2008 R2 domain simple DFS setup between 2 DCs\file servers (2008R2 and 2012R2).
When I run dfsdiag /testdfsintegrity /dfsroot:\\[dfs namespace]/recurse /full, I get 'ACL of the shares are inconsistent,' warnings for both of my targets. In doing some digging I noticed an oddity in the permissions listed for my folder targets. It appears that the access permissions for the CREATOR OWNER are listed differently depending on which server I am viewing them from.
From a 2012R2 server the CREATOR OWNER is listed as having "Full Control". But from a 2008R2 box the CREATOR OWNER is listed as having "Special" permissions. If I show what special permissions actually are it's the same as full permissions. Could it be this permissions level difference (even though there's no real difference) that's causing the 'ACL of shares are inconsistent,' warning? I can't find any other difference in the permission levels.
From 2008R2
From 2012R2