Hi Team,
Following is my complete problem statement.
Requirement :- I would like to upgrade the DFS Namespace mode to Windows 2008 with ABE enable from existing Windows 2000 mode.
Details on the environment:-
1. Windows Server 2003 standard SP2 x64 domain controllers as namespace servers with existing Namespace mode as Windows 2000.
2. Windows Server 2008 R2 standard x64 domain controllers running in the domain which will replace the 2003 domain controllers (2008 R2 upgrade project)
3. DFS links pointing to backend folders/data kept on Netapp Vfiler with all the NTFS and share permissions setup.
Question :-
While when we have 2003 DFS links we need to setup the ACL permissions identical to backend folders (top/root) on each 2003 DFS Namespace server (domain controllers) using Icacls or other third party tool like FileACL.
What is the procedure to enable ABE on DFS Links in 2008 Namespace mode on Windows 2008 R2 DFS namespace servers (domain controllers ). I have read few articles and they suggest to run "dfsutil property acl grant" command on DFS links, only once and it will replicate to other DFS Namespace servers but I am a bit apprehended and do not want to disturb the backend file/folder ACL structure on VFilers. It would be nice if anybody can provide me a step-by-step approach.