dfsutil error - unable to modify acl on dfs link

I'm trying to use dfsutil to setup the NTFS permissions on our DFS Links
using the dfsutil command:

dfsutil property acl grant \\contoso.com\Namespace1\Link1 Contoso\User1:F

However, I am recieving this error:

Could not execute the command successfully
SYSTEM ERROR - The request is not supported.

I get this error in both my production and test environments, using Domain
based namespaces on server 2008.

So, clearly I am doing something wrong but thusfar Google hasn't come up
with an answer for me, any ideas?...

Hello Cory,

I aam not sure if you can use dfsutil for acl permissions. You can do
permissions directly from folder property or here is a suggestion


CACLS DriveLetter:\path...\Link1 /E /G contoso\User1:F

Hope this helps

Isaac


"Cory" <> wrote in message
news:100C3714-A033-47AB-9DBF-...
> I'm trying to use dfsutil to setup the NTFS permissions on our DFS Links
> using the dfsutil command:
>
> dfsutil property acl grant \\contoso.com\Namespace1\Link1 Contoso\User1:F
>
> However, I am recieving this error:
>
> Could not execute the command successfully
> SYSTEM ERROR - The request is not supported.
>
> I get this error in both my production and test environments, using Domain
> based namespaces on server 2008.
>
> So, clearly I am doing something wrong but thusfar Google hasn't come up
> with an answer for me, any ideas?...

Hi Isaac,

Thanks for your reply.

I am getting the information from:

http://technet.microsoft.com/en-us/l.../cc753479.aspx


It says:

After enabling access-based enumeration, set the appropriate security for
each DFS folder by modifying the Access Control Lists (ACLs) using the
following command:

dfsutil property ACL grant\\<namespace_root>\<folder><username>:<permis sion>


I can use calcs just fine but I guess the real problem is trying to
synchronize the ACL of these DFS Links across a large number of servers
(100+). I was hoping that, if I set the ACL using the dfsutil command, that
the information would somehow be stored in the DFS Metadata.

My current situation is that everytime I create a new DFS Link, I need to
modify that links ACL on each server hosting the namespace. Likewise, if I
create a new server to host the namespace, I need to modify the ACL for all
existing links...

I'm sure I could script this somehow but it seems to me that this should be
a built in feature...





"Isaac Oben [MCITP:EA, MCSE]" wrote:

> Hello Cory,
>
> I aam not sure if you can use dfsutil for acl permissions. You can do
> permissions directly from folder property or here is a suggestion
>
>
> CACLS DriveLetter:\path...\Link1 /E /G contoso\User1:F
>
> Hope this helps
>
> Isaac
>
>
> "Cory" <> wrote in message
> news:100C3714-A033-47AB-9DBF-...
> > I'm trying to use dfsutil to setup the NTFS permissions on our DFS Links
> > using the dfsutil command:
> >
> > dfsutil property acl grant \\contoso.com\Namespace1\Link1 Contoso\User1:F
> >
> > However, I am recieving this error:
> >
> > Could not execute the command successfully
> > SYSTEM ERROR - The request is not supported.
> >
> > I get this error in both my production and test environments, using Domain
> > based namespaces on server 2008.
> >
> > So, clearly I am doing something wrong but thusfar Google hasn't come up
> > with an answer for me, any ideas?...
>
>
>

Hi,

Can you verify the namespace type? The ACL can be applied only to windows
2008 mode namespace. You can check the namespace type by following these steps
1. Open DFS management GUI
2. Add the namespace to display
3. Right click on the namespace and go to "Properties"
4. Verify if the Type: is Domain (Windows Server 2008 mode)

Thanks
Ganesh

"Cory" wrote:

> I'm trying to use dfsutil to setup the NTFS permissions on our DFS Links
> using the dfsutil command:
>
> dfsutil property acl grant \\contoso.com\Namespace1\Link1 Contoso\User1:F
>
> However, I am recieving this error:
>
> Could not execute the command successfully
> SYSTEM ERROR - The request is not supported.
>
> I get this error in both my production and test environments, using Domain
> based namespaces on server 2008.
>
> So, clearly I am doing something wrong but thusfar Google hasn't come up
> with an answer for me, any ideas?...