the original command in my OneNote page, copy to cllipboard, paste into same DOS window, it works.  Now, paste the new clipboard contents into the batch file overwriting the bad one, run the batch and fail.

I set the echo ON at one point to see how the command was being parsed and it looks fine; no weird characters or mistakes (which would be even weirder since I'm doing copy/paste so there is no chance of typo).  Tried matching case exactly, all lower case etc - no change.

Tried saving batch code with Notepad, Notepad++ and Edit Pad Pro. Also, tried

echo [command] > test.bat

to put the command into a batch file all by itself without an editor at all and that batch still fails.

The way I did that was to copy from OneNote into the clipboard and past into DOS, run it and see it succeed.  The, I press up-arrow, left-arrow and insert echo at the beginning of the command. Next, press right-arrow to the end of the line and type> test.bat and press Enter thus creating test.bat

  Now, I run test.bat and it fails

I am completely puzzled.

Anyone have an idea wtf is going on?

Thanks!

- a -

Hello,

I have noticed that a lot of Home Directories previously shared lost their sharing  last week...

any idea how they could loose the sharing? the folder is present but not shared anymore..

Thanks,
Dom

System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

Dear Support,

I'm meeting an issue now.

when I created a shared folder, i want to grant the permission to specified users/groups which can make them create/delete/modify its child files/folders, but do not have permission to delete the folder itself.

But when I tried to grant "deny delete" permission to the folder, it doesn't work. Related account can still delete the folder.

Also tested on my windows7/8.1 computers, the same issue.

I tried to remove permissions from inheritable, and grant my account "read and execute" permission, can not delete the folder now.

But another issue comes, I can delete any of the sub folder/files.

When I tried to add the permission "allow delete sub folder/files" to the folder I created, also the folder itself can be deleted.

So I wonder is there anything wrong I did? Or whether it is a bug?

Thanks a lot.

Eric

Hello all!

I have question for you, that is bothering me and my colleague.

Tbh, I didn't read the documentation for Deduplication feature in 2012 R2 version of the Server OS, but my colleague did, and came up with a hypothetical quetion.

1) We have our virtual file server with Server 2012 R2 OS installed. We have switched on the Deduplication feature on the main file share disk and we are quite happy with the space savings! But what will happen, if the server crashes, and we will be forced to shut it down, detach the main file share disk and connect it to another virtual file server with2012 R2 OS on it?

2) Based on the previous scenario, is it possible to connect the drive that has the deduplication feature swtiched on, from Server 2012 R2 to Server 2008 R2? I mean, the scenarion will be that I have no other choice, than to connect the drive from 2012 R2 to 2008 R2.

Thank you for your time in advance!

The IT guys from LukOIL

Hi there,

I have a fresh install of a Windows Server 2012 R2 as fileserver with deduplication enabled on several volumes. One volume shows a strange behavior after a couple of weeks in productive environment: Initially I had a dedup saving rate of ~10% (volume contains mainly images), but after a few weeks, both UI and PowerShell report savings of 0 bytes.

What is really bad about this is, that the original size of the un-deduplicated files is about 880 GB and my volume has filled up to nearly 1 TB (no, data has not increased that much over time, only a few gig). Watching the volume using TreeSize (JamSoft) I found out, that the dedup folder has grown to 990 GB!

I tried to run optimization and garbage collection with no luck. The main folder is DFS replicated and (still) doing initial sync - this may change files, but dedup is configured to dedup files after 0 days.

Any ideas?

Regards,
Marc

I've setup a Server 2012 R2 File Server. When creating shares I selected to enable encryption.

Now Windows 7 and 2008 R2 clients cannot access. Pretty clear that this is SMB 3 encryption the cause.

OK. So can I enable these Windows 7 and 2008 R2 clients to access encrypted SMB 3 shares?

I can find no answer or documentation on this.

After the Windows 2008 R2 64 bit server got below 2 updates a network share is no longer available. And trying to remap it with correct credentials (that work on a Windows 8.1 64 bit) gives this error: "System error 86 has occurred. The specified network password is not correct."

Local Policies -> Security Options -> Network Security: LAN Manager Authentication Levelis already set to "LM and NTLM - use NTLMV2 session security if negotiated"

In fact this is how it was working earlier. And it hasn't been changed.

Below 2 updates were installed in past few days:

Definition Update for Microsoft Endpoint Protection - KB2461484 (Definition 1.185.3528.0)
Update for Windows (KB974405)

Hello,

I was wondering if there is a setting in Windows 2012 R2 so that the "Date Created" attribute of a file is updated to the current date/time when the file is being moved from one folder to another?

Thanks!

Hello

I received a copy of Server 2K8 R2 off of DreamSpark to help go along with my studies. Last night I installed it on an old PC that I had and placed my drives in it and shared them with "everyone" with full access. 

I enabled Function Discovery Resource Publication, SSDP Discovery, and UPnP Device host to be able to turn on Network discovery and that seems to be working fine.

From my PC (Windows 8.1) I can see the server under network devices and I can ping it and even Remote Desktop into it. but when just trying to access the shares I get an error saying the network path cannot be found. I then tried it on my android tablet and was able to access the shares no problem at all but i just cant from the windows 8.1 PC.

I am at work right now but is there anything else I should give a try? I have also disabled all firewalls to no avail.

I have an Windows 2008 R2 file server with clients on Win 7 & 8, there is a requirement for 2 different departments to have a common shared folder with different permissions asper the below scenario, 

Common shared root folder with 2 sub folders (example sales, purchase), now we need to share the root folder and map the drive, however sales users should have full control to sales folder and read access to purchase folder.Also the vice versa..purchase to have read access to sales folder & full access to sales folder.

Howe to achieve this...??

I have shared the root folder and granted permission, however both users can either have access or denied while trying to create a file or folder.

Thanks.

Hi,

I have one Win 2008 R2 domain controller and two Win 2008 R2 member server on the Azure cloud. Recently I get oneach server the network error 0x800704cf when I try to open any shared folder. Therefore I have also troubles to connect SYSVOL folder on the domain controller.

I have checked DNS and Netbios and found no issues. Furthermore I’ve tried following workarounds to fix the issue:

• Turned off firewall
• Printer and File sharing is turned on
• Client for Microsoft Networks and File and Printer Sharing is activated on the network adapter
• Changed permission to everyone
• Run virus scan
• Service Computer Browser, Workstation and Server are started
• Checked NetBT values in Regedit
• Enabled NetBios over TCP/IP
• Disabled IPv6
• Uninstalled network device adapter

But all these suggestion didn’t help and really odd is that this issue occurs on all three servers.
Your help is greatly appreciated.

Thanks
Christian

Hi There,

Massive shot in the dark here but I am struggling with a pretty major issue atm.  We have a production file server that is hosted on the following:

Dell MD 3220i -> iSCSI -> Server 2008 R2 Hyper-v Cluster -> Passthrough Disk -> Server 2012 R2 File Server VM

Essentially 3 times now, roughly a month or so apart.  The file server stops accepting connections.  During this time, the server is perfectly accessible through rdp or with a simple ping.  I can browse the files on the server directly but no-one appears to be able to access the shares over SMB.  A reboot of the server fixes the issue.  

As per a KB article I removed nod antivirus from the server to rule out a conflicting filter mode driver after the second fault.  Sadly yesterday it happened again.

The only relevant errors in the servers log files are:

SMB Server Event ID 551
SMB Session Authentication Failure

Client Name: \\192.168.105.79
Client Address: 192.168.105.79:50774
User Name: HHS\H6-08$
Session ID: 0xFFFFFFFFFFFFFFFF
Status: Insufficient server resources exist to complete the request. (0xC0000205)

Guidance:

You should expect this error when attempting to connect to shares using incorrect credentials.

This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.

This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled

and

SMB Server event ID 1020
File system operation has taken longer than expected.

Client Name: \\192.168.105.97
Client Address: 192.168.105.97:49571
User Name: HHS\12J.Champion
Session ID: 0x2C07B40004A5
Share Name: \\*\Subjects
File Name:
Command: 5
Duration (in milliseconds): 176784
Warning Threshold (in milliseconds): 120000

Guidance:

The underlying file system has taken too long to respond to an operation. This typically indicates a problem with the storage and not SMB.

I have checked the underlying disk/iscsi/network hyper-v cluster for any other errors or issues, but as far as I can tell everything is fine. 

Is it possible that something else is left over from the NOD antivirus installation?  

Looking for suggestions on how to troubleshoot this further.

Thanks

We have a problem while saving Excel files that are "shared" (multiple user editing) in DFS replicated network folder.

Environment:
2 x Server 2008 R2 (hosting shared Excel files in a network share, with two-way DFS replication between them)
The files are being edited on a single primary server ONLY, secondary server is a passive backup and does not accept connections if primary is available.
Users use mainly Excel 2010 on Windows 7, and also some use Excel 2007 on Vista.

The issue sometimes occurs when the users are saving a shared Excel file - the original file is deleted, and the TEMP file is not renamed to the original name, and remains like "2BE72000". I haven't been able to reproduce the issue myself, but apparently this is happening quite often (we have several thousand excel files open at a time, and we get a few cases per day).

The change that clearly triggers this is the DFSR replication. If the DFSR replication is turned on for server folder containing the shared excel files, then the issues start, and go away if DFSR is turned off. We have no problems at all with ordinary, not "shared" Excel files.

Also, no event (no sharing violation, no conflict resolution or other) is logged in DFS log when the original file is deleted and temp not renamed.

Why is Excel sometimes not renaming its temp files? As far as I understand, DFSR does not try to replicate a file if it's still in use (we get quite a few sharing violations). Therefore if Excel still has a lock on file, DFSR will not intervene and wait for Excel to finish what it was doing. Or am I wrong?

We have a changing backlog size. Usually 0-20 items, and at peak times somedays it rises for short periods to 1000 or more items. I have not noticed any correlation between the backlog size and the frequency of shared excel issues. Backlog size and replication delay does not cause a problem for us, as long as no data is lost.

The things I have already tried after searching and not finding anything that fits on the net:
Tuned up DFSR: http://blogs.technet.com/b/askds/archive/2010/03/31/tuning-replication-performance-in-dfsr-especially-on-win2008-r2.aspx
Started a thread on Excel TechNet: http://social.technet.microsoft.com/Forums/en-US/excel/thread/4e7bd78b-dc72-4dbd-a459-edabc44acbfd

Thank You for Your help!
Sincerely
Vince

I have recently upgraded a clients servers to Windows Server 2012 & since doing so have lost the ability to scan to folder.

Both servers are domain controllers and previously on a 2008 domain controller I would have had to make the following change to allow scan to folder:
 Administrative Tools
 Server Manager
 Features
 Group Policy Manager
 Forest: ...
 Default Domain Policy
Computer configuration
 Policies
 Windows Settings
 Security Settings
 Local Policies
 Security Options
 Microsoft Network Server: Digitally Sign Communications (Always)
 - Define This Policy
 - Disabled

However I have applied this to the Windows 2012 server but am still unable to scan, possibly due to added layers of security in server 2012. The error on the scanner is Authentication with the destination has failed check settings.
I have also tried the following at the server:
Policies -> Security Policies
Change Network Security: LAN Manager authentication level to: Send LM & NTLM - Use NTLMv2 session security if negotiated.
Network security: Minimum session security for NTLM SSP based (including secure RPC) clients and uncheck the require 128 bit.
Network security: Minimum session security for NTLM SSP based (including secure RPC) servers and uncheck the require 128 bit
I have created a user account on the server for the ricoh and set this in the settiings of the Ricoh and verified everything is correct.

Are there any other things I have missed?

Hi,

I'm using net share to create file share cluster resources on 2008 R2 as "cluser doesn't work". I've hit an issue when it comes to setting the caching options.

If I try the first command below it works fine. If I try the same thing with the "/cache:no" at the end of the command the share is created, but the cache setting doesn't apply - I also get "This shared resource doesn't exist". <o:p></o:p>

net share "8"="l:\test2" /remark:"This is my test share" /unlimited /grant:"Authenticated Users",full<o:p></o:p>

Oddly enough, I tried the /cache switch on my Windows 7 laptop and it works fine.

net share parameters http://technet.microsoft.com/en-us/library/bb490712.aspx<o:p></o:p>

<o:p>I could use a PowerShell to modify the registry and set the caching option, but that does seem a bit crazy - I'm wondering if there's a better way?</o:p>

<o:p></o:p>

IT Support/Everything