Work Folders (Windows Server 2019) - Devices are not showing up under the User View neither Powershell

October 10, 2019, 2:15 am

≫ Next: Dynamic Access Control (DAC):Global Resource Property List vs New Resource Property List

≪ Previous: DFS-R - won't replicate a specific folder

$

0

0

Hey everybody,

last day we did made a new change on one of our systems. We moved one of our fileservers from WS2012 to WS2019. 

The change upon itself is quite as easy, migrated all shares, files and such stuff.

On this system we also had workfolders running before.

In the latest changes (2012->2016) we had no issues with workfolders so far, but in this case we noticed serveral issues:

The first issue is, that the clients thought that it's the same server (other name, but same workfolders URL) so we had alot of these issues:

Http request failed. User: smith@domain; Device: domain-W10-021; DeviceOS: Windows 10.0; Request: Get-UserConfig; Error code: (0x80070003) The system cannot find the path specified.

This could be corrected on the clients with setting up workfolders on theses devicve or screw up the config with a little script:

rem set service to disabled & stop it
sc config workfolderssvc start=disabled
sc stop workfolderssvc

rem delete sync files
rd /s /q %localappdata%\Microsoft\Windows\WorkFolders\Metadata\

rem set service to manual & start it
sc config workfolderssvc start=demand
sc start workfolderssvc

But the main thing i noticed is, that the information about the synced devices of the users are fully missing.

Or healthy systems (WS2016) are looking like this:

Do you have any ideas why this happens? Is anyone else facing these kinds of issues?

---

Dynamic Access Control (DAC):Global Resource Property List vs New Resource Property List

December 16, 2019, 7:16 am

≫ Next: Dynamic Access Control (DAC): Reference Resource Property

≪ Previous: Work Folders (Windows Server 2019) - Devices are not showing up under the User View neither Powershell

$

0

0

Hi,

In DAC, there is an option to add resource properties to GRPL or create a new resource property list.

When would I go for New RPL instead of just adding them to GRPL?

Thanks!

Dynamic Access Control (DAC): Reference Resource Property

December 16, 2019, 7:20 am

≫ Next: Server Setup - Minimum roles needed

≪ Previous: Dynamic Access Control (DAC):Global Resource Property List vs New Resource Property List

$

0

0

Hello,

In DAC, one can add either:

• new resource property
• new reference resource property

What exactly is this "Reference Resource Property" and when should I use this instead of "general" resource property. How do they differ?

Thanks!

Server Setup - Minimum roles needed

December 10, 2019, 7:17 am

≫ Next: Changing lun replication target in strectch cluster

≪ Previous: Dynamic Access Control (DAC): Reference Resource Property

$

0

0

Business:  5 employees

Current Server:  Win 7 Pro, 2 x 500Gb SSD, RAID 1, 8Gb memory

A small company uses a Win 7 desktop as a file/app server for their business software.  

With the end of life of Win 7, and the need for a new server, they will purchase a entry level server and MS Server 2019 Standard (suggested by the business software vendor, I thought a Win 10 Pro computer would suffice but this is frowned upon by the vendor).

All employees have access to all files (only 5 employees).  their are no groups so levels of security is not needed.

So would it be better not to deploy Active Directory (AD) and DNS?   Just use the server as a app and file server?   The database used is about 10Gbs.

Should a domain still be setup (but is that possible without AD & DNS)?

It is a legal practice so I want to be safe.  They want to keep things super simple and not worry about what user account needs to be deleted and a new user account added.

Thanks!

D

Changing lun replication target in strectch cluster

December 4, 2019, 7:55 am

≫ Next: DFS permissions with modify is lesser than SMB share having modify rights

≪ Previous: Server Setup - Minimum roles needed

$

0

0

We currently have a 4 node windows stretch cluster.  We have two nodes in one data center and two nodes in another data center.  Right now, all SAN storage is in the same data center on two different storage controllers.  What we want to do is add a new LUN from the second data center to the existing cluster and have the replication target change to this new LUN, then remove the original LUN from the nodes in the second data center, so that we have one replication between the data centers for redundancy.

What wold be the best practice for this? My thoughts are as follows:

1. Add new lun to both nodes in DC2.

2. Format the LUN  on node 1 in DC2.

3. Stop replication on the existing share.

4. Set the new lun up as the new replication target.

5. Take the original lun and bring it offline and remove it from the host.

The initial block copy should move all the data over from the main share in DC1, to the new LUN in DC2 I would think.

We do not want to change the orginal share name, or recreate it, because Komprise is using it for arching off of the NetApp.

DFS permissions with modify is lesser than SMB share having modify rights

December 17, 2019, 12:34 am

≫ Next: DFS - Users not getting 'file locked' notification when file already open?

≪ Previous: Changing lun replication target in strectch cluster

$

0

0

Hi, 

I am facing a DFS problem which I don't understand.

Quite recently I tried to migrage a folder redirection policy to point to a DFS share instead of pointing to a real Windows file share.

The underlying folder has "Modify" rights in NTFS for everyone, and I have replaced the permissions so no other inheritable rights come from the folder above. Also checked with the "effective access" tool in Windows.

So first I made a group policy having the appdata\roaming folder being redirected to \\server\userfoldershare\

As I said this share has "modify" rights for "everyone".

My test clients and test users got successfully a folder structure created below

\\server\userfoldershare\johndoe\appdata\roaming\....

and my test applicatoin (which generates a GUI config file in WPF) can update that config file.

Then I make another folder

\\server\userfoldershareDFS

with the same user rights

I created a DFS namespace and linked that share in DFS, and the path is 

\\domain\bs_Namespacename\DFSSharename\Appdata\

so I let point my folder redirection policy to that place 

When I leave the permissions as they are provided by DFS manger (full) then my test application can work

When I change the DFS permissions to "modify" the application creates the file, but later it can't update (the update works in a weird way: create a new file, rename it to tmp, then rename it to the user.config filename 

What I see is that process monitor shows a "Write DAC" which seems to cause an "access denied".

But why does this work when I use a native Windows fileshare with "modify"?

What is different from the DFS manager's "modify" in the permissions from the real file share "modify"?

I assume that the DFS permissions deliver a wrong result.

---

IT architect - Terminal servers, virtualizations, SQL servers, file servers, WAN networks and closely related to software devleopment (8 years + experience in VB, C++ and script langugaes), MCP for SQL server and CCAA for Xenapp 6.5

DFS - Users not getting 'file locked' notification when file already open?

December 17, 2019, 11:30 am

≫ Next: How to make a file server

≪ Previous: DFS permissions with modify is lesser than SMB share having modify rights

$

0

0

We have a single Windows 2012 file server running DFS. We have recently setup two new Windows 2019 file servers, enabled them for DFS replication and added them a DFS members. All three servers are on the same LAN and we plan to decommission the Windows 2012 server shortly. We can see user sessions are being distributed between the three servers, however, if UserA opens a file from one of the two Windows 2019 servers, then UserB opens the same file, UserB is only notified the file is already in use if their session is on the Windows 2012 server. In other words, if two users open the same file on either of the Windows 2019 servers they're not notified. A notification is only given if the file is opened for a second time with the Windows 2012 server as the source.

Ideally we would like both Windows 2019 servers to participate for both load balancing and resilience but we also need notifying if the file is already in use. If this is not possible then i guess we'll need to configure one of the new servers as a stand-by should the primary go offline.

Any suggestions or advise would be appreciated.

How to make a file server

December 17, 2019, 3:53 pm

≫ Next: Server 2016 DFS-R Events 1315/1316

≪ Previous: DFS - Users not getting 'file locked' notification when file already open?

$

0

0

Hello, I am new to server networking and just got my hands on windows server 2016;  this is for my home and I want to use it as a file server I can access at my house, I have a wireless adapter in the server due to my house not being wired with Ethernet cables. I just want to know the basics of how to setup this file server and access it from my PC in a different room.

Something advanced that I don't need but would be interesting to have is the ability to access it from my laptop when I'm on the go.

Thanks for the help.

---

Server 2016 DFS-R Events 1315/1316

October 16, 2018, 6:00 am

≫ Next: Maximum read/write size for non large MTU (https://github.com/sahlberg/libsmb2/blob/3f3976a2e3d50c6800be8d968e9f8d971fa37ca4/lib/smb2-cmd-read.c#L67)

≪ Previous: How to make a file server

$

0

0

Hi,

We are migrating to Server 2016. Part of this is file services, which are currently on Server 2008 R2. We created a new Server 2016 VM on dedicated storage, added it in as a folder target and replication partner but we are seeing tons of 1315 / 1316 events:

1315: The DFS Replication version vector size has exceeded acceptable limits.  A large version vector size could cause degraded DFS replication performance, poor responsiveness of DFS replication management operations,  and excessive memory and CPU resource consumption. Contact Customer Support Services to analyze the overall health of your DFS Replication deployment. 

1316: The DFS Replication version vector size has reached back to the acceptable limits.

I can't recall seeing these on 2008 R2. What do they mean? Most searches return results about staging folder sizing - we've already done that process and sized appropriately from before and applied the same to the new server.

Thanks

Maximum read/write size for non large MTU (https://github.com/sahlberg/libsmb2/blob/3f3976a2e3d50c6800be8d968e9f8d971fa37ca4/lib/smb2-cmd-read.c#L67)

December 17, 2019, 8:44 pm

≫ Next: Storage Replica question re destination data directory

≪ Previous: Server 2016 DFS-R Events 1315/1316

$

0

0

Context:

I am looking at this client lib: <UTL IN TITLE>. All it does it that if large MTU support is not negotiated, it will clamp the max read size to 60 KB. I am working with a server that supports max_read_size of 64KB, but because of this particular bit in the lib, I have to do 2 roundtrips to server.

Question:

Is there anything specific in protocol which bounds the size of read per request in case large MTU is not negotiated. Specifically, I am more curious to understand why the specific value of 60KB? Does something in protocol dictates something similar.

Storage Replica question re destination data directory

December 17, 2019, 3:54 pm

≫ Next: have no permission to access shared folder on window server 2012

≪ Previous: Maximum read/write size for non large MTU (https://github.com/sahlberg/libsmb2/blob/3f3976a2e3d50c6800be8d968e9f8d971fa37ca4/lib/smb2-cmd-read.c#L67)

$

0

0

Hi Folks,

  I have set up a storage replica using two Windows Server 2019 machines. It appears to be running correctly.   The only question I have is that the target (destination server) shows the data drive "Device is not accessible".

I see this is normal, one can do a 'switch direction' to enable the drive.

My questions are: 

How does switch direction work if the primary server (source) is offline due to a failure.

How does one install the application software on the secondary machine so that when the machines are switched over, the provided service can continue  (the s/w would have to be pointed at the disk volume)?

Regards

have no permission to access shared folder on window server 2012

December 18, 2019, 1:46 am

≫ Next: Issues with Storage Migration Service

≪ Previous: Storage Replica question re destination data directory

$

0

0

         I make a driver(F:)  on our company's windows server2012 server as shared folder, and in the [advanced security setting] of F driver,  I set the shared feature to <Everyone>, and set the authority to groups and some users(with password) premiusly created.   The server's address is 192.168.1.223, and work member's pc's address is 192.168.0.*,  everyone can ping 192.168.1.223 successfully, and can access server with \\192.168.1.223, but then when trying to access shared folder(\\192.168.1.223\sharedfoler from brower), the error message popup" you have no permission to access \\192.168.1.223\sharedfoler, please contact  your network administrator to request access".

        I am not familiar with the process of authorization, I think" when user try to access the shared foler, they should be asked for inputting username and password" , am I right?  but now  the shared folder directly denied the access, I don't know how to checkout the reason for the problem and how can I do to fix it. 

       BTW， when I use "net use * /delete", then use "net use * \\192.168.1.223\sharedfolder password /user:domain\username",  it is able to access the shared folder, again "net use * /delete", and use "\\192.168.1.223\sharedfolder", it still popup the same warning.

      Anyone please help me !

Issues with Storage Migration Service

April 28, 2019, 10:30 am

≫ Next: Windows iscsi boot issue on second interface

≪ Previous: have no permission to access shared folder on window server 2012

$

0

0

Hello!

I am currently in the process of testing Storage Migration Service, as I am planning to perform a migration from an old Windows Server 2008R2 file service to a server running a newer Operating System.

However, the product does not work. At all.

I can run through all the inventory steps, and pass the validation with only warnings.

However when I come to the Transfer Step, the operation fails with the message: "Couldn’t transfer storage on any of the endpoints."

Checking the event logs for the Storage Migration Proxy shows the message "Error 50 Operation not Supported"

User being used on both source and destination is a domain admin and a local admin on all server.

User has Full Control NTFS permissions.

Even the computer account is a domain (and enterprise) admin, this was done as part of the troubleshooting.

None of this has resolved the issue.

So can anyone on this board tell me which "operation" it is that is "not supported".

Windows iscsi boot issue on second interface

November 7, 2019, 1:25 am

≫ Next: DFS- How to Delete an Orphaned Folder Target

≪ Previous: Issues with Storage Migration Service

$

0

0

I am able to boot windows on first interface, with iSCSI. If I try to boot from second interface using iSCSI, the booting happens fine, but the boot procedure stucks with "INACCESSIBLE_BOOT_DEVICE" message. I have disabled "NDIS LWF driver" on both the interfaces, though 2nd interface never gets me past that error message.

I have followed all the steps as per:

support.microsoft.com/en-in/help/976042/windows-may-fail-to-boot-from-an-iscsi-drive-if-networking-hardware-is
mistyrebootfiles.altervista.org/documents/TinyPXEServer/files/wfplwf.htm

This is related to windows settings in iSCSI boot. if anyone else has been able to get iSCSI boot over ipxe in windows with 2nd interface? if yes, any pointers much appreciated.

DFS- How to Delete an Orphaned Folder Target

December 18, 2019, 9:35 am

≫ Next: Why ReFS can not be used on removable drives?

≪ Previous: Windows iscsi boot issue on second interface

$

0

0

I would think I need to use ADSI, but not sure where to go. Another issue is I can not add a new folder target..getting access denied. Permissions look good...

---

Why ReFS can not be used on removable drives?

February 25, 2013, 3:07 am

≫ Next: StorageReplica - Failed / WaintingForDestinatnion

≪ Previous: DFS- How to Delete an Orphaned Folder Target

$

0

0

Hi

Around the internet I can read that ReFS can not be used on removable drives. Unfortunately when I was trying to go deeper - I can not found or can not deduce the answer why. I'm formatted for testing purposes my 1TB External USB hard drive successfully with ReFS. Are there any contraindications to not use it with ReFS (Resilient File System) to store data? I'd like to use with Bitlocker. Please share your experience.

Regards

Kamil

StorageReplica - Failed / WaintingForDestinatnion

January 16, 2018, 5:40 am

≫ Next: NTFS permissions for create, but not delete/modify

≪ Previous: Why ReFS can not be used on removable drives?

$

0

0

Hi.

I have 2 servers with windows 2016 datacenter.

On one server i have 1 logical disk for log and  1 logical disk for data (SSD disk behind RAID) its my primary server. On second server (secondary) I have 1 disk (HDD and SSD behind Storage Pool with tiering and cache) for data, and 1 SSD disk (DAC) for log.

Servers are connected through 2x1Gb NIC in agregation, and 1x 10Gb RDMA NIC.

I successfully setup storage replica and everything works fine until I decide replace disks in storage pool on secondary server to faster one, for now its lab environment so I simply remove (only slow SATA) and I connect JBOD with SSD an NLSAS disks. Old storage pool, and Storage replica was delete. 

And i try setup new Storage Replica (Synchronous) on new Storage pool and at this point I have problem.

Storage Replica is creating, start initial replica (I see high network usage), but when initial replica finish on primary server I have  ReplicationStatus   : WaitingForDestination on secondary server i have ReplicationStatus   : Failed

On event viewer on secondary server i have : Error 1243

Initial sync block copy completed.

ReplicationGroupName: DestRG4
ReplicationGroupId: {30fdac53-ea06-451c-a9de-8dc34da2a75e}
ReplicaName: G:\
PartitionId: {725663ef-47b0-4f70-b64c-048f7e602b6b}
ReplicaId: {53cce8f6-9230-416b-a66b-03f6d180d3e4}
Bytes Copied: 1437622861824
Elapsed Time (Seconds): 2773
Status: An invalid parameter was passed to a service or function.

Information ID 1237

Block copy is in progress.

ReplicationGroupName: DestRG4
ReplicationGroupId: {30fdac53-ea06-451c-a9de-8dc34da2a75e}
ReplicaName: G:\
ReplicaSetId: {53cce8f6-9230-416b-a66b-03f6d180d3e4}
PartitionId: {725663ef-47b0-4f70-b64c-048f7e602b6b}
CopiedBytes: 1437622861824
RemainingBytes: 10070725230592
PrimaryLsn: 1
SecondaryLsn: 0
Status: SecondaryRecovery

Error 5014

Connection lost to the share hosting the partner replica.

LocalReplicationGroupName: DestRG4
LocalReplicationGroupId: {30fdac53-ea06-451c-a9de-8dc34da2a75e}
LocalReplicaName: G:\
LocalPartitionId: {725663ef-47b0-4f70-b64c-048f7e602b6b}
ReplicaSetId: {53cce8f6-9230-416b-a66b-03f6d180d3e4}
RemoteReplicationGroupName: SorurceRG4
RemoteReplicationGroupId: {74dcb3e4-7856-4276-800f-581db0285353}

Guidance: You should expect this event when changing replication direction between computers, when suspending a replication group, or when removing a replication partnership, or just after you resized a source data partition (once per resized data partition).

Error 5008

Destination moved to failure state.

ReplicationGroupName: DestRG4
ReplicationGroupId: {30fdac53-ea06-451c-a9de-8dc34da2a75e}
ReplicaName: G:\
ReplicaId: {53cce8f6-9230-416b-a66b-03f6d180d3e4}
Status: An invalid parameter was passed to a service or function.

Guidance: After resolving the failure, you may need to run Sync-SRGroup to resume replication.

I try delete Storage Replica, Using command

Get-SRPartnership | Remove-SRPartnership  
Get-SRGroup | Remove-SRGroup 

Clear metadata

Clear-SRMetadata -AllPartitions
Clear-SRMetadata -AllLogs
Clear-SRMetadata -AllConfiguration

even delete all partitions on secondary server (including MSR partition) and partition for log on primary server. Only partition with data on primary server I don't delete.

I create storage group with that command :

New-SRPartnership -SourceComputerName tebe.domain.com -SourceRGName SorurceRG4 -SourceVolumeName G: -SourceLogVolumeName D: -DestinationComputerName kallisto.domain.com -DestinationRGName DestRG4 -DestinationVolumeName G: -DestinationLogVolumeName D:

Can anyone help me succesfully setup replication

NTFS permissions for create, but not delete/modify

December 18, 2019, 2:21 pm

≫ Next: Assistance Needed for Windows Server 2016 and Deduplication Failure

≪ Previous: StorageReplica - Failed / WaintingForDestinatnion

$

0

0

I need a folder setup that allows users to create files, but not delete or rename them.  I understand this sounds weird, but the business case is there for it, so I won't bore with details.  I have seen this question on here a lot, with different variations, but not a solution that includes locking the creator of the file from deleting or modifying it.

I have successfully created permissions that allow files to be dragged and dropped.  Allow on folder and files Create files, and then Deny on files only Delete

But no program, including Notepad, will allow Save As to the folder.  I understand that this is likely because of temp files being written to the location, that need to be deleted before the files is actually saved.  Any combination of permissions that I apply, result in being able to Save As and being able to delete, or not being able to Save As.

Appreciate any and all feedback.

Assistance Needed for Windows Server 2016 and Deduplication Failure

December 18, 2019, 10:24 pm

≫ Next: Win10Pro clients cannot connect to win2012r2 share

≪ Previous: NTFS permissions for create, but not delete/modify

$

0

0

Need your assistance with this or to redirect me to someone.

Scenario:

• Enable dedup natively on winsvr      2016
• Works fine but clients on remote networks are not able to access/copy the shared files which have been deduped
• Local network clients are fine

Win10Pro clients cannot connect to win2012r2 share

November 8, 2019, 3:11 am

≫ Next: Need help on Migrate Server 2008R2 server to Server 2019

≪ Previous: Assistance Needed for Windows Server 2016 and Deduplication Failure

$

0

0

All my Win10Pro 1903 clients cannot connect to some of my windows2012r2 (hyper-v) server shares. They looses connection simultaneously to all shares on some of my 5 servers, all in the same domain and with the same dns-setup on nic.

Connection from Win7 still works fine.

Have tried all I can think of: Deactivated FW, antivirus, restarted servers and clients. The shares usually get reachable again after a couple of hours. Same problem when trying to connect to servershare using server-ip instead of server-name.

Had the same problem earlier this year (win 1803), but it stabilized over summer. Reappeared recently, obviously causing productivity-issues within the firm.

Help appreciated :-)