HIJACK! I'm only jumping in because the problem we have is similar to John's problem. There are enough differences I did not reply with a "something similar seen...". Now that your bring it up...
We have a network which underwent a consolidation project. That is, old network in Illinois and old network in New York. Create new network, then move both networks into the new one. The connection is through a private WAN; paired T1 lines with Juniper J2320 service routers at each end. Network is Windows2003 SP2 "native" Active Directory, and all workstations are WinXP Pro SP3. (Same issue on the few Win 7 machines we have here as well.) I (Illinois) had been getting to the departmental share (DFS) by the non-DFS UNC/FQDN (not knowing any better), that is: \\filer.aspca.local\share\IT\Dept I heard I help desk agent say he was denied permissions to the department folder. Turns out he was "doing it correctly" by using the DFS name: \\aspca.local\NYC\share\IT\Dept When I tried it using the DFS name, I too got the same "Access is denied" message John (and our help desk agent) gets. I had the help desk agent use the non-DFS path, and he got in. Word is, all NYC folks have no problem at all accessing shares on the NYC filer via the DFS path. Those in IL get denied unless they use the non-DFS path. Any clues (WAN router? DFS settings? Wearing brown socks?) would be apprciated. Thanks! -- Richard D. McClary Jr Infrastructure Architect, Information Technology Group ASPCA® 1717 S. Philo Rd, Ste 36 Urbana, IL 61802 [email protected] www.aspca.org "Christopher Bodnar" <[email protected]> 06/06/2011 12:49 PM Please respond to "NT System Admin Issues" <[email protected]> To "NT System Admin Issues" <[email protected]> Press this button if the "To" is a fax number. Enter in the fax number like 123-456-7890. cc Subject RE: DFS Only Works with "Pre-Windows 2000" Domain Name On a "Bad" machine, does a non-DFS path UNC using a FQDN work? For example: \\server1.acme.com\share1 Chris Bodnar, MCSE, MCITP Technical Support III Distributed Systems Service Delivery - Intel Services Guardian Life Insurance Company of America Email: [email protected] Phone: 610-807-6459 Fax: 610-807-6003 From: John Hornbuckle <[email protected]> To: "NT System Admin Issues" <[email protected]> Date: 06/06/2011 01:41 PM Subject: RE: DFS Only Works with "Pre-Windows 2000" Domain Name Good suggestion. I just tried, and both the long short domain names resolve to the same IP address. On a couple of machines, unjoining from and then rejoining to the domain cleared up the issue. But we have a handful left that that isn?t working for. John From: Andrew S. Baker [mailto:[email protected]] Sent: Monday, June 06, 2011 12:39 PM To: NT System Admin Issues Subject: Re: DFS Only Works with "Pre-Windows 2000" Domain Name Compare your DNS resolution between the good and bad machines... ASB (Professional Bio) Harnessing the Advantages of Technology for the SMB market... On Mon, Jun 6, 2011 at 12:24 PM, John Hornbuckle < [email protected]> wrote: I?ve got a handful of Win7 clients that are having trouble with DFS. When I say a handful, I mean half a dozen out of several hundred (seemingly, but apparently not) identical client machines. All the rest work fine. When you try to access DFS from the bad machines, browsing to \\our.domain.name\our.dfs.path, you get ?Access is denied? even when logged in as a user with full permission to access everything. However, DFS content can be accessed just fine from these machines if you use the shorter ?Pre-Windows 2000? domain name (e.g., \\domain\our.dfs.path). The problem is that our AD GPOs all use the long domain name, so software deployment fails on these machines. The issue is machine-specific, not user-specific. Any user who logs into the bad machines has the problem. The same user can log into a good machine and access DFS with no trouble. I?m stumped. Anyone seen this before? John Hornbuckle MIS Department Taylor County School District www.taylor.k12.fl.us ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ----------------------------------------- This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
