Unable to access DFS path

I am getting an unpredictable results when attempting to connect to a DFS
directory. I also have intermittent issue where DFS root cannot be mapped.
Help needed

Problem Description:
Intermittently unable to access or map to DFS root
e.g. \\domain\dfs
Cannot access DFS root from Start > Run >

Error message:
You might not have permission to use this network resource. Contact the
administrator of this server to find out if you have access permissions.
or
The file does not have a program associated with its performing action

When performing a mapping, it keeps prompting for password which is
definitely valid.


I need the unc name to work reliably becasue there is going to be an app on
the W2K3 box that needs to go to this path to grab a file on a time sensitive
basis. Would be great if someone can share why some clients have this issue
where some don't.

Have done extensive research and followin gare some further information

Following are some action I have taken for your further recommendation.
1. Compared the IP configuration between 2 machines, (Can access DFS root
versus cannot access)
a. DNS settings, suffixes are the same
b. Change IP address to the same subnet
c. Repair Network card and disable Windows firewall

2. Reset AD password and restart machine a few times using both CTRL ALT DEL
method or from AD tool

3. Disable any Anti vrius programs

4. Run Set L command to determine authentication domain controller
a. Clients are authenticated either Domain01, Domain02 machine
b. Restart PC and logon again, each time it may be authenticated by
different Domain controller (01 or 02), but no specific trend was detected
for PCs without
None of above works

Then restarted machine many times and for once , the DFS root is accessible
with no changes to any settings. The DC authenticating the machine is the
same as the earlier one which forbidden access to DFS root.

Continue to restart machine, trying to replicate the error and problem came
back intermittently without any specific trend.

Questions:
1. We had about 7 replica servers with 14 folders with targets, and we have
setup referral is base on lowest cost, how does a machine knows which DFS
servers to connect when performing a \\domain\dfs command?

2. I tried running the DFS tool > Check Status on 1 of the DFS server. Some
root target are listed as offline. From some desktop client I can still
access the path by using \\servername\dfs even it is shown as offline but
from the DFS server, using the open function I am getting failed to launch
explorer homed at \\servername\dfs
What does it mean?

3. Not sure if any settings related to DFS property. Following are the name
space setup from the DFS management screen > DFS Root Properties >

General - Nothing paticular
Referrals -
- Cache duration = 300
- Ordering Method = Lowest Cost
- Client Fail back to preferred targets = CHecked

Advanced >
Optimize for consistency is selected.
What does optimize polling means and shall it be scalability or consistency?

Appreciate some help from the tech net team

Hello Ronald,

On the server,can you access the dfs GUI from adminitrative menu?
On commnad prompt, do a net stop dfs & net start dfs and see if this reslove
the issue

Isaac

"Ronald" <> wrote in message
news:FAB1E301-E480-42EE-95D6-...
>
> I am getting an unpredictable results when attempting to connect to a DFS
> directory. I also have intermittent issue where DFS root cannot be mapped.
> Help needed
>
> Problem Description:
> Intermittently unable to access or map to DFS root
> e.g. \\domain\dfs
> Cannot access DFS root from Start > Run >
>
> Error message:
> You might not have permission to use this network resource. Contact the
> administrator of this server to find out if you have access permissions.
> or
> The file does not have a program associated with its performing action
>
> When performing a mapping, it keeps prompting for password which is
> definitely valid.
>
>
> I need the unc name to work reliably becasue there is going to be an app
> on
> the W2K3 box that needs to go to this path to grab a file on a time
> sensitive
> basis. Would be great if someone can share why some clients have this
> issue
> where some don't.
>
> Have done extensive research and followin gare some further information
>
> Following are some action I have taken for your further recommendation.
> 1. Compared the IP configuration between 2 machines, (Can access DFS root
> versus cannot access)
> a. DNS settings, suffixes are the same
> b. Change IP address to the same subnet
> c. Repair Network card and disable Windows firewall
>
> 2. Reset AD password and restart machine a few times using both CTRL ALT
> DEL
> method or from AD tool
>
> 3. Disable any Anti vrius programs
>
> 4. Run Set L command to determine authentication domain controller
> a. Clients are authenticated either Domain01, Domain02 machine
> b. Restart PC and logon again, each time it may be authenticated by
> different Domain controller (01 or 02), but no specific trend was detected
> for PCs without
> None of above works
>
> Then restarted machine many times and for once , the DFS root is
> accessible
> with no changes to any settings. The DC authenticating the machine is the
> same as the earlier one which forbidden access to DFS root.
>
> Continue to restart machine, trying to replicate the error and problem
> came
> back intermittently without any specific trend.
>
> Questions:
> 1. We had about 7 replica servers with 14 folders with targets, and we
> have
> setup referral is base on lowest cost, how does a machine knows which DFS
> servers to connect when performing a \\domain\dfs command?
>
> 2. I tried running the DFS tool > Check Status on 1 of the DFS server.
> Some
> root target are listed as offline. From some desktop client I can still
> access the path by using \\servername\dfs even it is shown as offline but
> from the DFS server, using the open function I am getting failed to launch
> explorer homed at \\servername\dfs
> What does it mean?
>
> 3. Not sure if any settings related to DFS property. Following are the
> name
> space setup from the DFS management screen > DFS Root Properties >
>
> General - Nothing paticular
> Referrals -
> - Cache duration = 300
> - Ordering Method = Lowest Cost
> - Client Fail back to preferred targets = CHecked
>
> Advanced >
> Optimize for consistency is selected.
> What does optimize polling means and shall it be scalability or
> consistency?
>
> Appreciate some help from the tech net team
>
>
>
>
>

Hi Isaac,
Thanks for speedy response.

I am granted access to net stop start the server that I manage which is
located in AU. Do I need to do that on all reservers or just the AU server?
Because I may not have the credential to perform that on other machine.

Rgds
Ron


"Isaac Oben [MCITP:EA, MCSE]" wrote:

> Hello Ronald,
>
> On the server,can you access the dfs GUI from adminitrative menu?
> On commnad prompt, do a net stop dfs & net start dfs and see if this reslove
> the issue
>
> Isaac
>
> "Ronald" <> wrote in message
> news:FAB1E301-E480-42EE-95D6-...
> >
> > I am getting an unpredictable results when attempting to connect to a DFS
> > directory. I also have intermittent issue where DFS root cannot be mapped.
> > Help needed
> >
> > Problem Description:
> > Intermittently unable to access or map to DFS root
> > e.g. \\domain\dfs
> > Cannot access DFS root from Start > Run >
> >
> > Error message:
> > You might not have permission to use this network resource. Contact the
> > administrator of this server to find out if you have access permissions.
> > or
> > The file does not have a program associated with its performing action
> >
> > When performing a mapping, it keeps prompting for password which is
> > definitely valid.
> >
> >
> > I need the unc name to work reliably becasue there is going to be an app
> > on
> > the W2K3 box that needs to go to this path to grab a file on a time
> > sensitive
> > basis. Would be great if someone can share why some clients have this
> > issue
> > where some don't.
> >
> > Have done extensive research and followin gare some further information
> >
> > Following are some action I have taken for your further recommendation.
> > 1. Compared the IP configuration between 2 machines, (Can access DFS root
> > versus cannot access)
> > a. DNS settings, suffixes are the same
> > b. Change IP address to the same subnet
> > c. Repair Network card and disable Windows firewall
> >
> > 2. Reset AD password and restart machine a few times using both CTRL ALT
> > DEL
> > method or from AD tool
> >
> > 3. Disable any Anti vrius programs
> >
> > 4. Run Set L command to determine authentication domain controller
> > a. Clients are authenticated either Domain01, Domain02 machine
> > b. Restart PC and logon again, each time it may be authenticated by
> > different Domain controller (01 or 02), but no specific trend was detected
> > for PCs without
> > None of above works
> >
> > Then restarted machine many times and for once , the DFS root is
> > accessible
> > with no changes to any settings. The DC authenticating the machine is the
> > same as the earlier one which forbidden access to DFS root.
> >
> > Continue to restart machine, trying to replicate the error and problem
> > came
> > back intermittently without any specific trend.
> >
> > Questions:
> > 1. We had about 7 replica servers with 14 folders with targets, and we
> > have
> > setup referral is base on lowest cost, how does a machine knows which DFS
> > servers to connect when performing a \\domain\dfs command?
> >
> > 2. I tried running the DFS tool > Check Status on 1 of the DFS server.
> > Some
> > root target are listed as offline. From some desktop client I can still
> > access the path by using \\servername\dfs even it is shown as offline but
> > from the DFS server, using the open function I am getting failed to launch
> > explorer homed at \\servername\dfs
> > What does it mean?
> >
> > 3. Not sure if any settings related to DFS property. Following are the
> > name
> > space setup from the DFS management screen > DFS Root Properties >
> >
> > General - Nothing paticular
> > Referrals -
> > - Cache duration = 300
> > - Ordering Method = Lowest Cost
> > - Client Fail back to preferred targets = CHecked
> >
> > Advanced >
> > Optimize for consistency is selected.
> > What does optimize polling means and shall it be scalability or
> > consistency?
> >
> > Appreciate some help from the tech net team
> >
> >
> >
> >
> >
>
>
>

Hello Ron,

Just on the dc with the dfs root that you are having problem with

Isaac

"Ronald" <> wrote in message
news:0B8BF7C7-725F-4A3B-AAD9-...
> Hi Isaac,
> Thanks for speedy response.
>
> I am granted access to net stop start the server that I manage which is
> located in AU. Do I need to do that on all reservers or just the AU
> server?
> Because I may not have the credential to perform that on other machine.
>
> Rgds
> Ron
>
>
> "Isaac Oben [MCITP:EA, MCSE]" wrote:
>
>> Hello Ronald,
>>
>> On the server,can you access the dfs GUI from adminitrative menu?
>> On commnad prompt, do a net stop dfs & net start dfs and see if this
>> reslove
>> the issue
>>
>> Isaac
>>
>> "Ronald" <> wrote in message
>> news:FAB1E301-E480-42EE-95D6-...
>> >
>> > I am getting an unpredictable results when attempting to connect to a
>> > DFS
>> > directory. I also have intermittent issue where DFS root cannot be
>> > mapped.
>> > Help needed
>> >
>> > Problem Description:
>> > Intermittently unable to access or map to DFS root
>> > e.g. \\domain\dfs
>> > Cannot access DFS root from Start > Run >
>> >
>> > Error message:
>> > You might not have permission to use this network resource. Contact the
>> > administrator of this server to find out if you have access
>> > permissions.
>> > or
>> > The file does not have a program associated with its performing action
>> >
>> > When performing a mapping, it keeps prompting for password which is
>> > definitely valid.
>> >
>> >
>> > I need the unc name to work reliably becasue there is going to be an
>> > app
>> > on
>> > the W2K3 box that needs to go to this path to grab a file on a time
>> > sensitive
>> > basis. Would be great if someone can share why some clients have this
>> > issue
>> > where some don't.
>> >
>> > Have done extensive research and followin gare some further information
>> >
>> > Following are some action I have taken for your further recommendation.
>> > 1. Compared the IP configuration between 2 machines, (Can access DFS
>> > root
>> > versus cannot access)
>> > a. DNS settings, suffixes are the same
>> > b. Change IP address to the same subnet
>> > c. Repair Network card and disable Windows firewall
>> >
>> > 2. Reset AD password and restart machine a few times using both CTRL
>> > ALT
>> > DEL
>> > method or from AD tool
>> >
>> > 3. Disable any Anti vrius programs
>> >
>> > 4. Run Set L command to determine authentication domain controller
>> > a. Clients are authenticated either Domain01, Domain02 machine
>> > b. Restart PC and logon again, each time it may be authenticated by
>> > different Domain controller (01 or 02), but no specific trend was
>> > detected
>> > for PCs without
>> > None of above works
>> >
>> > Then restarted machine many times and for once , the DFS root is
>> > accessible
>> > with no changes to any settings. The DC authenticating the machine is
>> > the
>> > same as the earlier one which forbidden access to DFS root.
>> >
>> > Continue to restart machine, trying to replicate the error and problem
>> > came
>> > back intermittently without any specific trend.
>> >
>> > Questions:
>> > 1. We had about 7 replica servers with 14 folders with targets, and we
>> > have
>> > setup referral is base on lowest cost, how does a machine knows which
>> > DFS
>> > servers to connect when performing a \\domain\dfs command?
>> >
>> > 2. I tried running the DFS tool > Check Status on 1 of the DFS server.
>> > Some
>> > root target are listed as offline. From some desktop client I can still
>> > access the path by using \\servername\dfs even it is shown as offline
>> > but
>> > from the DFS server, using the open function I am getting failed to
>> > launch
>> > explorer homed at \\servername\dfs
>> > What does it mean?
>> >
>> > 3. Not sure if any settings related to DFS property. Following are the
>> > name
>> > space setup from the DFS management screen > DFS Root Properties >
>> >
>> > General - Nothing paticular
>> > Referrals -
>> > - Cache duration = 300
>> > - Ordering Method = Lowest Cost
>> > - Client Fail back to preferred targets = CHecked
>> >
>> > Advanced >
>> > Optimize for consistency is selected.
>> > What does optimize polling means and shall it be scalability or
>> > consistency?
>> >
>> > Appreciate some help from the tech net team
>> >
>> >
>> >
>> >
>> >
>>
>>
>>

Check the NTFS permissions on all the DFS root folders by looking at
\\DFSServer\C$\DFSRoot (or wherever it is). If you have more than one DFS root
server it is quite possible that you have different permission on these folders.
When a client resolves a DFS path is will sometime use DFSServerA and sometimes
DFSServerB. If the permission are different it could result in access problems
intermittently.

On Sun, 15 Mar 2009 16:16:01 -0700, Ronald <>
wrote:

>
>I am getting an unpredictable results when attempting to connect to a DFS
>directory. I also have intermittent issue where DFS root cannot be mapped.
>Help needed
>
>Problem Description:
>Intermittently unable to access or map to DFS root
>e.g. \\domain\dfs
>Cannot access DFS root from Start > Run >
>
>Error message:
>You might not have permission to use this network resource. Contact the
>administrator of this server to find out if you have access permissions.
>or
>The file does not have a program associated with its performing action
>
>When performing a mapping, it keeps prompting for password which is
>definitely valid.
>
>
>I need the unc name to work reliably becasue there is going to be an app on
>the W2K3 box that needs to go to this path to grab a file on a time sensitive
>basis. Would be great if someone can share why some clients have this issue
>where some don't.
>
>Have done extensive research and followin gare some further information
>
>Following are some action I have taken for your further recommendation.
>1. Compared the IP configuration between 2 machines, (Can access DFS root
>versus cannot access)
>a. DNS settings, suffixes are the same
>b. Change IP address to the same subnet
>c. Repair Network card and disable Windows firewall
>
>2. Reset AD password and restart machine a few times using both CTRL ALT DEL
>method or from AD tool
>
>3. Disable any Anti vrius programs
>
>4. Run Set L command to determine authentication domain controller
>a. Clients are authenticated either Domain01, Domain02 machine
>b. Restart PC and logon again, each time it may be authenticated by
>different Domain controller (01 or 02), but no specific trend was detected
>for PCs without
>None of above works
>
>Then restarted machine many times and for once , the DFS root is accessible
>with no changes to any settings. The DC authenticating the machine is the
>same as the earlier one which forbidden access to DFS root.
>
>Continue to restart machine, trying to replicate the error and problem came
>back intermittently without any specific trend.
>
>Questions:
>1. We had about 7 replica servers with 14 folders with targets, and we have
>setup referral is base on lowest cost, how does a machine knows which DFS
>servers to connect when performing a \\domain\dfs command?
>
>2. I tried running the DFS tool > Check Status on 1 of the DFS server. Some
>root target are listed as offline. From some desktop client I can still
>access the path by using \\servername\dfs even it is shown as offline but
>from the DFS server, using the open function I am getting failed to launch
>explorer homed at \\servername\dfs
>What does it mean?
>
>3. Not sure if any settings related to DFS property. Following are the name
>space setup from the DFS management screen > DFS Root Properties >
>
>General - Nothing paticular
>Referrals -
>- Cache duration = 300
>- Ordering Method = Lowest Cost
>- Client Fail back to preferred targets = CHecked
>
>Advanced >
>Optimize for consistency is selected.
>What does optimize polling means and shall it be scalability or consistency?
>
>Appreciate some help from the tech net team
>
>
>
>
--
Dave Mills
There are 10 types of people, those that understand binary and those that don't.