In my work place, we have Windows Storage space server cluster configured on Windows 2016 connected to JBOD. 
It is serving as ISCSI target server service. I have one extra JBOD box attached to the same cluster that has SSD and HDD mix. Does it good to create storage tier volume to store iscsi disk on there to provide iscsi target service to other server that will use it?

Thanks,

I would like to generate a report with powershell which creates a report with folder permissions on an ntfs volume.

is there an easy way to set this up ?

Hello All,

    I have created a windows 2016 cluster of two nodes , but when i run the validation report i get error in cluster network communication stating that the UDP port 3343 is not able to connect over the Admin vlan. my query here why is the UDP port opening required over Admin Vlan , i have configured the public and heartbeat vlan too and set the admin vlan to do not use for any cluster communication still its asking for UDP port to be opened across the Admin vlan.

Error

Hi.

We have (had) a 4 node S2D cluster running Hyperconverged.

One of the nodes had a critical failure, which resulted in a complete system rebuild of that node (don't ask me why). We knew we had to do some manual cleanup in the cluster. We know the drill (I think).

- Evict failed node from cluster
- After Storage-Jobs finish, remove the missing disks in the S2D pool. Pool size shrinks.
- Reinstall failed node, do not join cluster yet. First on this node remove S2D Pool, Virtual Disk and reset the S2D drives to enable them to be pooled again.

When we try to re-add the node, it fails. Cluster report only shows 1 warning which interests me. On the 3 remaining nodes, something is still left over from the old failed node. In the Storage layer.

********************************************************************************************

Get-StorageSubSystem -FriendlyName *clu* | Debug-StorageSubSystem

Anyone ?

Greetings,
Richard

Domain controllers: Server 2012 R2 and Server 2008 R2.

We have 2 servers we us as the central servers for everything else and they are Server 2012 R2. Everything else that connected to them at 2008 R2.

We are running at a 2008 R2 functional level.

I get this error on about 25% of my server. The sync appears to be fine but I cannot pinpoint why this issue occurs. It says it is "paused for backup or restore" almost every hour, then it reconnected and works fine. In most cases it reconnected within 30 seconds but it still gives that warning first.

What can I do to fix what ever is causing this issue. There are not lasting issues, just a temporary warning. Every day or so, I will get an error, but again it reconnects after about 30 seconds.

Event ID 5014

The DFS Replication service is stopping communication with partner ADDC for replication group Domain System Volume due to an error. The service will retry the connection periodically. 
 
Additional Information: 
Error: 9036 (Paused for backup or restore) 
Connection ID: 9B4CAE32-0CF2-49F2-AC5F-6A1D01177A92 
Replication Group ID: 318DDC2C-6BB5-4D28-9AC7-BD514AD95E8C

Event ID 5002

The DFS Replication service encountered an error communicating with partner ADDC for replication group Domain System Volume. 
 
Partner DNS address: ADDC.domain.local 
 
Optional data if available: 
Partner WINS Address: ADDC 
Partner IP Address: 10.190.1.10 
 
The service will retry the connection periodically. 
 
Additional Information: 
Error: 9036 (Paused for backup or restore) 
Connection ID: 9B4CAE32-0CF2-49F2-AC5F-6A1D01177A92 
Replication Group ID: 318DDC2C-6BB5-4D28-9AC7-BD514AD95E8C

The DFS Replication service successfully established an inbound connection with partner ADDC for replication group Domain System Volume. 
Additional Information: 
Connection Address Used: ADDC.domain.local 
Connection ID: 9B4CAE32-0CF2-49F2-AC5F-6A1D01177A92 
Replication Group ID: 318DDC2C-6BB5-4D28-9AC7-BD514AD95E8C

I don't get the 5002 event ID everytime. Just sometimes. Mostly it's the other 2 I get.

Thank you
Charles

Hi All

A month back 4 of our 14 sub folders under shared root folder mysteriously went missing.

On investigation we found them to be hidden with the hide attribute check box being greyed out.

We went through many forums and could not find a solution.

We even went to the extent of formatting the file server and recreating them thinking it was an undetected virus that keeps out of our Eset file server solution but it came back.

Our folder structure is as follows;

Root folder "ABCD" is shared with Everyone "full control file share permission" and NTFS permission to Admin "full control" and Everyone "list folder contents" as DFS.

We have within, sub folders per Dept. name that continues with the said root permission but with NO inherited.

To each Dept. folder we assign AD Security Groups for the said Dept. and provide them with NTFS "Modify" permission.

The Issue:

We were able to root cause and trace the cause to a new user JohnD. The moment we add him to any folder existing or new with NTFS"Modify" permission the folder gets hidden (does not happen with "Read & Execute" permission).

It gets worse, any domain Global security group to which he was in is also affected and stays that way even after we removed him.

Eg: when we add the said group with NTFS"Modify" permission the folder gets hidden (does not happen with "Read & Execute" permission).

We deleted and recreated 3 of the 4 groups he was in and assigned them to new folders and set NTFS "Modify" permission, this time the folder does not get hidden.

However a new issue of nested users not being able to access files saying they don't have access. When we add the user direct to the folder it is ok.

We can delete and recreate the User but both default Domain Users and Everyone security groups are affected.

Could this have been a virus that targets such AD Users and Groups?

How do we even troubleshoot this and at what attribute level?

Rgds Yohan

I have recently upgraded a clients servers to Windows Server 2012 & since doing so have lost the ability to scan to folder.

Both servers are domain controllers and previously on a 2008 domain controller I would have had to make the following change to allow scan to folder:
 Administrative Tools
 Server Manager
 Features
 Group Policy Manager
 Forest: ...
 Default Domain Policy
Computer configuration
 Policies
 Windows Settings
 Security Settings
 Local Policies
 Security Options
 Microsoft Network Server: Digitally Sign Communications (Always)
 - Define This Policy
 - Disabled

However I have applied this to the Windows 2012 server but am still unable to scan, possibly due to added layers of security in server 2012. The error on the scanner is Authentication with the destination has failed check settings.
I have also tried the following at the server:
Policies -> Security Policies
Change Network Security: LAN Manager authentication level to: Send LM & NTLM - Use NTLMv2 session security if negotiated.
Network security: Minimum session security for NTLM SSP based (including secure RPC) clients and uncheck the require 128 bit.
Network security: Minimum session security for NTLM SSP based (including secure RPC) servers and uncheck the require 128 bit
I have created a user account on the server for the ricoh and set this in the settiings of the Ricoh and verified everything is correct.

Are there any other things I have missed?

Good afternoon all,

I've some files where can't take the ownership of. I've tried every and searched allot of technet and the rest of google.

When is ue:

Takeown /f *.* /r /a /d y

i get like 4 succes messages and 16 INFO: Access is denied.

I need to copy/cut the files to new storage, can someone help me please??

Hello,

we want to audit every delete action on our fileserver. But when i set it up all read actions are also logged.

Is there an option to only log deleted files?

Regards,

Hey folks,

Getting the following error below in our DFS architecture. Little back story here. I have 6 remote sites all replicating between each other in full mesh. The server having the issue is running Windows Server 2008 R2. It recently had a power failure but is now back online and AD replication is solid. However, DFS is a bit unhappy. I have two replication groups called "Public" and "Private". The are both reporting the following error.

[ERROR] Failed to execute GetOutboundBacklogFileCount method. Err: -2147217406 (
0x80041002)

I have stopped DFSR service and backed up DFSR folder inside the System Volume Information folder. I then deleted the DFSR folder and restarted the DFSR service. This created the new DFSR folder just fine. I then ran the following command:

C:\>wmic /namespace:\\root\microsoftdfs path DfsrReplicatedFolderInfo get replic
atedFolderName, State
ReplicatedFolderName  State
Private               0
Public                0

After about 30 minutes a re-ran the command again and I see the below output. I am still getting the error on both replication groups. Any ideas on how to resolve this? Should I remove from replication group and re-add. I don't want to cause any further corruption with other Namespace servers or replication partners.

Robert Hefner

Hi,

We have Windows Server 2003 R2 in our environment and we use EMC Networker 7.4 to take backup of these servers. We take the system state backup of these servers with the help of a feature in Networker called VSS Save sets.

Now randomly in certain servers this VSS backup fails while the file system backup (like C:\. D:\) occurs successfully. While investigating the VSS backup failure issue we observed that VSS backup fails when the System writer (by issuing "VssAdmin list writers" command) is in waiting for completion state. VSS backups are successful on those systems where system writer is in stable state. I have googled a lot to resolve this issue and applied all the relevent solution by applying pathes related to VSS, registering dlls etc but the issue still persists. If we reboot the server then it solves the issue for time being but after few days it surfaces again. I have also tried to stop/restart the MS Software Shadow Copy Provider service on the affected server but the System writer still remains in Waiting for Completion state.

Please find the the output of the Vssadmin list writers command of one of such affected server below:

Writer name: 'System Writer'
   Writer Id: {e8132975-6f93-4464-a53e-1050253ae220}
   Writer Instance Id: {664fe3b7-c464-440b-8f1f-20558c21d777}
   State: [5] Waiting for completion
   Last error: No error

Writer name: 'SqlServerWriter'
   Writer Id: {a65faa63-5ea8-4ebc-9dbd-a0c4db26912a}
   Writer Instance Id: {89102b4b-3cf9-4a7e-9927-d6d8bd5c6eff}
   State: [5] Waiting for completion
   Last error: No error

Writer name: 'MSDEWriter'
   Writer Id: {f8544ac1-0611-4fa5-b04b-f7ee00b03277}
   Writer Instance Id: {3bd4a708-343a-4ea6-aa57-2b349494f0cb}
   State: [1] Stable
   Last error: No error

Writer name: 'Registry Writer'
   Writer Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
   Writer Instance Id: {ffb82a13-eb75-4cf3-a317-e33d6ca5bc3f}
   State: [1] Stable
   Last error: No error

Writer name: 'Event Log Writer'
   Writer Id: {eee8c692-67ed-4250-8d86-390603070d00}
   Writer Instance Id: {d4212250-fc73-4921-af15-70d74a5a2874}
   State: [1] Stable
   Last error: No error

Writer name: 'COM+ REGDB Writer'
   Writer Id: {542da469-d3e1-473c-9f4f-7847f01fc64f}
   Writer Instance Id: {fe90b4c1-d40d-425b-8813-15792b68bb46}
   State: [1] Stable
   Last error: No error

Writer name: 'Cluster Service Writer'
   Writer Id: {41e12264-35d8-479b-8e5c-9b23d1dad37e}
   Writer Instance Id: {7658584d-5860-429c-926f-fb50fb17f432}
   State: [1] Stable
   Last error: No error

Writer name: 'WMI Writer'
   Writer Id: {a6ad56c2-b509-4e6c-bb19-49d8f43532f0}
   Writer Instance Id: {9cb1708b-74d8-43fa-b870-01b487ac14b1}
   State: [1] Stable
   Last error: No error

Writer name: 'BITS Writer'
   Writer Id: {4969d978-be47-48b0-b100-f328f07ac1e0}
   Writer Instance Id: {0b48b192-8372-4a95-bf07-0b9edd0ddced}
   State: [5] Waiting for completion
   Last error: No error

Please tell me how can I make the System writer into stable state without restarting the server.

Regards

Kunal Bhadra

Hi

I have a PDC with windows server 2012R2 data center on it.I have shared some folders and files and gave access to some users from another domain network to access them but from clients when I try to open it by typing server IP or computer name in run ,even with administrator user it says access denied, but sometimes it opens the files without any problem.

Also I can open the files on systems which has not joined any domain.

Thanks

Hi,

I built a 4 node S2D cluster. Next I removed 2 nodes from the cluster. The remaining 2 nodes work fine but the disks that belonged to the removed nodes are still visible in in the cluster S2D. Those disks have the same name: Generic Physical Disk (S2DSystem02), the same bus: unknown and usage: Retired. Both the virtual disk (only 1 virtual disk) and the retired disks carry a warning flag. I have rebuilt the Virtual disk. When I try to remove one of the retired disks I get the message: "first add a replacement disk".

Question 1: how can I remove those retired disks? Question 2: Is there a document available that describes how to properly remove a node from an S2D cluster?

-- Konrad Puchala

Hello,

We have been on Windows 7 x64 for a while now. There has never been issues with DFS. \\Domain\Namespace vs \\DomainFQDN\Namespace always worked the same without issue.

We have started the testing process of Windows 10 and noticed that randomly \\Domain\ will not work and prompts for a password vs \\domainFQDN works without issue.

Same happens for \\Domain\Netlogon vs \\DomainFQND\Netlogon.

I have seen a lot through my research of this that first I should be upgrading the DFS to at least 2008, along with setting the DFS to always use the FQDN for referrals.

Is this by design with Windows 10 and it now accessing DFS differently to Windows 10 or am I missing a setting somewhere one Windows 10 that can correct this?

Zac Avramides

What would the best way to transfer a Shared drive on our legacy 2008 server to our new Server 2016? I saw there is a migration tool, that will copy files and permissions. What is the best way to re-map the drive to the new location?

//server-2008/sharedDrive

to

//server-2016/sharedDrive

Thanks,

Chris

I installed an HPE DL360 gen10 server a month ago running 2016 Server Essentials and most of the hiccups have been ironed out now. However, I'm struggling with the dashboard and particularly the storage. All of the data used by my colleagues is on a separate mapped drive (d:) to the OS partition, running in RAID 10. They are all logged in on domain user accounts and have access remotely using the built-in Anywhere Access.

The problem I really need some help with is that Server Folders seem to be disappearing from the Dashboard Storage section, even though they clearly working and accessible. They are even working through the Remote Web Access (although yesterday they disappeared from it). There doesn't seem to be much reason or rhyme to this but it feels like a fairly serious risk to our business so any help or suggestions would be massively appreciated. One thing that does seem to reliably cause problems is trying to create a new user account (and assign server folder permissions) through the dashboard... this then just hangs at the assigning permissions stage and I have to force close Dashboard... I reopen it and all of the Server Folders are no longer listed for an indeterminate period of time.

Help please or point me in the direction of the right support would be great :)

Hi 

We have shared folder with permissions for users , we do not want users to delete files and folders but will be able to write data to files , so I unchecked modify permission for users . but when the users has no modify permission users also can't write to the file 

Even editing special permission and enable users to write but deny delete the files didn't solve the problem 

Does any one  has an idea ?

Hello everyone,

I do have a very strange issue with my file server. Let me first describe the infrastructure.

OS: Windows Server 2016
Roles: File and Storage Services
Type: Member of a 2016 Domain

On the file server I do have to following structure/permission:

• F:\
  • ANWDTest
    • ZZZ
      • DIMS
      • Wagenbuch

The NTFS permissions to those folders is like that:

• ANWDTest
  Inheritance disabled
  CREATOR OWNER - Full control - Subfolders and files only
  SYSTEM - Full control - This folder, subfolders and files
  Administrators - Full control - This folder, subfolders and files
  L_NTFS_J_R - Read & execute - This folder only
  
  
• ZZZ
  Inheritance enabled
  L_NTFS_J_ZZZ_R - Read & execute - This folder only
  
  
• DIMS
  Inheritance enabled
  L_NTFS_J_ZZZ_DIMS_R - Read & execute - This folder, subfolders and files
  L_NTFS_J_ZZZ_DIMS_W - Modify - This folder, subfolders and files
  
  
• Wagenbuch
  Inheritance enabled
  L_NTFS_J_ZZZ_Wagenbuch_R - Read & execute - This folder, subfolders and files
  L_NTFS_J_ZZZ_Wagenbuch_W - Modify - This folder, subfolders and files

So far I think this is nothing special, now here is my issue:

When I delete the "Wagenbuch" or the "DIMS" folder this does remove the group "L_NTFS_J_ZZZ_R" from the "ZZZ" folder AND does remove the group "L_NTFS_J_R" from the "ANWDTest" folder... and I do have absolutly no idea why this is happening.

Does anyone see an error in the setup or did face similar issues? I am totally lost here, even no idea where to start searching.. Google did also not help at all.

Thanks for the support!

UPDATE 1: To be sure that is not an issue of our file server - I did setup the same structure on an other 2016 server, and did face the same issue.

UPDATE 2: In the meantime I did the same setup on a 2012 R2 server and there is no issue at all, so this seems to be related to Server 2016.