I am setting up DFS Namespaces and replication for the first time, and I have everything setup. However, there seems to be more than 1 way I can access the network shares. Before I configure my Group Policy and Logon Script drive mapping, I was
wondering if there was a "Correct" way to do it.
For my example, I have created a DFS called "Data" (shown in DFS Management Namespaces as \\domain.local\data). Under this I have created 2 DFS "Folders" called "Documents" and "Training". Each of those
2 folders each have my 4 file servers as folder targets (replication is setup and functioning well). Documents has \\Server1\Documents, \\Server2\Documents, etc. Training has \\Server1\Training, \\Server2\Training, etc.
I can access these shares via the DFS Namespace through either of the following UNC paths (I'll use the Documents one for this example) -
\\domain\Data\Documents
\\domain.local\Data\Documents
\\domain.local\Documents
Which one is correct, or can I use any? All my users are used to \\Server\Share without having the middle "data" path in there, but just accessing via \\domain\Documents does not work. I'm inclined to use the \\domain.local\Documents,
but almost all the examples I find about DFS include the "Data" middle path.
Thanks in advance!
-Brad
PS - Let me add that eventually I'd like different permissions on my DFS file shares. What I read was that the local share permissions and security permissions are what is used for access (so make sure they match across all servers), so I was confused
on the permissions I should grant to the DFS Share "Data" when I created it, so I just gave everyone read / write access. So maybe that is a reason why I should use the \\domain.local\Documents convention so the permissions on that share are
what come through...
PPS - ok, so each of these servers is at a remote branch, with <15 computers at the branch, so not only are they sharing files, they are also domain controllers. So I think the reason why my \\domain.local works is because my shares and the DFS Namespace
is referencing the same server. If my shares were on a different server, they would not resolve to \\domain.local\Documents because domain.local resolves to that branch domain controller. So the correct way to do it must be to us the \\domain\data\Documents,
right? Do I need to include the .local in the path or is it not necessary? Hopefully the correct permissions get applied.