Lion 10.7.2 DFS share access issue

hi
i have a macbook air running 10.7.2 and we have a DFS file server running windows 2008 r2
our name space is domain based and i can access the file server using \\domain.com\uk\data and \\domain\uk\home\xxx (where xxx is the username)
the first is the shared data drive and the 2nd is the users home drive
all works beautifully when i am connected via the ethernet. as soon as i move onto the internal wifi (sits on the same network as the ethernet lan and has full access to all network resource, our windows 7 laptops can access all shares just fine) i can all of a sudden no longer access the DFS share \\accel.com\uk\data
it either says it cannot find it or a username and password box comes up (i am using centrify to leverage our AD user accounts on our mac's) when i enter my username and password it does not accept it. I have the same issue when i am outside of the office and vpn's in.
this evening i discovered that i have no problems accessing our DFS share if i enter \\domain.com\uk and i am presented with the folder UK on my dekstop and when i click on it i can see the DATA and HOME drive subfolder
when i now go to the finder and click on connect to server SMB://domain.com/uk/home/xxx it connects fine
so it seems that the /uk/ bit of the DFS path is confusing the mac client when not connected via the ethernet lan cable.
i have tried to mount via the cli but it comes up with no route to host and the console log displays something similar
at least i have a work around now but does anyone know if this is an issue with my name space setup or whether this is a bug (i presume bug as windows 7 clients have no issue with this namespace but i am not taking anything for granted :-) )
thank you
ps i found this post but it is slightly different to the issue i am having https://discussions.apple.com/message/16187498#16187498

The issue has previously hit Apple TV owners. I think people came to the conclusion that it was a HDMI handshake problem. Basically the process where the device and TV greet each other, make up some rules about communicationg and what their secret key is and so on.
I haven't tried this yet, but my local service center says that basically I can do one of two things:
- Downgrade to 10.7 and then download the 10.7.1 update from Apples website. To do this without having a Mac OS X Lion disc, you can hold down CMD + R when the computer boots to be able to access the recovery partition on newer Macs that come without the OS disc.
or..
- Put something in between the computer and TV. For example, if you're using an amplifier as a part of your home theather set up, this will probably work. The service guy said he has his Mini connected to the amplifier, which in turn is connected to speakers and a projector. The inverted colors still appear, but only once per night (i.e. after the first problem is reset by resetting the link then it's fine).
For now, I'll do my little dance of changing the source on the TV from HDMI 1 to HDMI 2 and then back again to reset the link... But, I'll probably try downgrading in a few days.

Similar Messages

Cannot use Offline Files with DFS share: "Access denied" error for DfsrPrivate in Sync Center

Hello,
I have an infrastructure that uses DFS to move files to different sites and we are using a GPO to define Offline Files for users at those sites. Whenever we try to initiate a manual sync, an error stating "Access
denied" is generated for all DfsrPrivate directories and the Sync Center reports it as a failed sync. We have tried giving Domain Users, Everyone, and invidiual accounts Write, Modify and even Full Control permissions to the DfsrPrivate directories and
as it seems, only users with administrative access and allowed to sync properly. Is there something obvious I'm missing here?
-Girard

Hi,
I cannot help test on this moment but we should not create offline files on DfsrPrivate folders which will cause issue. Try to exclude those folders as Offline Files and it should work in Sync Center.
If you have any feedback on our support, please send to [email protected]

Cant access a DFS share from a Windows 7 computer

I am having DFS share access issues with a Windows 7 workstation.
My setup is I have 6 windows 7 stations accessing this DFS Share.
All computers have the same Administrator password and another User/Password
All but 1 are working as they should.
The DFS share is running under Server 2008 R2 and contains files from this and another server.
From the workstation, I can see the server under Network.
I can open it and see the individually shared volumes and I have full read/write permissions.
I can see the DFS share and I can map it.
If I try to open the shared volumes within the DFS file I get a message saying I dont have permission.
Interestingly, when I look at the properties of the DFS share form the workstation, I dont see a DFS tab.
If I do this from a workstation is is able to connect fully to the share, I see a DFS tab in the properties.
I tried to include everything,
Thanks in advance

Hi,
Please try hotfix in the following KB,and check the result.
You cannot access a DFS share through a mapped network drive on a computer that is running Windows 7 or Windows Server 2008 R2
http://support.microsoft.com/kb/983620/en-us
Some steps for troubleshooting DFS you can try
http://technet.microsoft.com/en-us/library/cc962144.aspx
How to troubleshoot Distributed File System Namespace access failures in Windows
http://support.microsoft.com/kb/975440/en-us
use command dfsutil /pktinfo to test the access to the DFS root and connectivity to the root shares
http://blogs.technet.com/b/askds/archive/2009/06/04/the-case-of-the-random-dfs-access-denial.aspx
Regarding to the missing dfs tab, there's a policy, locate to User Configuration\Administrative Templates\Windows Components\Windows Explorer\remove dfs tab, then users can not view or change the properties of the dfs shares
Yolanda Zhu
TechNet Community Support

Cannot access local DFS shares while VPN is active

Hi
We use Windows Server 2008 Standard as a domain controller. It also hosts DFS. Although the namespaces are hosted on the server, the data is stored on a Windows 2008 Storage Server. We do not use DFS replication.
I have several DFS shares mapped on my Windows 7 client, which has just replaced my XP client, and can access them without any problems.
However, as soon as I connect to a remote network (located on a different domain - it has nothing to do with our network at all), I am unable to access our DFS shares. If I try to access a DFS share an error message pops up stating:
Location is not available
Logon failure: unknown user name or bad password.
The first time I connected the VPN a network dialog popped up asking what type of network it was and I chose Work. After connecting via the VPN I use remote desktop to carry out daily maintenance on a server on the remote network.
Other local resources are available. I can ping machines via IP, name and FQDN. I can access the same DFS shares using UNC paths. So, although I receive the error message described above when accessing AD-name.local-backslash-share-name1 I have no trouble
accessing server-name-backslash-share-name1
As soon as I close the VPN connection normal functionality is restored and I can again access the DFS shares without any problems.
Can someone help me fix this, please? When this was setup on my XP machine I never experienced this problem.
Also, is there a way of typing LAN addresses without the forum software converting them to a customised hyperlink? Thanks!

Thank you, fupin
Sabrina's suggestion to edit the pbk file worked. I changed the setting from 1 to 0 and connected to the remote network via the VPN and am still able to access the local DFS shares.
As per the OPs comments, the username and password I am using for the remote network are both different from the credentials I am using on the local network.
... take the steps in the KB 822707 to resolve it:
1). Locate the .pbk file that contains the entry that you dial. To do so, click Start, click Search, type *.pbk in the All or part of the file name box, and then
click Search.
2). Open the file in Notepad.
3). Locate the following entry: UseRasCredentials=1
4). Modify the entry to the following: UseRasCredentials=0
5). On the File menu, click Save, and the click Exit.
Cheers!

You cannot access a DFS share through a mapped network

Im running a W2K8 R2 terminal server that acesses a DFS share on a W2K3 Standard server. All of a sudden when users log in the share is disconected. I cannot use the
\\example.com\dfs\share to connect but, I can use the IP address
\\1.1.1.1\share to connect. I have tried to install KB983620 and KB2194664 but when I click on the .msu it says the update is not applicable to your computer. I've aslo changed the Network Provider Order in the registry
to start with RDPNP and LanmanWorkstation.
Any ideas would be appreciated.

Have you tried the command: dfsutil /pktflush (suggested in KB983620)?
Please mark as answer or vote
as helpful when it applies. Thanks!

Error message when mapping to a network drive of a DFS share on Windows 7

Hi,
We are getting the following error when mapping to a network drive of a DFS share on Windows 7:
“The mapped network drive could not be created because the following error has occurred:
A specified logon session does not exist. It may already have been terminated."
In our case, the user logs on his workstation using his regular domain account, then maps to the network DFS share using the service account of an application.
There is a fix from Microsoft (MS KB968264). But this fix requires disabling the "Network access: Do not allow storage of credentials or .NET Passports for network authentication” property. This is against the Microsoft own best practices (Network access:
“Do not allow storage of passwords and credentials for network authentication” should be set to
ENABLED), and is NOT acceptable for us for obvious security reasons.
Question: Does anyone know an alternative fix to this issue that does not introduce security risks?
Thank you in advance!
Mdjona

Again I have tried this, but in my program if I try to save to the a drive when no disk is inserted, the JOptionPane i want to display is not coming up.
the system prints out
java.io.FileNotFoundException: A:\image.jpg <The device is not ready>
If that makes any sense to you

Very slow responce when working with Office file on DFS-Share

Very slow responce when working with Office file on DFS-Share
We have implemented the following configuration
Domain level Windows 2000. Two member servers with Windows Server 2008 R2, sharing the same DFS namespace with, at the moment, one folder target called Home.
Users complaining that the access to different MS Office files is very slow. Even creating a new MS Word document using right click context menu takes up to 4 minutes to open. Saving, for example, one singe Excel sheet takes also few minutes.
Tested with both, MS Office 2007 and MS Office 2010. Makes no difference. When using Office 2010 you can see the message like contacting:
\\DomainName\Root\Home\UserName. Other files like TXT, JPG or PDF are not affected.
What makes the thing really weird is the fact, that the behavior described above can absolutely change after client machine being rebooted, suddenly everything becomes very fast and this condition can revert back again just after the next
reboot.
Considerations until now:
1. This has nothing to do with the file size. Even tiny files are affected.
2. AD Sites are configured correctly and the client workstations see themselves in the correct sites.
3. This is not an Office issue. If I map my folder target not as DFS, but directly as shared network drive
\\ServerName\Root\Home\UserName , everything functions as expected
What makes me suspicious: when using f.e. TCPView to monitor connections, I can see, that each time I make any operation on an office file, there will be a connection established to one of the domain controllers, sometimes to remote ones,
located in other countries. But on the other side, even if the connection is established to the nearest DC, operations are still very very slow!
Just forget to say. All clients are Windows 7
Thanks to all who respond.

Dear all,
sorry for the delayed reply. The problem has been solved now and since September 19<sup>th</sup>. everything is functioning as expected.
What was done:
Deleted replication targets excepting the initial ones
Carefully recreated folder targets
Deleted and recreated replication groups
Disabled SNP features on both namespace servers
Created EnableTCPA registry entry
Checked that the following Updates are installed
http://support.microsoft.com/kb/2688074
http://support.microsoft.com/kb/2647452
Concering Office File validation KB2553065 - This Update was already declined on our WSUS server
Kind Regards
Eduard

InDesign CS4 -- unable to browse DFS share folders?

We've recently purchased a slew of CS4 licenses in anticipation for our company's migration from InDesign CS2 to CS4. However in testing we've noticed what appears to be a bug with InDesign. Anytime we use file browse dialog within InDesign CS4(ex. trying to open a new file, trying to import a file into the current .idd, etc..) we run into an issue where we are unable to browse to any DFS network share. The DFS shares are listed, however they are grayed out and unable to be selected. However, the first time InDesign is run, the shares show up correctly and are able to be accessed. When you close InDesign and re-open it, the DFS links are now grayed out and unaccessable.
InDesign CS2 also had the same issue however there was a workaround available: When browsing for a file in CS2, if you choose the "Use Adobe Dialog" all the DFS shares would then be displayed under the 'Computer' link on the left hand side. However after researching these forums and speaking with Adobe techs there is no such feature available in CS4.
Normally I would assume this was some type of compatability issue with DFS and Adobe products...however every other program in the CS4 suite works perfectly... it's just InDesign that's giving us problems(and of course, InDesign is the program we need the most).
Does anyone have any insight as to how we could possibly workaround this issue? Has anyone experienced any similar issues with DFS links being grayed out in InDesign?
Any help with this issue would be greatly appreciated.
Thanks in advance,
Tim

Thanks for the reply.
Apparently they have tried waiting (quite a while) before trying the delete but no joy they still have to close InDesign or reboot.
Message was edited by: elliott-1

Indesign and DFS share problems.

Hi,
Sorry for the long post, but I need you.
We are currently deploying over 40 Windows 7 workstation here at my job. We've been dealing with an issue for the past 2 weeks that has completely stopped the deployment.
Before I go into the problem let me give you an overview of our infrastructure. Because of the necessity of having high availability of the information we have a DFS Share that replicate the information on two different physical location. People here work directly on this shared drive, which guarantee them that the work they do is backed up and distributed everywhere all the time. On top of that it also prevent people from working on the same file by locking it when it is open by someone else.
The problem is whenever we try to work with document located on this shared drive, InDesign will periodically crash. If we work from another shared drive with no DFS, there is no problem. Under Windows XP we never had this problem, but with Windows 7 it's currently impossible. We have currently InDesign CS5.5, but we also tried InDesign CC and it does the same thing.
Simple scripting command like .saveACopy() will crash the application guaranteed. I know this is not a Scripting Forum, but using the same Save A Copy from the file menu will result in the same thing. Other scripts will sometime complain that the object is no longer available, again something that we don't experiment when working on other shared drives that don't have DFS.
Have anyone experimented this? Is this a known problem? Anyone have a solution to work with DFS share?
Thank you.

What's DFS share?
DFS stand for Distributed File System.
It basically allow replication of data across multiple servers and provide multiple access point to the information depending on various factor (server load, location, etc.) You can read more about it here. https://en.wikipedia.org/wiki/Distributed_File_System_(Microsoft)
Have you fully patched InDesign (Help>Updates) and have you fully patched your share drive/server side?
Indesign CS5.5 is at 7.5.3. DFS was updated this week, but it didn't fix it. Our production environment is completely cut off from the internet, because of the sensitivity nature of the information we deal with until it's published.
Is this on the same file or all files?
Does it happen on Newly created files or just on older files or all files no matter what?
It's happening with new file or already created one, with or without our template.

Trying to access Lion server remote using multi-user access, but from a legacy Leopard system

Just purchased a mini server running Lion, and got screen sharing working fine from my legacy system (32-bit so Leopard only). However, I would like to run in multi-user mode, so someone can use the Lion system and another person can access their own account, from the older Leopard system, at the same time. Using multi-user rather than screen sharing. But Leopard does not have the option on the Finder/Share Screen command, the pop-up window to select screen sharing or new virtual session. So, is there a way still to run a new virtual session from a remote client running Leopard? Since the multi-user capability resides on the Lion server, it should be possible, but how, without the pop-up menu?
Message was edited by: Kurt-Syracuse

Hey. I suggest you check out http://discussions.apple.com/message.jspa?messageID=9839785#9839785, where there are a couple solutions posted in regard to the error code -36 when connecting to a samba share. Good luck!
Jeremy A.
Tekserve Intern

Sharer folder issue between two directly connected PC

Dear All, I have an issue regarding folder sharing. need your help to resolve this. the scenario is
two PC's are connected directly to share a folder, to open *.mdb file of a accounting software. this problem start when I moved windows XP PC's and installed windows 7 64 bit PC's. there is no compatibility issue as I run the same software on other
locations
PC A (192.168.1.200) has that *.mdb file and PC B (192.168.1.100) has to open this file through a network.
when I configured the folder share and network setting, all done well and PC B can connect with PC A and that software work well. After two days, when we start the software at PC B, its not responding when it try's to open that database file.
while analyzing, I found out that PC B can open the share folder of PC A but when open the desired database folder explore starts not responding and need to quit it by force. I also tried to share another folder of PC A but results are same.
PC A run the software with out any problem.
It seems like network issue, so I check the cable with cable tester, found it good, than I check the connectivity by ping command, it giving me <1ms time. but still change the connectors.
the hard part is that, this share folder issue arises 3-4 days a week and 2-3 days it works well, and this is happening from last 28 days. I mean, one day we start the the PC B and use the software via network, the next day we start the PC B and we don't
able to use the software,..strange.
I also change the cable connection from cross to straight as both new PC's have gigabit Ethernet but results are same.
I already contact with software company, as per them its network issue as we can use the software on local PC (PC A) and there is no error messages popup.
please help me out in this regard.
Thanks Tanveer

Hi,
Firstly, we need to identify is this file sharing or netowrking problem. If you can access to the shared folder and modify its files which locate at PC B through PC A, it indicates file sharing works with no problem.
After that, we need to check if its networking or software itself problem when reading the .mdb file.
Put the .mdb file at PC A, then using the software open it for test. If no problem, we need to use Process Monitor to capture the access trace of the software process, we should be able to find some clues.
You can access to the link below to download Process Monitor:
https://technet.microsoft.com/en-us/sysinternals/bb896645.aspx
How to capture a Process Monitor trace:
http://blogs.msdn.com/b/dswl/archive/2010/01/10/how-to-capture-a-process-monitor-trace.aspx
Learning Example:
Using Process Monitor to Troubleshoot and Find Registry Hacks:
http://www.howtogeek.com/school/sysinternals-pro/lesson5/all/
Note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Roger Lu
TechNet Community Support

'Print on both sides of paper' in Adobe Reader 10.1.2 + DFS shares....

Hello
After the latest update a new print dialog is available which includes the option to 'Print on both sides of the paper'. Our printer (available via a print server in a Windows domain environment), is capable of printing duplexed copies of documents but is configured to default to not use duplex. When the option to do this from the Adobe Reader print dialog is selected the printer driver overides it and the document is printed normally (not duplexed).
Is there a way to hide this option? We often need to print duplexed copies of documents but usually set it in the print driver when it is needed. Because the option is being overidden it has the potential to create an enormous amount of wasted paper and toner and will increase our printing costs.
Also, when V10 was released, trying to open pdf's located in DFS share paths caused the program to hang. The solution was to disable protected mode. I tried enabling protected mode after this update (and previous updates), and restarted the application but instead of hanging, Adobe Reader now displays a message box stating:
There was an error opening this document. Insufficient system resources exist to complete the requested service.
If I disable protected mode and restart Adobe Reader the document can be opened.
Any help appreciated.
Thanks!

Hi, Shatik
Thanks for replying.
The DFS shares are mapped as a network drive. This is done just once using a batch file that uses the persistent switch. No roaming profiles, no username\application data path.
Since posting this I can now access PDF's, but many of our staff are now unable to scroll through an entire pdf without Adobe Reader hanging. Again, removing the checkmark in the protected mode option allows full scrolling of a pdf.
Disabling/enabling antivirus real-time scanning makes no difference.

Check for mounted DFS share with exists in apple script

OS: OSX Mountain lion.
Can any one advise how to detect if a DFS share is mounted or not?
I have been using the following code:
set volumeLabel to "R$"
tell application "Finder"
exists disk volumeLabel
end tell
Which works fine with a normal SMB shares or attached hard drives but I cant get it to work with a DFS Share, it always returns false (see attached screen shot.
Also tried:
if volumeLabel is in (do shell script "/bin/ls Volumes") then
return true
else
return false
end if
Which didnt work with a DFS Share aswell.
Any help appreciated.
Cheers,
Richard

Hi,
Since you're checking to see if a value exists in the Desktop key, you can do something along these lines:
If (Get-ItemProperty -Path 'HKCU:\Control Panel\Desktop' -Name SCRNSAVE.EXE -ErrorAction SilentlyContinue) {
Write-Output 'Value exists'
} Else {
Write-Output 'Value DOES NOT exist'
EDIT: Sam, what version of PowerShell are you running? Your code doesn't seem to work for me on v4:
PS C:\> Push-Location
Set-Location "HKCU:\Control Panel"
$Result = Test-Path -Path ".\desktop\SCRNSAVE.EXE"
Pop-Location
$Result
False
Don't retire TechNet! -
(Don't give up yet - 12,950+ strong and growing)

DFS targets access in one site

Hello everyone. I've red a bunch of articles about DFS targets and their failover, but still cannot understand how failover works in one AD site.
I have two 2008 R2 servers with DFS role, domain based namespace. I want to create replication between two shares in DFS. So, I still have 2 questions:
1. What I need to configure so users can access only first target on DFS share? i.e.:
\\domain.local\shares (root namespace)
ShareX - target on srv1
ShareX - target on srv2
I want users to access dfs target only from srv1, and go to target (ShareX on srv2) automatically in case of srv1 fail.
2. Which best practice: to create two targets and then create replication between then, or create a separate replication group with all shares?

Hi,
1. In referral settings (you could find in DFS management), you could set target on srv1 as "first among all equal cost targets".
2. If you have several shares, you could create several "folders" under \\domain.local\shares, link with different targets and create replication gorups.
For example we will create:
\\domain.local\shares
\IT
\HR
\others
And when you create a second folder target in one of these folders, it will ask if you need to create a replication group. Create them separately so you could easily manage them later.
If you have any feedback on our support, please send to [email protected]

Connection to windows DFS Shares

Can OS X 10.6 connect to a DFSR share and access files on a windows 2008 R2 server?
I see people using DAVE and ExtemeZ-IP for DFS but i also see people are able to connect with 10.6. Also if a user can't access the namespace dfs share, but could access the server dfs share directly that might be ok.
I figured you server guys would know more than the workstation forum browsers.
My goal is to have a physical win2k8r2 server in 2 office locations connected via VPN and be able to have users in both locations connect to a single share that is always in sync. DFSR seems to be the only good solution for this, but all the client machines are Mac's and we also have an Xserve in 1 location and an new mac mini as a OD replica in the other location.

g3sys,
How many Macs are you talking about? You are most likely going to need to buy a solution one way or the other, but the number of Macs that you need to support may be the determining factor.
Group Logic's ExtremeZ-IP server pricing is based on the number of Macs you are going to have connecting, and the DFS serving capability is an additional fee (based on Group Logic's pricing page).
Thursby's DAVE is a per-client cost, but includes DFS support built-in.
I usually recommend DAVE to my clients, since you don't have to change the Windows server, and DFS is built in, so it can be more cost effective. Group Logic may be better for hundreds or thousands of Macs, but I don't know what their pricing is in those cases.
Just my $.02

Lion 10.7.2 DFS share access issue

Similar Messages

Maybe you are looking for