File share problen in Windows 2012 cluster

Hi,
Please help.

Hi,
First, please disable all your firewall or AV soft then try again.
Second, please confirm the Windows Remote Management service has installed and started.
Check whether the Windows Remote Management service is installed and has started. To do this, follow these steps:
Do one of the following: ◦In Windows 8, press the Windows logo key+R to open the Run dialog box, type services.msc, and then press Enter.
◦In Windows 7 or Windows Vista, click Start, type services.msc in the Start search field, and then press Enter.
◦In Windows XP, click Start, click Run, type services.msc, and then press Enter.
2. In the Services window, double-click Windows Remote Management.
3. Set the startup type to Manual, and then click OK.
4. Right-click the service, and then click Start.
5. Let the service start.
Third, please confirm your DNS serer has configured correct.
Forth, run the command "winrm -quickconfig" - when you will execute this command, it will ask for creating the firewall execptions, say YES.
The related KB:
"WinRM client cannot process the request" error when you connect to Exchange Online through remote Windows PowerShell
http://support.microsoft.com/kb/2905339
Hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Similar Messages

Windows 7 SP1 client file lock on network share hosted ny WIndows 2012 Server

Hello
I have one strange problem after migration from Windows 2003 Server to Windows 2012 Server R2 Standard.
All migration tasks went well but two things do not work.
In Computer Management you have The Opened Files feature and if you open any file that is located on the network share hosted by Windows 2012 R2 form Windows 7 SP1 and then close it
it remains open in the Opened Files tab (even if you wait an hour). There is no problem with Windows XP SP3. The issue exist only with Windows 7.
The session view of sessions to the file server do not work. If I try to open it I get the message that the application is not responding.
Can someone help me with that ?
About the environment:
It is one server Domain migrated form 2003 to 2012R2.
The domain and forest level was raised to 2012 R2.
I have made clean install of Windows 2012 R2 and then migrated AD.
Best Regards
Sebastian Sala

Hi Sebastian,
>>There is no problem with Windows XP SP3. The issue exist only with Windows 7.
T>>he session view of sessions to the file server do not work. If I try to open it I get the message that the application is not responding.
Based on the description, please check event logs in Event Viewer to see if there were some related events logged. Besides, does this phenomenon happen all Windows 7 clients? We can try to restart the client to see if it helps.
Best regards,
Frank Shen
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Windows 2012 cluster, CLIUSR cannot be created, password does not meet security requirements

Trying to create a Windows 2012 cluster (Not R2). The cluster creation wizard goes through without problems. However, after a few minutes the cluster service dies with EventID 1556 and error code 2245 "The
password does not meet the password policy requirements. Check the minimum password length, password complexity and password history requirements." The error repeats every few minutes.
Looking at the cluster log, we find:
ERR Workitem(Sweeper::Sweep) callback threw exception: (2245)' because of '[CLI] Account Creation failure: 2245, 4294967295'
ERR [CORE] Shutting down cluster service because of unhandled exception in a worker thread
It appears it is trying to create the local CLIUSR account, but the self-generated password does not meet complexity... The local password policy is the default deployed with Windows 2012 -
No unusual password requirement (8 characters with built-in complexity requirement)
I saw Elden's description of CLIUSR in
https://social.technet.microsoft.com/Forums/en-US/95929983-a50c-42b3-a520-6a171e542948/win-server-2012-two-node-cluster-local-cliuser-issue?forum=winserverClustering - so I believe I understand what it is doing, but how can it not generate a password complex
enough? And I do not see any report of anyone having this issue, so I suspect a local configuration / issue.

Hi FrankJB,
Please verify that the Cluster Service account has the appropriate user rights on each node of the cluster. The Cluster Service account must be
in the local administrators group and should have the rights listed below. These rights are given to the Cluster Service account during the
configuration of the Cluster node. It is possible that a higher level policy is over-writing the local policy or that an upgrade from a previous
operating system does not add all of the required rights.
If you can confirm your current account meet the cluster create conditions, please disable all your firewall then run the cluster validation and
post the warning and error information.
The related KB:
How to troubleshoot the Cluster service account when it modifies computer objects
https://support.microsoft.com/en-us/kb/307532?wa=wsignin1.0
Additional, please install the following hotfix.
Recommended hotfixes and updates for Windows Server 2012-based failover clusters
http://support.microsoft.com/kb/2784261/EN-US
I’m glad to be of help to you!
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

File Share TC with Windows over internet

Am looking to give Windows users access to info stored on my TC. They will need to access it remotely and are struggling to use the standard afp (which is currently active and accessible by other mac users).
What are the TC settings I should use?
Is there a Windows (Vista) afp client?
Thanks,
Karel

You can try SMB, but this usually isn't necessary if AirPort Utility for Windows is installed on those PCs.
Edit.
Sorry, just noticed you said remotely. I don't know if the above would work, then.
Message was edited by: -(.)^(.)-

File Share Cluster Transfer Issues - Windows 2012 R2 - Two Nodes

Hi There,
I am having some issues in creating a simple file share on a 2 node cluster.
Each "File Server" is Windows 2012 R2 Standard.
Each server has 4 Nic Ports, 2 are configured as a Control Team and the other 2 as a Media Team. The media team is specifically for any storage and file sharing traffic, the control team is purely for access to the server via RDC.
The storage is from a NetApp SAN connected via SAS cables to the 2 "File Servers" and transfer speeds to and from that are good (1GB/s)
I have looked at different step-by-steps to get this working, they all are similar to: https://robertsmit.wordpress.com/2012/06/26/clustering-fileserver-on-windows-2012-step-by-step/
The share permissions are configured with Everyone with Full Control.
Once the file shares are all set up, I can browse the shares and any current folders and files.
I can download any files that exist on these shares...
The issue is when I try to put a file on the share from a "client" server (win 2008 r2) or even from the other node (connecting to the file share location as I would on another machine)
I just get the copying dialogue attached, which sits there for about 3-4 minutes and then just finishes with a Network Error.
This only occurs during an upload of a file to the share.
All servers can ping each other, there are no cluster event errors..
Can anyone help, I need to get this fixed ASAP.
If you need more info then please ask.
Thanks,
-Tim

Hi Tim,
Did you run the cluster validation before you create this cluster? Please disable any firewall or AV soft and install the recommended hotfixes and updates for Windows Server
2012 R2-based failover clusters update to narrow down the issue first.
Recommended hotfixes and updates for Windows Server 2012 R2-based failover clusters
http://support.microsoft.com/kb/2920151
I’m glad to be of help to you!
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

File Share Witness Resouces Errors in a SQL 2012 Alwayson Availability Group Environment

Hi I am getting the following error in WFC Manager and in my system event log:
Event ID1564:
File share witness resource 'File Share Witness' failed to arbitrate for the file share '\\SQL2012ClusterWitnessPath'. Please ensure that file share '\\SQL2012ClusterWitnessPath' exists and is accessible by the cluster.
Event ID 1069:
Cluster resource 'File Share Witness' of type 'File Share Witness' in clustered role 'Cluster Group' failed.
Based on the failure policies for the resource and role, the cluster service may try to bring the resource online on this node or move the group to another node of the cluster and then restart it. Check the resource and group state using Failover Cluster
Manager or the Get-ClusterResource Windows PowerShell cmdlet.
Event ID 1205:
The Cluster service failed to bring clustered service or application 'Cluster Group' completely online or offline. One or more resources may be in a failed state. This may impact the availability of the clustered service or application.
These errors showed up every hour on the hour and then suddenly stopped. I tried looking at the cluster.log file but there wasn't anything recorded there. The file share witness shows to be online and my AG did not fail over to another node.
The cluster has read and write permissions to the share. I did not find any error messages about the witness share on the remote server.
I am wondering what caused these series of events to occur?
Thanks.

Hi Kevin Ni,
Thanks for your reply. I have ran the validation test and I have 2 warnings. My environment has 2 nodes and 2 AG's with each node a failover for each AG. So that each node hosts and primary and a secondary of an AG. Both nodes are
on the same subnet. Here are the errors.
- Validate Multiple Subnet Properties
The RegisterAllProvidersIP property causes the network name to register all dependent IP addresses whether they are online or offline. Some DNS servers and clients in multi-subnet (multi-site) environments can identify the IP address that is in their subnet
and attempt connections only to that address. In such environments, it is usually best to set RegistrerAllProvidersIP to 1. This reduces DNS replication delays.
The RegisterAllProvidersIP property for network name 'Name: Listener1' is set to 1. For the current cluster configuration this value should be set to 0.
The RegisterAllProvidersIP property causes the network name to register all dependent IP addresses whether they are online or offline. Some DNS servers and clients in multi-subnet (multi-site) environments can identify the IP address that is in their subnet
and attempt connections only to that address. In such environments, it is usually best to set RegistrerAllProvidersIP to 1. This reduces DNS replication delays.
The RegisterAllProvidersIP property for network name 'Name: Listener2' is set to 1. For the current cluster configuration this value should be set to 0.
- Validate Network Communication
Node ONE.domain.com is reachable from Node TWO.domain.com by multiple communication paths, but each path includes network interface TWO.domain.com - TWO_NIC_Team. This network interface may be a single point of failure for communication within the
cluster. Please verify that this network interface
is highly available or consider adding additional networks or network interfaces to the cluster.
Node TWO.domain.com is reachable from Node ONE.domain.com by multiple communication paths, but each path includes network interface TWO.domain.com - TWO_NIC_Team. This network interface may be a single point of failure for communication within the
cluster. Please verify that this network interface
is highly available or consider adding additional networks or network interfaces to the cluster.
I have node TWO setup with NIC Teaming. Node ONE is also setup with NIC teaming but it also has a second IP address but the second IP address cannot communicate with node TWO.

Error while adding file share for File Server role

I'm getting this error when trying to add a file share on a Server 2012 R2 failover cluster:
"Unable to retrieve all data needed to run the wizard. Error details: Cannot retrieve information from server. Error occurred during enumeration of SMB shares: WinRM cannot complete the operation. Verify that the specified computer name is valid, that
the computer is accessible over the network, and that a firewall exception for the WinRM service is enabled and allows access from this computer. By default, the WinRM firewall exception for public profiles limits access to remote comptuers within the same
local subnet."
Despite the message, I can still create the share and it seems to work, but I'm concerned there may be an issue and I'd like to resolve it before putting the service into production. TIA!

Hi,
Your error often caused by the WinRM can’t communication to the others node, please confirm all the node “Windows Remote Management” service is running or try to disable your
firewall and AV soft then monitor it again.
More information:
WinRM (Windows Remote Management) Troubleshooting
http://blogs.technet.com/b/jonjor/archive/2009/01/09/winrm-windows-remote-management-troubleshooting.aspx
WINRM
http://blogs.msdn.com/b/powershell/archive/2007/10/30/winrm-exe.aspx
Installation and Configuration for Windows Remote Management
http://msdn.microsoft.com/en-us/library/aa384372(v=vs.85).aspx
Hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

File share with Vista

I have a mac and I'm trying to connect to a file share on a windows vista machine. I can find and connect to the PC but when I try to copy files to the share i get these three messages. http://i6.photobucket.com/albums/y244/pyroman2007/errors.jpg
I have all the appropriate privileges on the PC and I can read files that are being shared. I just can't write to the share.

Hey tell me who provides you with the Internet Service Provider according to that i will give you the steps.If its a Cable or DSL connection i will give you the steps.

0x80070035 Across WAN between Windows 2012/8 Computers

Head scratcher on this one. Network Shares/Servers running Windows 2012 are unaccessible across the WAN but only When it is a Windows 2012 or 8 client. Here is a basic view of what is happening;
If User in NoCal tried to access information from a Windows 8.1 machine to any share on a Windows 2012 R2 Server located in SoCal, you get
"Windows cannot access \\SoCal2012" and the error is
0x80070035. If the same user tries to get information from a SoCal Windows 2008 R2 server, success. If that same NoCal user tries from a Windows 7 computer, to either a 2012 or 2008 server in the SoCal office, Success.
Same issue going from SoCal to NoCal with same outcomes using Windows 8 or 7 and accessing Windows 2008 or 2012 servers located in NoCal. This is also true when logged into a Windows 2012 Server and trying to access a Windows 2012 server across the WAN.
Locally there is no issue. Windows 8 or 7 can access the local servers with no issues.
Some of the things I've looked at was the NetBIOS over TCP/IP, Firewall settings for Domain, Private and Public, RequireSecuritySignature on SMB. Looked into Audit Policy for removable storage and Object access. Now I am posting here. It seemed to be working
for a minute lastnight before I left work, and the issue is back this morning.
Any help solving this riddle would be appreciated.

Hi,
Above all I would like to know if it is a DNS resolution related issue.
As you are accessing server via NetBIOS name, please make sure that DNS suffix is displayed correctly in Advanced TCP/IP settings.
Also you can try an nslookup, or accessing the server with FQDN (\\server.domain.com) to see the result.
SMB negotiation could also cause issue. If this is the case you will need to capture a package with Network Monitor to get the connection process. Find the package with error and let us know the exact information.
Detailed information could be found:
Microsoft SMB Protocol Packet Exchange Scenario
http://msdn.microsoft.com/en-us/library/windows/desktop/aa365236(v=vs.85).aspx
And this is the article for using Network Monitor to capture network traffic. You can upload your package to an online storage such as OneDrive - Please note the package could be accessed by anyone so it is fine if you do not willing to share it online.
How to use Network Monitor to capture network traffic
http://support.microsoft.com/kb/812953/en-us
If you have any feedback on our support, please send to [email protected]

Parent Disk - File Share - VM Placement

Hi, I did some testing with Cluster and File Share (with Parent Disk). I figured that the Parent Disk will be placed on the File Share a not on the Cluster Shared Volume.
I'm now trying to do it with hosts who are not clustered.
I went to the Fabic in VMM and added a provider (my file share server). I then created a Share on this server using the VMM Wizard.
I added the File Share to my host in the Properties/Storage and double-checked the Placement Paths.
In the "Default virtual machine paths to be used during virtual machine placement," I have all my local storage (e:\vms, f:\vms, g:\vms, h:\vms, ...)
In the "Default parent disk paths to be used for the virtual machines," I have my \\server.domain\share
When I create a new VM from a Template with "Differencing disk," the Wizard is creating the VM on the \\server.domain\share instead then on a "placement path" from my local storage...
Furthermore, the parent VHD is being copied on the first "local" drive, E:\vms\...
1- How to set the path for the Parent disks... I want to force all parent disks to be on the file share.
2- How can I set so VMM never create VMs on the File Share! Only on the local paths?
Thanks!
Tommy

Hi Tommy,
FYI, differencing disks are not supported for Production environments, the only possible usage would be for a VDI setup.
http://technet.microsoft.com/en-us/library/cc720381(v=WS.10).aspx
I believe that you would need to change your "default virtual machine" paths to point towards the file-share
ps: Is your file server configured as SOFS for application data?
MCITP SA - MCP Active Directory - MCP Infrastructure - MCP Server Virtualization www.it101.eu

Cannot Add File Share to (any) File Server Role of a Cluster in Windows Server 2012

Cannot Add File Share to (any) File Server Role of a Cluster in Windows Server 2012...
Get this message in the Operational Log in "FileServices-ServerManager-EventProvider" section of MS-Windows Eventlogs:
Exception: Caught exception Microsoft.Management.Infrastructure.CimException: The xsi:type attribute (MSCluster_Property_Resource_Network_Name) does not identify an existing class.
   at Microsoft.Management.Infrastructure.Internal.Operations.CimSyncEnumeratorBase`1.MoveNext(Boolean discardResultsAndErrors)
   at Microsoft.Management.Infrastructure.Internal.Operations.CimSyncEnumeratorBase`1.MoveNext()
   at Microsoft.FileServer.Management.Plugin.Services.FSCimSession.PerformQuery(String cimNamespace, String queryString)
   at Microsoft.FileServer.Management.Plugin.Services.ClusterEnumerator.BuildNodes(ICimSession session, ClusterRole scopeType, String query, IDictionary`2 groupNameToTypeMap)
   at Microsoft.FileServer.Management.Plugin.Services.ClusterEnumerator.GetClusterClientAccessPointNames(ICimSession session, IDictionary`2 groupNameToTypeMap)
   at Microsoft.FileServer.Management.Plugin.Services.ClusterEnumerator.RetrieveClusterConnections(ComputerName serverName, ClusterMemberTypes memberTypeToQuery)
Thanks for help...(everything else works fine in other type of cluster roles).
Thomas.

This issue also happens in fresh Windows 2012R2 installations, not just upgrades from 2008R2!
I have the issue where I cannot modify any settings on SMB shares. Here is the stacktrace. It appears to be WMI related.
Error: ERROR: Task 'TEST.xxxxxxx.COM-ClusterStorage$-SmbShareUpdate-46bcabf6-1dd4-4a48-a525-5e5d374596c7' has failed: Microsoft.FileServer.Management.Plugin.FSACException: Error occurred while updating an SMB share: The requested operation is not supported.
---> Microsoft.Management.Infrastructure.CimException: The requested operation is not supported.
   at Microsoft.Management.Infrastructure.Internal.Operations.CimSyncEnumeratorBase`1.MoveNext()
   at System.Linq.Enumerable.SingleOrDefault[TSource](IEnumerable`1 source)
   at Microsoft.Management.Infrastructure.CimSession.ModifyInstance(String namespaceName, CimInstance instance, CimOperationOptions options)
   at Microsoft.FileServer.Management.Plugin.Services.FSCimSession.ModifyInstance(ICimInstance instance)
   at Microsoft.FileServer.Management.Plugin.Services.FSCimSession.ModifyInstance(ICimInstance instance, IEnumerable`1 propertiesWithKeys)
   at Microsoft.FileServer.Management.Plugin.Providers.WmiUpdateTaskBase.DoUpdateInstance(ICimSession session, ICimInstance instance)
   at Microsoft.FileServer.Management.Plugin.Providers.WmiUpdateTaskBase.DoWork(Object sender, DoWorkEventArgs e)
   --- End of inner exception stack trace ---
   at Microsoft.FileServer.Management.Plugin.Providers.WmiUpdateTaskBase.DoWork(Object sender, DoWorkEventArgs e)
   at System.ComponentModel.BackgroundWorker.WorkerThreadStart(Object argument)

Windows Failover Cluster (Errors retrieving file shares)

I'm having an issue with Windows Failover Cluster with a Windows Server 2012 R2 machine. I have two cluster nodes (nodeA and nodeB). My issue is that when nodeA is the owner node, and I open failover cluster manager <clusterName> >>
roles >> <fileserver role> >> shares tab it will hang and say that it is loading, but this will occur infinitely. Although when I go to nodeB (not the owner node) and I go to shares it will show me all of the shares that I have. Next when
I go to <clusterName> >> Nodes >> click on Roles tab the information says "There were errors retrieving file shares."
Now when I switch the nobeB to the owner node, I cannot view the shares on that machine but can now view them on nodeA.
We alse have a test network where I have recreated the machines, environment and the failover cluster to as close as the production network as I can except everything works great in the test network

For anybody searching on this later...
I was getting "There were errors retrieving file shares" no matter which node of my cluster
owned the fileshare service. Turns out my problem was that my servers don't have internet access and I had set a system proxy. The fix described in the link below was to exclude the local domain from the proxy.
http://blogs.technet.com/b/askcore/archive/2012/12/03/cluster-aware-updating-cau-interaction-with-proxy-servers.aspx

New files and folders on a Linux client mounting a Windows 2012 Server for NFS share do not inherit Owner and Group when SetGID bit set

Problem statement
When I mount a Windows NFS service file share using UUUA and set the Owner and Group, and set the SetGID bit on the parent folder in a hierarchy. New Files and folders inside and underneath the parent folder do not inherit the Owner and Group permissions
of the parent.
I am given to understand from this Microsoft KnowledgeBase article (http://support.microsoft.com/kb/951716/en-gb) the problem is due to the Windows implmentation of NFS Services not supporting the Solaris SystemV or BSD grpid "Semantics"
However the article says the same functionality can acheived by using ACE Inheritance in conjunction with changing the Registry setting for "KeepInheritance" to enable Inheritance propagation of the Permissions by the Windows NFS Services.
1. The Precise location of the "KeepInheritance" DWORD key appears to have "moved" in Windows Server 2012 from a Services path to a Software path, is this documented somewhere? And after enabling it, (or creating it in the previous
location) the feature seems non-functional. Is there a method to file a Bug with Microsoft for this Feature?
2. All of the references on demonstrating how to set an ACE to achieve the same result "currently" either lead to broken links on Microsoft technical websites, or are not explicit they are vague or circumreferential. There are no plain Examples.
Can an Example be provided?
3. Is UUUA compatible with the method of setting ACE to acheive this result, or must the Linux client mount be "Mapped" using an Authentication source. And could that be with the new Flat File passwd and group files in c:\windows\system32\drivers\etc
and is there an Example available.
Scenario:
Windows Server 2012 Standard
File Server (Role)
+- Server for NFS (Role) << -- installed
General --
Folder path: F:\Shares\raid-6-array
Remote path: fs4:/raid-6-array
Protocol: NFS
Authentication --
No server authentication
+- No server authentication (AUTH_SYS)
++- Enable unmapped user access
+++- Allow unmapped user access by UID/GID
Share Permissions --
Name: linux_nfs_client.host.edu
Permissions: Read/Write
Root Access: Allowed
Encoding: ANSI
NTFS Permissions --
Type: Allow
Principal: BUILTIN\Administrators
Access: Full Control
Applies to: This folder only
Type: Allow
Principal: NT AUTHORITY\SYSTEM
Access: Full Control
Applies to: This folder only
-- John Willis, Facebook: John-Willis, Skype: john.willis7416

I'm making some "major" progress on this problem.
1. Apparently the "semantics" issue to honor SGID or grpid in NFS on the server side or the client side has been debated for some time. It also existed as of 2009 between Solaris nfs server and Linux nfs clients. The Linux community defaulted to declaring
it a "Server" side issue to avoid "Race" conditions between simultaneous access users and the local file system daemons. The client would have to "check" for the SGID and reformulate its CREATE request to specify the Secondary group it would have to "notice"
by which time it could have changed on the server. SUN declined to fix it.. even though there were reports it did not behave the same between nfs3 vs nfs4 daemons.. which might be because nfs4 servers have local ACL or ACE entries to process.. and a new local/nfs
"inheritance" scheme to worry about honoring.. that could place it in conflict with remote access.. and push the responsibility "outwards" to the nfs client.. introducing a race condition, necessitating "locking" semantics.
This article covers that discovery and no resolution - http://thr3ads.net/zfs-discuss/2009/10/569334-CR6894234-improved-sgid-directory-compatibility-with-non-Solaris-NFS-clients
2. A much Older Microsoft Knowledge Based article had explicit examples of using Windows ACEs and Inheritance to "mitigate" the issue.. basically the nfs client "cannot" update an ACE to make it "Inheritable" [-but-] a Windows side Admin or Windows User
[-can-] update or promote an existing ACE to "Inheritable"
Here are the pertinent statements -
"In Windows Services for UNIX 2.3, you can use the KeepInheritance registry value to set inheritable ACEs and to make sure that these ACEs apply to newly created files and folders on NFS shares."
"Note About the Permissions That Are Set by NFS Clients
The KeepInheritance option only applies ACEs that have inheritance enabled. Any permissions that are set by an NFS client will
only apply to that file or folder, so the resulting ACEs created by an NFS client will
not have inheritance set."
"So
If you want a folder's permissions to be inherited to new subfolders and files, you must set its permissions from the Windows NFS server because the permissions that are set by NFS clients only apply to the folder itself."
http://support.microsoft.com/default.aspx?scid=kb;en-us;321049
3. I have set up a Windows 2008r2 NFS server and mounted it with a Redhat Enteprise Linux 5 release 10 x86_64 server [Oct 31, 2013] and so far this does appear to be the case.
4. In order to mount and then switch user to a non-root user to create subdirectories and files, I had to mount the NFS share (after enabling Anonymous AUTH_SYS mapping) this is not a good thing, but it was because I have been using UUUA - Unmapped Unix
User Access Mapping, which makes no attempt to "map" a Unix UID/GID set by the NFS client to a Windows User account.
To verify the Inheritance of additional ACEs on new subdirectories and files created by a non-root Unix user, on the Windows NFS server I used the right click properties, security tab context menu, then Advanced to list all the ACEs and looked at the far
Column reflecting if it applied to [This folder only, or This folder and Subdirectories, or This folder and subdirectories and files]
5. All new Subdirectories and files createdby the non-root user had a [Non-Inheritance] ACE created for them.
6. I turned a [Non-Inheritance] ACE into an [Inheritance] ACE by selecting it then clicking [Edit] and using the Drop down to select [This folder, subdirs and files] then I went back to the NFS client and created more subdirs and files. Then back to the
Windows NFS server and checked the new subdirs and folders and they did Inherit the Windows NFS server ACE! - However the UID/GID of the subdirs and folders remained unchanged, they did not reflect the new "Effective" ownership or group membership.
7. I "believe" because I was using UUUA and working "behind" the UID/GID presentation layer for the NFS client, it did not update that presentation layer. It might do that "if" I were using a Mapping mechanism and mapped UID/GID to Windows User SIDs and
Group SIDs. Windows 2008r2 no longer has a "simple" Mapping server, it does not accept flat text files and requires a Schema extension to Active Directory just to MAP a windows account to a UID/GID.. a lot of overhead. Windows Server 2012 accepts flat text
files like /etc/passwd and /etc/group to perform this function and is next on my list of things to see if that will update the UID/GID based on the Windows ACE entries. Since the Local ACE take precedence "over" Inherited ACEs there could be a problem. The
Inheritance appears to be intended [only] to retain Administrative rights over user created subdirs and files by adding an additional ACE at the time of creation.
8. I did verify from the NFS client side in Linux that "Even though" the UID/GID seem to reflect the local non-root user should not have the ability to traverse or create new files, the "phantom" NFS Server ACEs are in place and do permit the function..
reconciling the "view" with "reality" appears problematic, unless the User Mapping will update "effective" rights and ownership in the "view"
-- John Willis, Facebook: John-Willis, Skype: john.willis7416

Windows 2012 Failover Cluster - File server role (vCO)

Hi,
I wonder if anybody can shed some light on a query i have.
A windows 2012 failover cluster will be built in AD domain example.uk. Cluster File server roles will be created and will reside in this domain also.
We also have a requirement to run a cluster file server role in the child domain off secure.example.uk. Is this possible? or do the file server roles and related vCO's have to reside in the same domain as the cluster (CNO).
I know the CNO can be used to create the VCO but could a prestage a VCO in the child domain of secure.example.uk.
Mark

Hi Mark,
By default CNO will create
VCO automatically in default domain computer OU, we generally use the
KISS principle to place the CNO and VCO to the same OU, and as far as I know there no known design document indicate the VCO can be placed in different domain, therefore I suggest you place the CNO and V CO at same OU.
More information:
When Creating a New Resource or Role in Windows Server 2012 R2 Failover Cluster, the Network Name Fails to Come Online or Failed to Create Associated Computer Object in Domain
http://blogs.technet.com/b/askpfeplat/archive/2014/11/17/when-creating-a-new-resource-or-role-in-windows-server-2012-r2-failover-cluster-the-network-name-fails-to-come-online-or-failed-to-create-associated-computer-object-in-domain.aspx
CNO Blog Series: Increasing Awareness around the Cluster Name Object (CNO)
http://blogs.technet.com/b/askcore/archive/2012/09/25/cno-blog-series-increasing-awareness-around-the-cluster-name-object-cno.aspx
How to Create a Cluster in a Restrictive Active Directory Environment
http://blogs.msdn.com/b/clustering/archive/2012/03/30/10289577.aspx
Prestage Cluster Computer Objects in Active Directory Domain Services
https://technet.microsoft.com/en-us/library/dn466519.aspx
I’m glad to be of help to you!
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

File shares not be re-created when restart the Server (Windows 2012 Std R2)

Hi Team,
We are facing below issue whenever restarting my server (windows 2012 R2 STD)
1. File shares are invisible.
2. Every time i need to restart server service to make file shares availability
Please look in to the above issue and revert if any suggestion.
Regards
K Sreenivasan

Hi,
According to your description, my understanding is that you create a file share under File and Storage Services but the file is invisible. If you restart the server make the file share, then you can see the file share.
Can you see the file share when you directly create in Windows Explorer? Please check if you have enabled ABE on the file share.
Access-based Enumeration
http://technet.microsoft.com/en-us/library/dd772681(v=ws.10).aspx
Regards,
Mandy
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

File share problen in Windows 2012 cluster

Similar Messages

Maybe you are looking for