Hello,

we are in the process of implementing a more secure administration model.

One key feature we want to use is the protected users group.

Issue: create Namespace fails when using DFS GUI

If we use DFSutil or PowerShell everything works as expected.

However, when using the DFS Management GUI it does not work when working on a member server.

Error Message is: The namespace cannot be queried. access denied

In the event logs you can see a NTLM logon event that gets denied because the user is a member of the protected users group.

It does work when creating the Namespace on a domain controller.

Consequently if you remove the user form this group everything works as expected on the member server.

So the question is: how to enable kerberos authentication for the DFS management GUI

Forest and Domain level Windows 2012R2, all severs Windows 2012R2

Anyone has some experience regarding this issue?

Hello everybody,

I am implementing a Scale-out file server together with Hyper-v, both clusters have been equipped with Chelsio nics which have been placed in different VLANs (to enable SMB multichannel). I ran some file copy between these systems in order to see how RDMA is working and I have observed some strange and inconsistent behaviours. I was expecting to see the same speed when moving files between systems that shares the same network infrastructure (all servers are connected to the same switches) and that mount the RDMA nics.

The network team implemented MLAG on the switches on which the RDMA nics are connected.

I just wondered if the implementation of MLAG could potentially interfere with the proper operation of the SMB 3.x ? 

The behaviours that I have observed can be summarized as:

File copy between the Hv hosts - I manage to achieve a speed of 1.5 GB/s, but during this process the speed fall down (almost to 0 MB/s) for two times. it seems that I have reach a bottleneck or some hard limit.

File copy between the FS cluster node - I managed to achieve a speed of 600 MB/s, but at 1/3 of the copy the speed is reduced to 135 MB/s without been able to recover to the 600 MB/s.

File copy between the Hv hosts and FS - I managed to achieve a speed of 600 MB/s.

Thank you for the help J

I use the following robocopy command to copy files from old to a new server:

@ECHO OFF

SET _source=d:\data\
SET _dest=\\newserver\DATA\

SET _what=/COPYALL /ZB /secfix /SEC /MIR

SET _options=/R:0 /W:0 /LOG:C:\MyLogfile.txt 

ROBOCOPY %_source% %_dest% %_what% %_options%

How can i change this command to only log changes new files and directories.  Right now is logging everything.

Thanks

patyk

Hello,

Our previous file server died, the data was recovered and placed on a sun server. Now I have deployed a new file share server win 2008 R2 and need to move/copy the files/data to the new server. In the past I have used SyncToy for desktop, is there something similar for server 2008?

Please let me know ASAP please since I need to move the data back.

Thanks,

RA

Respected sir / madam,

I created  a one domain and user

My requirement is  one "A" Local  PC one  personal folder or  document folder do not access to any other domain user when login on that "A" PC on other user 

please do needful 

hi,

I'm playing with so called "work folders", so the issue is

guys, I know, you are very smart. I'm not that smart as you, please be more descriptive in "0x80c80040", what does that mean ?

Ilya Shipitsin

hello,

i am an ict technician at a school in belgium.
i have a problem with folder redirection, orginaly the folder redirection was configured for SOME of the users f.e:
my document to \\dc1\homedir\%username%\my documents

now the following problem , my dc1 storage was not enough to keep up with the place of the documents etc

2 weeks ago all of my users have folder redirection to \\dc2\homedir\%username%\my documents.
for the "new users" that didnt used the dc1 before is their no problem but for the users that did use the dc1 is their a problem.
the sync center doesnt remove the \\dc1 location and gives conflicts.
the sync center gives the following locations : \\dc1 and \\dc2.
also when they create a word document and save it under my documents they somethimes get an error, file corrupted or path unfindable. or when they download something it sais u dont have the rights to open while they just downloaded it.
also somethimes f.e they get no icons on the desktop or on the start menu they are just white icons.

the only option i know for now is to delete the user profile on the local pc , log in again.
the user get an temp. account, i log in to my admin again and delete the .bak from the registry
log in again with the new user and the sync center is allright.
also theirs no more problem with word or what so ever.
but this is insane because we have allot of users and allot of pc's its almost impossible to go from pc to pc to remove the users.

thanks in advance !

greeting

jelle

Hello,

I have an issue on a brand new and fresh installed Win 2012 R2 Standard (all updates applied). I get this error when trying to enable shadow copies on one big volume (65 TB spanned volume):

Volume Shadow Copy Service error: Unexpected error DeviceIoControl(\\?\Volume{ec8c116f-e1ef-11e4-80c1-44a842035958} - 00000000000001AC,0x0053c008,000000BE7E2E96A0,0,000000BE7E2EA6B0,4096,[0]).  hr = 0x80070057, The parameter is incorrect.
. 

Operation:
   Processing EndPrepareSnapshots

Context:
   Execution Context: System Provider

Chkdsk shows no error. VSS writers are all ok, providers seem ok to me:

Provider name: 'Microsoft File Share Shadow Copy provider'
   Provider type: Fileshare
   Provider Id: {89300202-3cec-4981-9171-19f59559e0f2}
   Version: 1.0.0.1

Provider name: 'Microsoft Software Shadow Copy provider 1.0'
   Provider type: System
   Provider Id: {b5946137-7b9f-4925-af80-51abd60b20d5}
   Version: 1.0.0.7

I noticed this error when I found Data deduplication was not saving anything. 

Any help will be appreciated.

JP

Hi

We have 2 windows 2008R2 servers in our DFS.  It is a mesh replication setup.

We tried adding a 3rd one by first pre-seeding the data.  However after adding the new server to the existing replication group; a bunch of files/folders got zapped and ended up in conflictanddeleted folder.  That is so stupid!

Any explanation?  I can't find anything useful in the eventlogs on why in the world such thing can happen!

I have two member servers. One is a primary running 2008 SP2. The other is a clustered file share on WS2012 R2. The non-primary is set to read-only.

I can't access many folders locally on the read-only server. I've verified permissions. I've tried with a local admin and a domain admin account. None of them are being allowed access despite permissions allowing it.

1. I can access them on the primary.

2. I can access them if I go in through a share on the read-only member  (\\servername\shares\sharehere\)

3. I can access them if I go in through the administrative share (\\servername\d$\sharehere) on the read-only member

Any ideas? I can't seem to find any differences between folders I can access and those I can't. This is causing issues creating duplicate shares between the members; mostly in that I can't.

Hi,

I`m trying to publish Work Folders using Web Application Proxy based on this guide.

When trying to set up Work Folders on Windows 8.1 clients (1 domain-join, 1 in workgroup) I get the following error:

 [Window Title]
Work Folders

[Main Instruction]
There was a problem finding your Work Folders server

[Content]
Make sure that you have the correct Work Folders URL. If this problem persists, email your organization's tech support.

[^] Hide details  [Close]

[Expanded Information]
The sync server needs the user's current user name and password.
 (‪0x80c80300‬)

In the Web Application Proxy/Admin event log on the Web Application Proxy server I see the following logged at the time of the failed Work Folders configuration attempt:

Web Application Proxy received a request with a nonvalid edge token. The token is not valid because it could not be parsed.
Error: Edge Token validation failed. Failed to serialize JSON object. Exception: The input is not a valid Base-64 string as it contains a non-base 64 character, more than two padding characters, or an illegal character among the padding characters. . Token: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IlBsLU52VDhVRmNVaExURlNaWDhDdjh4UlRMbyJ9.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.ksBY9ESYGdOvtciexoM_0ow4Rds3bCer0wuJZmtP-c2JXjXIgVzWGu-F1Tg8zNuB1k9b9FzDq9ulUNjw6_KKsnuWKNpYl4HF3ahlLbjppoe_vIg48_l6Gkswk4NQUQ4xqZjlA_huB0FOPkrUfx_-oeZ5jYy7kk26TwyqGAx63Fa5EowJozlC3hkQrfEdVU_7hTM0cZnHcI9jcj5Ga5rjoA472aM82ZYA5JvzdYIzEPGOEVsP9DvPm_z-PUMMbnAsdKk77ZJtoz1q6_IKDOAiQhEIONS2d11m6lhcqQNt8aX43yi74ToCDhEuM2I3Ij97fJbh669kWQmOQqZ5xHxnDQ
Received token: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IlBsLU52VDhVRmNVaExURlNaWDhDdjh4UlRMbyJ9.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.ksBY9ESYGdOvtciexoM_0ow4Rds3bCer0wuJZmtP-c2JXjXIgVzWGu-F1Tg8zNuB1k9b9FzDq9ulUNjw6_KKsnuWKNpYl4HF3ahlLbjppoe_vIg48_l6Gkswk4NQUQ4xqZjlA_huB0FOPkrUfx_-oeZ5jYy7kk26TwyqGAx63Fa5EowJozlC3hkQrfEdVU_7hTM0cZnHcI9jcj5Ga5rjoA472aM82ZYA5JvzdYIzEPGOEVsP9DvPm_z-PUMMbnAsdKk77ZJtoz1q6_IKDOAiQhEIONS2d11m6lhcqQNt8aX43yi74ToCDhEuM2I3Ij97fJbh669kWQmOQqZ5xHxnDQ

Details:
Transaction ID: {5a8eb154-06f4-0001-b1c3-8e5af406cf01}
Session ID: {5a8eb154-06f4-0001-b1c3-8e5af406cf01}
Published Application Name: WorkFoldersDiscovery
Published Application ID: EC64138D-1A34-CCF6-D02B-274FDB20D556
Published Application External URL: https://workfolders.contoso.com/
Published Backend URL: https://workfolders.contoso.com/
User: <Unknown>
User-Agent: MS_WorkFoldersClient
Device ID: <Not Applicable>
Token State: Invalid
Cookie State: NotFound
Client Request URL: https://workfolders.contoso.com/sync/1.0/discover/serverurl
Backend Request URL: <Not Applicable>
Preauthentication Flow: PreAuthWindowsStoreApp
Backend Server Authentication Mode:
State Machine State: Idle
Response Code to Client: <Not Applicable>
Response Message to Client: <Not Applicable>
Client Certificate Issuer: <Not Found>

For testing purposes I put workfolders.contoso.com in the hosts file of the test-clients, pointing to the IP of the Web Application Proxy. If I remove the hosts file entry, I can configure Work Folders without any issues. Thus Work Folders on the file server as well as authentication on the AD FS server is working fine.

Any idea what might be the problem?

Hi guys 

My greatest nightmare happened yesterday. I lost on SSD  in my clustered, tiered, enclosure aware storage pool and all virtual disks got unresponsive before RHS rebooted my two head nodes. This is primary storage for a Hyper-V cluster, so imagine the number of angry phone calls...

Key info:

• Failover cluster
• Two head nodes
• Three Quanta SAS JBODs
• 56 x Seagate ST1000NM0023
• 8 x Sandisk SDLKAE6M200G5CA1 (Optimus Ascend)
• One storage pool
• 4 virtual disks (storage quorum and 3 disk containing one SOFS share each

So what happened is one SSD started misbehaving and throwing controller errors (11, LSI_SAS2) and eventually warnings on failed IO operations (1531 disk). 

Then RHS threw a time out on my storage pool (1230 FailoverClustering) and followed up with timeouts on all virtual disks including my storage cluster disk witness.

Eventually one cluster node bugchecked 0x9E  (1001, Bugcheck 0x0000009e (0xffffe0011d522080, 0x00000000000004b0, 0x0000000000000005, 0x0000000000000000) which I believe is forced by RHS due to continoued timeouts. The remaining head node had lost access to the disk witness and decided it had lost quorum and shut the whole cluster down.

When the first head nod had rebooted it had full access to the storage pool and virtual disks including the storage cluster disk witness, so it started the cluster. The second head node booted and joined the cluster and everything is peachy. Well, except for angry users and owners of virtual machines stored on SOFS.

The storage pool reported a degraded state and one SSD was reported missing. I replaced the SSD and everything i healthy again now. But what the heck happened? I thought the storage pool would abstract the physical disk layer, and everything from virtual disk and up would be oblivious to physical failure.

Where do I even start looking at this one to prevent future meltdowns? I'll be happy to post logs and even my powershell setup script for the entire storage as well as details as needed. Any help is appreciated :-)

Hi,

 I have 2 Windows 2012 R2 servers in the same DC, one server has a 6 TB disk and the other has a 5TB disk. One server has 300 GB free and the other has 8 GB free, I'm seeing disk IO problems, as well as backup issues trying to backup several TBs on a single volume.

The two servers are members of DFS replication groups for various shared folders with satellite offices. Replication has been a little problematic - lots of 4202 errors in the event logs, with backlogged files building up.

Im also aware that having a single volume limits DFSR to use a single DB for all my RFs, which isn't best practice. What I would like to know is what's the correct procedure to introduce a new file volume and move some of the existing data on to the volumes to get around the issues above?

Thanks

IT Support/Everything

Hi There,

I have problems to migrate a directory (including subfolders and files) from a Windows Server 2003 Service Pack 2 to a
Windows Server 2008R2 Service Pack 1. The error message is:

Send-SmigServerData : Starting the connected transport failed.
The cmdlet cannot connect to the destination server. For more information, see "Data Migration Connectivity" in the Tro
ubleshooting section of the File Services Migration guide on the Windows Server 2008 R2 TechCenter.
At line:1 char:20
+ Send-SmigServerData <<<<  -include Data -ComputerName "Server2" -SourcePath "C:\TEMP\Download" -Destinatio
nPath "C:\FTPDaten\Download" -Verbose
    + CategoryInfo          : InvalidOperation: (:) [Send-SmigServerData], MigrationException
    + FullyQualifiedErrorId : Microsoft.Windows.ServerManager.Migration.Commands.SendSvrMigDataCommand

Those servers are in the same subnet. Also the connectivity is guaranteed, i've tested this by pinging each other. At both servers i'm administrator and i run at the same timethe shell commands as administrator:

Receive-SmigServerData --> Source-Server
Send-SmigServerData
-include Data -ComputerName "Server2" -SourcePath "C:\Temp\Download\"
-DestinationPath "C:\FTPData\Download" -Verbose -->Destination Server

So my question is, what parameter, setting, option etc I or need?

[Sorry for my bad english and if you need more information just ask me...]

Thanks a lot
Moritz

We have problems with a Windows Server 2008 R2 File Server. At random the file server loses all it's shares and the homedrive and application shares are not available anymore. A reboot seems the only way to solve this, untill it happens again. Today we had another crash and we were able to create a manual dump of the Server service. I have used WinDBG to analyze the dump, but I'm not really confident what I can use from this dump. Here is a copy of the dump:

Can anyone help on this?

Hi!

I have a weird problem, our DFSR have stopped working on one of our servers. We have seven remote2008 R2 file servers that is synchronizing to one Server 2012 R2 server à la Hub and Spoke.

I ran Get-DFSRState and saw that many files had the updatestate Blocked. So I ran this command:

Get-DfsrState | ? SourceComputerName -Match TheServerThatIsFailing01 | Group-Object updatestate

Count Name                      Group
----- ----                      -----
  144 Waiting                   {Microsoft.DistributedFileSystemReplication.DfsrUpdate, Microsoft.DistributedFileSystemReplication.DfsrUpdate, Microsoft.Distribute...
  267 Scheduled                 {Microsoft.DistributedFileSystemReplication.DfsrUpdate, Microsoft.DistributedFileSystemReplication.DfsrUpdate, Microsoft.Distribute...
  345 Blocked                   {Microsoft.DistributedFileSystemReplication.DfsrUpdate, Microsoft.DistributedFileSystemReplication.DfsrUpdate, Microsoft.Distribute...

I have no idea how to troubleshoot, there's free disk space available, no errors in event viewer.

Does any one know what blocked means? How do i troubleshoot ?

Thanks!

Hello,

We recently migration to 2008 r2 with to DFSR from FRS however every might replication throws out error.

Event ID :5014

The DFS Replication service is stopping communication with partner  for replication group Domain System Volume due to an error. The service will retry the connection periodically. 

Additional Information: 
Error: 9036 (Paused for backup or restore) 
Connection ID: 6D635F1C-E579-4DC0-8D45-CB0E8854B241 
Replication Group ID: E657894F-E31A-4F16-9CEA-82C01D9CC8FC

The time coincide directly with backup  is there a way to fix this 

Hello,

I know this should be simple as I have done it several times - just never on Server 2012.  I need to re-create the DFSR DB (it is corrupt).

When I attempt the command ' E:\System Volume Information>rmdir DFSR /s ' I get several errors like the one below.  I usually don't see character/path complaints from a cmd promt.  It is elevated too.

The path DFSR\Private\{F9037B4B-5D15-4797-9E30-48EFEB34D787}-{58600AAF-A276-48C3
-B148-2297AABEA84C}\Staging\ContentSet{F9037B4B-5D15-4797-9E30-48EFEB34D787}-{58
600AAF-A276-48C3-B148-2297AABEA84C}\99\299-{34668DCB-CC9D-4980-9032-AE465FBCBAEF
}-v299-{34668DCB-CC9D-4980-9032-AE465FBCBAEF}-v299-Downloaded.frx is too long.

If I attempt from the GUI, nothing happens.  I did give myself FC permissions to the SysVol folder.  I even tried drilling a few folders down using the GUI and same thing, nothing happens.

Thank you!