Windows Vista Tips

Windows Vista Tips > Newsgroups > Windows Server > File Systems > dfs over vpn

Reply
 
 
RW
Guest
Posts: n/a

 
      09-15-2009
I have setup 2 x 2008 files server and DFS name space, each server is in its
own phisical loction connected site-to-site vpn, replication works as
expected problem we are facing is that some people have problem with
accessing shared drives over vpn connection when connecting with vpn client
from home. locally on both sites all works. What is interseting those who do
have this problem can access \\domain\netlogon but cannot access
\\domain\namespace they can in second case path not found and because of that
any share in format \\domain\namespace\share cannot be map
any idea? there is nothing unique about those user AD profiles, laptops are
built base on same image
 
Reply With Quote
 
 
 
 
RW
Guest
Posts: n/a

 
      09-17-2009
ok so now I have experiance this myself where I used never had problem with
this, when I try to access shares at \\domain\share I get this error message:
"<drive>:\ is not accessible. Configuration Information could not be read
from the domain controller, either because the machine is unavailable, or
access has been denied"

this message is totally missleading because neither one is true, DCs are
avaliable and I have access to them at the same time I cannot access shared
drives on dfs.

access to is set exactly the same on all shares and roots for all files
servers in DFS name space in addition I'm domain admin so this cannot be
that, and I can access it no problem while in the office.

what I found is that if I do "net stop dfs" & "net start dfs" on dfs file
server I should be connected to no problem I get access with out even
restarting PC or reopening windows explorer. What I have to mention is also
that at the time this happens DFS namespace service is still running, no
hangs, crashes, not a single indication in event log that there is a problem
with service.... and if I connect remote desktop to workstation located in
LAN and try to access same share drive I have no problem accessing it without
restarting dfs service. So what ever this stop/start dfs does it is allowing
vpn client to connect to shares. WHY?!



"RW" wrote:

> I have setup 2 x 2008 files server and DFS name space, each server is in its
> own phisical loction connected site-to-site vpn, replication works as
> expected problem we are facing is that some people have problem with
> accessing shared drives over vpn connection when connecting with vpn client
> from home. locally on both sites all works. What is interseting those who do
> have this problem can access \\domain\netlogon but cannot access
> \\domain\namespace they can in second case path not found and because of that
> any share in format \\domain\namespace\share cannot be map
> any idea? there is nothing unique about those user AD profiles, laptops are
> built base on same image

 
Reply With Quote
 
ciscokid03
Guest
Posts: n/a

 
      10-22-2009


"RW" wrote:

> ok so now I have experiance this myself where I used never had problem with
> this, when I try to access shares at \\domain\share I get this error message:
> "<drive>:\ is not accessible. Configuration Information could not be read
> from the domain controller, either because the machine is unavailable, or
> access has been denied"
>
> this message is totally missleading because neither one is true, DCs are
> avaliable and I have access to them at the same time I cannot access shared
> drives on dfs.
>
> access to is set exactly the same on all shares and roots for all files
> servers in DFS name space in addition I'm domain admin so this cannot be
> that, and I can access it no problem while in the office.
>
> what I found is that if I do "net stop dfs" & "net start dfs" on dfs file
> server I should be connected to no problem I get access with out even
> restarting PC or reopening windows explorer. What I have to mention is also
> that at the time this happens DFS namespace service is still running, no
> hangs, crashes, not a single indication in event log that there is a problem
> with service.... and if I connect remote desktop to workstation located in
> LAN and try to access same share drive I have no problem accessing it without
> restarting dfs service. So what ever this stop/start dfs does it is allowing
> vpn client to connect to shares. WHY?!
>
>
>
> "RW" wrote:
>
> > I have setup 2 x 2008 files server and DFS name space, each server is in its
> > own phisical loction connected site-to-site vpn, replication works as
> > expected problem we are facing is that some people have problem with
> > accessing shared drives over vpn connection when connecting with vpn client
> > from home. locally on both sites all works. What is interseting those who do
> > have this problem can access \\domain\netlogon but cannot access
> > \\domain\namespace they can in second case path not found and because of that
> > any share in format \\domain\namespace\share cannot be map
> > any idea? there is nothing unique about those user AD profiles, laptops are
> > built base on same image

 
Reply With Quote
 
ciscokid03
Guest
Posts: n/a

 
      10-22-2009
ok...i hear you...i have the same problem. however, i think my problem has
to do with DNS. specifically, my domain name is technical.com
(internal)...when my vpn users try to resolve the dfs root by that name they
actually end up resolving a public technical.com domain that obviously is not
our network...confusing?!

i think i can resolve my issue if i can tell my vpn clients to never try to
resolve dns names OUTSIDE of our internal dns servers...any way to do that.

wondering if you have the same case scenario...

"RW" wrote:

> ok so now I have experiance this myself where I used never had problem with
> this, when I try to access shares at \\domain\share I get this error message:
> "<drive>:\ is not accessible. Configuration Information could not be read
> from the domain controller, either because the machine is unavailable, or
> access has been denied"
>
> this message is totally missleading because neither one is true, DCs are
> avaliable and I have access to them at the same time I cannot access shared
> drives on dfs.
>
> access to is set exactly the same on all shares and roots for all files
> servers in DFS name space in addition I'm domain admin so this cannot be
> that, and I can access it no problem while in the office.
>
> what I found is that if I do "net stop dfs" & "net start dfs" on dfs file
> server I should be connected to no problem I get access with out even
> restarting PC or reopening windows explorer. What I have to mention is also
> that at the time this happens DFS namespace service is still running, no
> hangs, crashes, not a single indication in event log that there is a problem
> with service.... and if I connect remote desktop to workstation located in
> LAN and try to access same share drive I have no problem accessing it without
> restarting dfs service. So what ever this stop/start dfs does it is allowing
> vpn client to connect to shares. WHY?!
>
>
>
> "RW" wrote:
>
> > I have setup 2 x 2008 files server and DFS name space, each server is in its
> > own phisical loction connected site-to-site vpn, replication works as
> > expected problem we are facing is that some people have problem with
> > accessing shared drives over vpn connection when connecting with vpn client
> > from home. locally on both sites all works. What is interseting those who do
> > have this problem can access \\domain\netlogon but cannot access
> > \\domain\namespace they can in second case path not found and because of that
> > any share in format \\domain\namespace\share cannot be map
> > any idea? there is nothing unique about those user AD profiles, laptops are
> > built base on same image

 
Reply With Quote
 
DaveMills
Guest
Posts: n/a

 
      10-23-2009
On Thu, 22 Oct 2009 12:54:02 -0700, ciscokid03
<> wrote:

>ok...i hear you...i have the same problem. however, i think my problem has
>to do with DNS. specifically, my domain name is technical.com
>(internal)...when my vpn users try to resolve the dfs root by that name they
>actually end up resolving a public technical.com domain that obviously is not
>our network...confusing?!


This would cause you much bigger issues since no internal server names would
resolve either so that could not connect to \\fileserver\uncpath either.

If your issue is just not being able to resolve the DNS root then are the VPN
client computers members of the domain. If not then they cannot know about the
DCs needed to find the DFS server supporting the domain based DFS root. They
could however use \\DFSServer\DFSRoot.

Normally VPN clients use the internal DNS servers when connected but this does
not always happen. I have yet to work out why some computers (XP) get this wrong
though.



>
>i think i can resolve my issue if i can tell my vpn clients to never try to
>resolve dns names OUTSIDE of our internal dns servers...any way to do that.
>
>wondering if you have the same case scenario...
>
>"RW" wrote:
>
>> ok so now I have experiance this myself where I used never had problem with
>> this, when I try to access shares at \\domain\share I get this error message:
>> "<drive>:\ is not accessible. Configuration Information could not be read
>> from the domain controller, either because the machine is unavailable, or
>> access has been denied"
>>
>> this message is totally missleading because neither one is true, DCs are
>> avaliable and I have access to them at the same time I cannot access shared
>> drives on dfs.
>>
>> access to is set exactly the same on all shares and roots for all files
>> servers in DFS name space in addition I'm domain admin so this cannot be
>> that, and I can access it no problem while in the office.
>>
>> what I found is that if I do "net stop dfs" & "net start dfs" on dfs file
>> server I should be connected to no problem I get access with out even
>> restarting PC or reopening windows explorer. What I have to mention is also
>> that at the time this happens DFS namespace service is still running, no
>> hangs, crashes, not a single indication in event log that there is a problem
>> with service.... and if I connect remote desktop to workstation located in
>> LAN and try to access same share drive I have no problem accessing it without
>> restarting dfs service. So what ever this stop/start dfs does it is allowing
>> vpn client to connect to shares. WHY?!
>>
>>
>>
>> "RW" wrote:
>>
>> > I have setup 2 x 2008 files server and DFS name space, each server is in its
>> > own phisical loction connected site-to-site vpn, replication works as
>> > expected problem we are facing is that some people have problem with
>> > accessing shared drives over vpn connection when connecting with vpn client
>> > from home. locally on both sites all works. What is interseting those who do
>> > have this problem can access \\domain\netlogon but cannot access
>> > \\domain\namespace they can in second case path not found and because of that
>> > any share in format \\domain\namespace\share cannot be map
>> > any idea? there is nothing unique about those user AD profiles, laptops are
>> > built base on same image

--
Dave Mills
There are 10 types of people, those that understand binary and those that don't.
 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off




1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59