How does share/ntfs permission affect on the DFRS ?

Discussion in 'File Systems' started by IT Staff, Jul 16, 2009.

  1. IT Staff

    IT Staff Guest

    WINDOWS 2003 R2 32 BIT

    \\server1\shared1 - overall permission is users1 can read
    \\server2\shared2 - overall permission is users2 can write

    folder targets below:
    (\\server2\shared2 )

    Both users1 and users2 see the same set of folders displayed. Say server2 is
    offline. When users2 see files in server1 target via the
    \\domain_namespace\alldoc, does the ORIGINAL permission applies ?
    IT Staff, Jul 16, 2009
    1. Advertisements

  2. IT Staff

    DaveMills Guest

    When a client access a DFS share the target folder is retrieved (it could be any
    target if there are more than one). The client the access the share using the
    resolved UNC name. The permissions are the same as those that would apply if the
    user went straight to the UNC name without using the DFS path.

    The configuration you have described is a disaster. Neither user will get a
    consistent result. Furthermore there is an assumption that the two folders 1 and
    2 are going to be identical.

    There is a document "How DFS works" on the MS DFS site, read it.
    DaveMills, Jul 17, 2009
    1. Advertisements

  3. IT Staff

    IT Staff Guest

    I thought when a client access DFS share, it should point to their local
    site server.

    How shld i configure the permissions then ?
    IT Staff, Jul 18, 2009
  4. IT Staff

    DaveMills Guest

    The server that is chosen is dependant upon the link cost (as for AD sites and
    services) and the properties you set on the links in the DFS console. Again so
    "How DFS Works"

    It is not a technically difficult read and you will be surprised at how simple
    the referral system is. It explains the role of the DCs, the DFS Servers and the
    DaveMills, Jul 18, 2009
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.