Hi

We have a GPO that redirects My Documents to a network share and I have recently changed the location of this network share by modifying the server path of the GPO.  The GPO is set to leave the contents behind and it has been set (historically and now) to grant exclusive rights to the user.

The functional level of the domain/forest is 2008R2 and the users log on to predominantly a mix of 2008R2 RDS Servers and occasionally a 2003 TS and 2012 RDS Server.

This has so far gone very for all users but there is one user who is not able to access their Documents on all servers.  The Documents appear to have been moved from the old location to the new, but the following has happened:

• The NTFS permissions on the old folder appear to have become corrupted.  Even after taking ownership of the folder I get an "Access Denied" error message and cannot view the contents of the folder at all.
• When logging onto one 2008R2 RDS Server (which happens to be our remote access server) the user can see their documents OK
• When logging onto other 2008R2 RDS Servers (including those part of a Farm and standalone) the user does not see any Documents in their Document folder.  When running an RSOP on these servers we have the error as below (this shows as "Success" on the remote access server):

• When the user logs onto our 2012 RDS Server the get the below error and cannot see their documents.  Clicking no then brings up the same error but for Pictures, Music & My Documents:

At the moment I have the user logging on to our remote access server internally.  How can I permanently resolve the problem of the user not being able to see their Documents everywhere?

Many thanks

Hi Expert,

Good Evening Team , 

I am a server licence user where it is volume licence, Currently I am facing some technical issue were my server gets restarted automatically with the message called " Windows has encountered a issue and will now restart automatically". This problem is getting frequently on server. and restarts automatically often..

Event Id : 1015

Exact Error on Event log under application : 

a critical system process , C:\Windows\System32\lsass.exe failed with the status code 255 , The machine must now be restarted

Log name  : Application

Source : Wininit

waiting for the soluton

Team,

Could you please let me know what are the best practices for creating the DFS Replication group.

File Servers OS : Win 2008 R2.

AliahMurfy

Hello,

I'm trying to add network shares to our local Sharepoint library.  It won't let me add shares, telling me "This network location can't be included because it is not indexed".

I see that our server (2008 r2) is running Windows Server 2003 File Services Indexing Service.  Should I (and how should I) remove that indexing service, then install Windows Search Service?   Will that mess anything up for our users (all clients are Windows 7).

Thanks!

Matthew

I have been scratching my head for few days on below problem.

I have a Windows 2012 server, it started to accept connections only from loopback address. It did not even accept its only IP address.

For example, I cannot browse the share using UNC path \\servername\share or IP address \\192.168.0.1\share.

But \\127.0.0.1\share is working ok.

I know this seems a firewall or antivirus blocking the ports, but there are no such software running. In fact, I removed every software on the server. But it still the same.

Now I see the server only accepting TCP connections for port 53, 135, 139, 389. Other ports like 445 cannot go through.

I run the best practice scan on the server and don't see abnormals.

If I run troubleshooting on network connections, it says security or firewall settings might be blocking the connection. This message doesn't help much.

Appreciate any thoughts.

Hi,

Firstly, to explain my setup. Server 2012 R2 hyper-V hosts in a cluster (2 node) using a CSV NTFS.

A Guest Cluster for File Services using 2012 R2 and a shared VHDX, would like to use ReFS.

Current File Server is a single VM 2008 R2, data stored on NTFS (VHDX)

I am migrating a file server (approx. 1TB of data) but I want my new FS to be nice and resilient and highly available, I have a few questions which I am not too clear on the answers for and was wondering if anyone can shed some light on it. So far I have determined that deduplication is not supported on ReFS – fine, data integrity is my top priority I’d only save about 10% anyway.

I have also read that DFSR is not supported but I am not clear on whether this is replication TO the ReFS volume, or FROM the ReFS volume… or both… my existing file system is NTFS. I am unsure how to move 1TB of data retaining all ACLS and file structure from NTFS to ReFS, my idea was to use DFSR and once data is replicated I kill the original connection and switch it over out of hours, but now I am not sure. Robocopy is out of the question for me because the rate of data change is too frequent at the source, the number of files is just ridiculous to trawl through, and the time it will take is far too long. I’m assuming an image based backup of a volume will restore the file system, I’m thinking Windows Server Backup might work just to restore the root folder share, but I’ve not gone from one file system to another using that. I also do want to use DFS as a namespace for connecting to the folder share, instead of using \\servername\sharename I want to use\\DFSNamespace\Sharename which will be used in mapped drives on the clients – will either replication or namespace work on ReFS or neither, the technet documentation isn’t too clear to me.

Secondly, I understand that having Checksums on files proves something about the file being integral…. Is that right? If that’s the case, is this something that ReFS does an equivalent thing for, or am I getting myself confused between these two things. If checksums would be useful for certain files even on ReFS, how would I generate these and use them when opening and saving certain files (there are a subset of files such as finance and design files which are critical to our business, we really want to make sure these files are not corrupted).

Finally, an idea to make a CSV or cluster available storage more resilient to failures or corruption:

I will be using both a General File server and a SOFS for application data. General File server uses an “available storage” disk in the cluster and is attached the general file server role, whereas SOFS uses CSV, these will be based on shared VHDX files. In both cases I am wondering how to make the underlying VHDX more resilient from corruption.

I have read that one way ReFS corrects corrupted blocks of data is that it will get clean blocks from a mirrored disk in storage spaces, so my question is this (and is it technically possible, and a supported configuration?)

Can I attach two shared VHDX files for the “available storage” in the cluster, create a mirrored storage space and add this space to the cluster instead of a single disk – will this work?

Can I do the same above, but then add that mirrored space as a CSV.

My process would be this:

Add shared VHDX to both VMs

Using server manager: Create a storage space

Create a mirrored disk within the space

Create a volume

Format it as ReFS

Add it to the cluster as available storage

Add it is as CSV (for the SOFS scenario)

Will this work?

I have also noticed there is an area in Failover Cluster Manager to create and add storage pools, this is a feature I have never been able to use before because of not having the correct disks – is this what I am after to do the above?

Many thanks in anticipation

Steve

I have a two-way transitive forest trust between two domains (eg domain a and domain b)

If I map a drive to a domain a based dfs structure from domain b, specifying my credentials from domain a, then it appears to connect ok and will display all the folders I'm authorised for access.

However, if I click on one of those folders, I get a Location is not available dialog box up, which the following text... The network location cannot be reached.  For information about network troubleshooting, see Windows Help."

I've seen articles about it being the PC I'm logging on from that is not authenticating, if this is true, or if not, what are my configuration options.  It must be possible under a trust relationship.

Regards

Ian

So, as the title indicates, I added several new file filter entries today for A/V files. They're normally blocked by File Screens, but some files apparently made it onto the server prior to the File Screens being implemented, and now they seem to be causing a huge backlog (it's a site in Mexico with only a 4 MB connection, with only 256 Kb bandwidth allocated to each of the DFS rep folders, so hundreds of files that are 10-100 MB's or larger are bad. I'm not really sure how long they've been in the backlog, or how the files got into these folders, but that's not important right this second.

The problem right now is that from what I understand, adding new file extensions into the file filter of a DFS replication folder should result in any matching files being removed from the backlog and any further replication, once AD replication occurs across any relevant sites. Which was done a while ago, but the A/V files are still in the backlog. I added the filters from the hub DFS server at their company headquarters, and verified on the remote site DFS server that the new file extension filters are showing up. Then I ran dfsrdiag /backlog, and voila...still thousands of backlogged A/V files.

Any ideas? Here is the full contents of the file filter:

~*, *.bak, *.tmp, *.customDestinations-ms, *.temp, *.onetmp, *.pst, *.bkf, *.mpg, *.mp3, *.mp4, *.avi, *.vob, *.swf, *.ogg, *.mov, *.wmv, *.wma, *.wav

The first 100 backlogged files are ALL .wma and .wav files. And I copied the contents of the file filter directly from the server where the backlog is. And I first saw the updated file filter contents probably 30 minutes ago at least, and I just ran another dfsrdiag /backlog. Do I just need to wait longer? And if so, how long should it realistically take?

I'm trying to solve a problem with two Windows Storage Server 2008 (Dell Powervault) servers that stopped replicating data about a month ago.

The Organisation has Two Windows Server 2008 Domain Controllers, and Two Storage Servers, in the same site on the same subnet. No hardware/network firewalls exist between these 4 servers, they're connected to the same Switch. On each, the Windows Firewall Service is Running, but firewall Disabled.

The Storage servers both show the DFRS Event 5002 - Error: 1753 (There are no more endpoints available from the endpoint mapper.)

The DC's have no such error and are replicating SYSVOL just fine. Problem only exists on the Storage servers, and most guides/troubleshooting steps I have seen relating to Error 1753 seem to assume it's a DC that has the issue, rather than a member server.

There was only one noted change that occurred at the time this problem started happening; the server had been rebooted overnight to allow Windows Updates to install. No configuration changes were made, so we think that something changed by windows updates caused this, but we don't know how, or which update.

Using rpcdump, I can see that On both the DCs, there is a listening TCP Port for the Frs2 Service;

First DC:

Second DC:

But on the Storage servers, which I'm more interested in as it's these that have the Endpoint Mapper problem, there are no such entries when scanned remotely with RPC Dump. No TCP/IP entries. However, Locally on each server if you run RPC Dump, you get more entries including NamedPipe entries, and This:

So it seems like the DFS-R Service is not registering a TCP/IP (ncacn_ip_tcp) connection for the Service but It is registering one of type ncalrpc

I have tried;

1. Raising the MaxUserPort value to 65536 in the registry, but as I feared, made no difference. There are and were before, plenty of other services on the Storage Servers that showed up with rpcdump using ncacn_ip_tcp connections with TCP ports in the 45000 range.

2. Verified all the DNS stuff. But it's all correct. The issue isn't that the two servers are talking to the wrong server..there's just nothing (for DFS-R, at least) listening at the other end?

3. Various reboots and restarts of the DFS-R service on both Servers.

I'm really not sure what to try next. K2089874 Seems to suggest it might be an issue with the Application not successfully registering with the RPC Endpoint mapper, but perhaps I am misinterpreting what I see.

This forum post was useful in explaining how to use rpcdump to get the Information about the frs2 service, but only seems to state it should say Listening: Yes, and that Listening: No is bad - On these servers it's not in the list at all...

Can anyone give me some ideas what to try next?

Hi, in my organization there are 2 file servers at different locations. For the test purpose , I created folder with many files in it in both the servers and applied DFS replication. Replication is working fine in this. 

But, when I am applying replication in main folder which contains many sub-folders like Accounting, Marketing, HR ect.  in both the servers. Replication is not working. In event logs it is showing errors. I have following questions, please answer me as soon as possible. Thank you in advance

1] I need to replicate around 500GB data from each replicated folder in both the servers. I leave the Staging size default as 4GB. Do I need to increase it? and how much should I increase it ?

2] I generated Diagnostics report (Health report) in that Replicated folder and reports says errors in both the servers. 

Server 1 :  error 1 : 

DFS replication error, event ID 4004

Additional Information: 
Error: 9098 (A tombstoned content set deletion has been scheduled) 

error 2 : 

DFSR - Content skipped by replication, event ID 11004

DFS Replication does not replicate certain files in the replicated folders listed above because they have temporary attribute set, or they are symbolic links . This problem is affecting at least 35 files in 1 replicated folders (up to 100 occurences per replicated folder are reported). Event ID: 11004

Server 2 :  

DFSR - Content skipped by replication, event ID 11004

Please help me solve this issue

We are running a standalone DFS server running Windows 2008 R2.  We are using domain based namespaces on this server.  When we initially set them up everything ran fine.  However, after going through domain controller upgrade and transferring fsmo roles from a 2003 to a 2008 domain controller we cannot add or manage any namespace in the DFS mmc.  We get the above mentioned error no matter what we try.

Our DNS is AD integrated and replicating and working fine.  We can still access the folder shares through UNC paths and see the namespace configurations in AD via ADSIEdit.  Any suggestions/help would be greatly appreciated!

Hi Community,

We are working on moving one of clients from Open Directory to Active Directory.

With Window Machines using Group Policy we can implement Document folder redirection, excluding pictures, music, etc.  In an OS X environment with Open Directory you can configure the user account to be mobile and the data will sync to a specified location.

In AD it is possible to specify the User Folder, mount the file share on the Mac and place it on the desktop or in the dock.  We are looking for away to sync the folder to be accessible while off campus.

Any thoughts and suggestions are welcome.

Thank you in advance!

I have a "User Drive" that has the following permissions:

Administrators and System: Full Access: This folder, subfolders and files
Authenticated Users: Read/Traverse/Create Folders: This folder only
Creator Owner: Full Access: Subfolders and files only

I have a GPO that creates a folder (under user context) as \\server\users$\%username% and followed by another \\server\users$\%username%\home.

I would expect that on creating that first folder it would then receive full access permissions on it for all subfolders and files. But instead the permissions are configured on it as Inherited and for that user: Full Access: This folder only. Same result on the Home folder as well.

What am I missing here? Why is the Creator Owner permission not creating an explicit Full Access for Subfolders and Files on that User Drive then being inherited? Basically now all the users home drives are unreadable by the user... Fucking nightmare when every step of this makes sense to have worked.

5th time in the last week simple fucking things from MS that should work have failed and been egg and shit on my face. So fucking sick of this this week has convinced me to look elsewhere than IT... MS are the devil and all these tool and policies are fucking nightmares.

Hi,

We have a IBM eServer X series 236 running Windows sever 2003 standard. We have an EXP400 with 13 drives as part of a Raid Array connected to a dual channel SCSI card. This past weekend the SCSI channel 0 went bad, the drives do not show up and they all have amber lights on them.

We moved the SCSI cable to Channel 1 and the drive lights went green and all of them looked normal but when we restarted the sever we received the message the "drives are not responding or they are in a different location".

How do we reconfigure the SCSI card from channel 0 to channel 1 so that the drives can be found?

Thanks,

Taino Negro 9

Hello,

I have a issue regarding VSS differential snapshot related with ReFS volume on Windows Server 2012. The scenario is mentioned below:

I have one NTFS volume (V1_NTFS (G:)) and one ReFS volume(V2_REFS (H:)).

Now I have created shadow storage of V1_NTFS volume on V2_REFS volume using following command:

C:\>vssadmin add shadowstorage /for=G: /on=H: /maxsize=20%

Then I created multiple shadows of V1_NTFS(G:) with following commands:

C:\>vssadmin create shadow /for=G:

Suppose I have created 4 shadows as snap1, snap2, snap3, snap4. Now the problem is that whenever I revert to a shadows, lets saysnap3, then snap3 and snap4 shadows should get deleted and older ones(snap1,snap2) should remain there which is the expected behaviour. But here, in this case, after successful revert tosnap3 all shadows (even older ones get deleted.) So the question is that: is this a known issue and is expected behavior with this type of scenario or is this a bug with ReFS? 

Or in simple way, can diff area be on ReFS volume for a NTFS volume? is this supported configuration ?

Nilesh Savant

What are the advantages & disadvantages at DFS replication Group with Published Namepaces.

Does DFS Replication require DFS Namespaces?

AliahMurfy

Hi,

We have several old profiles in our network (corrupted and renamed or retired employees). Now i'm trying to clean up our server and delete the old profiles but there are some profiles which give the error that i don't have permissions on the map. This while i'm admin of the network and the admin account is added to the security with full rights.

Is there a way to delete the old folders, for instance with powershell?

I have 400 replication groups & single replication folder in each replication groups.

HUB-FS01 & HUB-FS02 are present in 400 replication group. I need to remove all the replication groups & need to keep one replication groups & want to add all folders in a single replication groups.

DFS is windows 2008 R2. Domain function level is 2008R2.What are the better approach for doing that?

Thanks in advance & so far.

AliahMurfy