Hi,
I have requirement to read an changes in AD, for example if user gets deleted or modification to group happens I should be able to read the same in my IBM Tivoli LDAP tool in rad only mode.
Regards, Deepak Sharma
↧
AD change read permission for non-admin users
↧
Slow syncing on a new member after DFSR Cloning
Hello.
I am experiencing some strange behavior of DFSR on a new member after DFSR Cloning.
So the situation is next: there are 4 different members for the replication group RG01 - SRV01, SRV02, SRV03 and SRV04.
SRV01 - is the upstream server (users change files on that server), SRV02, SRV03 and SRV04 - are downstream servers for that RG01 group. All servers are configured in a full-mesh topology. All servers are Windows Server 2012 R2. The size of RG01 folder is up to 2TB.
SRV01, SRV02 and SRV03 are fully synced for that RG01 group and all changes are propagated between them immediately. I've performed a DFSR Cloning for the new member SRV04 using this step-by-step guide:
https://blogs.technet.microsoft.com/filecab/2013/08/21/dfs-replication-initial-sync-in-windows-server-2012-r2-attack-of-the-clones/
The DFSR Cloning process went according to the guide.
This is the second time I've performed DFSR Cloning and the first one was successful.
The problem that I am talking about is the slow synchronization of this new member SRV04 with other members.
Below is what I was able to investigate by myself:
1. There are no events in Event Viewer on SRV04 that should be mentioned. There were only lots of 4412 events "The DFS Replication service detected that a file was changed on multiple servers. A conflict resolution algorithm was used to determine the winning file. The losing file was moved to the Conflict and Deleted folder." after adding this SRV04 to the RG01 group which is pretty much normal according to the guide.
2. On other servers there were also lots of events 4412 and events 4304 "The DFS Replication service has been repeatedly prevented from replicating a file due to consistent sharing violations encountered on the file. The service failed to stage a file for replication due to a sharing violation."
3. For some unknown reason I've found almost 21.5k files or folders in DfsrPrivate\PreExisting folder on SRV04 after the cloning process which is so weird because I am 100% sure that these files weren't modified on downstream server during the cloning process.
4. DFSR backlog between SRV01, SRV02 and SRV03 servers are empty. Backlog from SRV01 to SRV04 is always more than 1.5k files. When there are too many changes on upstream server during the daytime the backlog count grows up to 30-40k files and it only grows during that time. It looks like that it is reducing only during the night, when there are almost no activity on upstream server. At night the backlog is reducing to 1.5-2k files (but I've never seen it completely empty in the past 7 days).
5. "dfsrdiag replicationstate" command on SRV04 shows 768 scheduled files in queue (256 files from each of 3 inbound connections) all the time. They are always there. It looks like that filenames in the this output change from time to time, but it is still 768 files scheduled. "dfsrdiag pollad" command doesn't change anything.
6. I can see a lot of entries in C:\Windows\debug\Dfsr0100.log file on SRV04 like these:
20160926 12:58:34.804 11736 MEET 4274 Meet::ProcessUid Uid related found uidRelatedGvsn:{394700C7-AA12-4FC0-A143-3EBFC065AE46}-v34390 updateName:522125 uid:{7A2FC06E-B6EB-4864-8F0E-8CE82B131573}-v61362 gvsn:{2FEE1F47-6FAC-475B-8810-C56DDB83090C}-v70913144 connId:{C16EF5A3-EA5D-49CB-9674-757E9EB9D5EB} csName:RG01
20160926 12:58:34.804 11736 MEET 6356 Meet::LocalDominates Remote version dominates localgvsn:{394700C7-AA12-4FC0-A143-3EBFC065AE46}-v34390 updateName:522125 uid:{7A2FC06E-B6EB-4864-8F0E-8CE82B131573}-v61362 gvsn:{2FEE1F47-6FAC-475B-8810-C56DDB83090C}-v70913144 connId:{C16EF5A3-EA5D-49CB-9674-757E9EB9D5EB} csName:RG01
20160926 12:58:34.804 11736 MEET 6225 Meet::CheckInSync -> WAIT Related record not in sync with file system. relatedRecordUid:{7A2FC06E-B6EB-4864-8F0E-8CE82B131573}-v61362 updateName:522125 uid:{7A2FC06E-B6EB-4864-8F0E-8CE82B131573}-v61362 gvsn:{2FEE1F47-6FAC-475B-8810-C56DDB83090C}-v70913144 connId:{C16EF5A3-EA5D-49CB-9674-757E9EB9D5EB} csName:RG01 csId:{C953FA71-E2FB-40AF-ABEF-0E5A8107FD7F}
I am pretty much sure that sync issues and these entries are interconnected, but I don't know why are they came all the time and what can I do.
7. SRV01, SRV02 and SRV04 are also configured as members for RG02 group on separate drive volumes which works perfectly fine (initial sync was performed to configure them).
That is pretty much all I was able to find during my research. And I need your help to solve this issue because basically I don’t know what should do and what all these messages in Dfsr0100.log mean. Please advice. Thank you in advance.
I am experiencing some strange behavior of DFSR on a new member after DFSR Cloning.
So the situation is next: there are 4 different members for the replication group RG01 - SRV01, SRV02, SRV03 and SRV04.
SRV01 - is the upstream server (users change files on that server), SRV02, SRV03 and SRV04 - are downstream servers for that RG01 group. All servers are configured in a full-mesh topology. All servers are Windows Server 2012 R2. The size of RG01 folder is up to 2TB.
SRV01, SRV02 and SRV03 are fully synced for that RG01 group and all changes are propagated between them immediately. I've performed a DFSR Cloning for the new member SRV04 using this step-by-step guide:
https://blogs.technet.microsoft.com/filecab/2013/08/21/dfs-replication-initial-sync-in-windows-server-2012-r2-attack-of-the-clones/
The DFSR Cloning process went according to the guide.
This is the second time I've performed DFSR Cloning and the first one was successful.
The problem that I am talking about is the slow synchronization of this new member SRV04 with other members.
Below is what I was able to investigate by myself:
1. There are no events in Event Viewer on SRV04 that should be mentioned. There were only lots of 4412 events "The DFS Replication service detected that a file was changed on multiple servers. A conflict resolution algorithm was used to determine the winning file. The losing file was moved to the Conflict and Deleted folder." after adding this SRV04 to the RG01 group which is pretty much normal according to the guide.
2. On other servers there were also lots of events 4412 and events 4304 "The DFS Replication service has been repeatedly prevented from replicating a file due to consistent sharing violations encountered on the file. The service failed to stage a file for replication due to a sharing violation."
3. For some unknown reason I've found almost 21.5k files or folders in DfsrPrivate\PreExisting folder on SRV04 after the cloning process which is so weird because I am 100% sure that these files weren't modified on downstream server during the cloning process.
4. DFSR backlog between SRV01, SRV02 and SRV03 servers are empty. Backlog from SRV01 to SRV04 is always more than 1.5k files. When there are too many changes on upstream server during the daytime the backlog count grows up to 30-40k files and it only grows during that time. It looks like that it is reducing only during the night, when there are almost no activity on upstream server. At night the backlog is reducing to 1.5-2k files (but I've never seen it completely empty in the past 7 days).
5. "dfsrdiag replicationstate" command on SRV04 shows 768 scheduled files in queue (256 files from each of 3 inbound connections) all the time. They are always there. It looks like that filenames in the this output change from time to time, but it is still 768 files scheduled. "dfsrdiag pollad" command doesn't change anything.
6. I can see a lot of entries in C:\Windows\debug\Dfsr0100.log file on SRV04 like these:
20160926 12:58:34.804 11736 MEET 4274 Meet::ProcessUid Uid related found uidRelatedGvsn:{394700C7-AA12-4FC0-A143-3EBFC065AE46}-v34390 updateName:522125 uid:{7A2FC06E-B6EB-4864-8F0E-8CE82B131573}-v61362 gvsn:{2FEE1F47-6FAC-475B-8810-C56DDB83090C}-v70913144 connId:{C16EF5A3-EA5D-49CB-9674-757E9EB9D5EB} csName:RG01
20160926 12:58:34.804 11736 MEET 6356 Meet::LocalDominates Remote version dominates localgvsn:{394700C7-AA12-4FC0-A143-3EBFC065AE46}-v34390 updateName:522125 uid:{7A2FC06E-B6EB-4864-8F0E-8CE82B131573}-v61362 gvsn:{2FEE1F47-6FAC-475B-8810-C56DDB83090C}-v70913144 connId:{C16EF5A3-EA5D-49CB-9674-757E9EB9D5EB} csName:RG01
20160926 12:58:34.804 11736 MEET 6225 Meet::CheckInSync -> WAIT Related record not in sync with file system. relatedRecordUid:{7A2FC06E-B6EB-4864-8F0E-8CE82B131573}-v61362 updateName:522125 uid:{7A2FC06E-B6EB-4864-8F0E-8CE82B131573}-v61362 gvsn:{2FEE1F47-6FAC-475B-8810-C56DDB83090C}-v70913144 connId:{C16EF5A3-EA5D-49CB-9674-757E9EB9D5EB} csName:RG01 csId:{C953FA71-E2FB-40AF-ABEF-0E5A8107FD7F}
I am pretty much sure that sync issues and these entries are interconnected, but I don't know why are they came all the time and what can I do.
7. SRV01, SRV02 and SRV04 are also configured as members for RG02 group on separate drive volumes which works perfectly fine (initial sync was performed to configure them).
That is pretty much all I was able to find during my research. And I need your help to solve this issue because basically I don’t know what should do and what all these messages in Dfsr0100.log mean. Please advice. Thank you in advance.
↧
↧
Add multiple files to include in FSRM File Group
Hi,
I have implemented File Screening Management in our File Server (Windows Server 2008 R2). I would like to add multiple file name patterns to aFile Group. However, the GUI only allows me to add Files to include one-by-one. I have quite a list of file name patterns, and I wouldn't want to add them individually to each file server.
Is there a way to add file name patterns to the Files to include -list in bulk?
Regards
lakend
↧
Disable "Security tab" in shared folders for specific users - windows server 2012
Hello everyone,
I'm trying to disable "Security tab" in shared folders for specific users, so they don't know which permissions is linked to him or for his colleagues.
I'm using windows server 2012 R2 and applying to windows 10.
↧
Accessing network share broken but ip address works
Hi all,
I have a few remote users that from time to time have trouble accessing network shares on our file server. Normally the path to the network drive is, for example, \\domain.local\dfs\NameOfShare. However, some users are having problems connected to it. When I have them edit the path to reflect the IP address of that server they can connect to the share. For example, \\10.0.0.1\NameOfShare.
This is only affected some remote users but not all. They are connected through a VPN but I don't believe that to be the issue.
Any ideas?
↧
↧
share drive from login win08 r2 server from win7
Dear All,
I have a win08 r2 server to be DC.
in the domain, there is more than 30 win7 pcs already.
they all access share drive from win2008 r2
I just purchase new win7 pc access windows 2008r2 server share drive
This computer always ask me to username and password login again...
in fact,the user name and password is the same as PC login...also is user@domain.local and input password...
Why is always request me to login again?
↧
DFS-R WMI duplicate results - Wmic /namespace:\\root\microsoftdfs path dfsrreplicatedfolderinfo
Hello everyone,
I am facing a very weird issue with DFS-R. Recently I had to recreate two Replication Groups (Data Collection) in order to restore file replication after a disaster with one of the servers. Everything went well during the whole process and both servers are already in sync with each other. However, when I run a WMI query (Wmic /namespace:\root\microsoftdfs path dfsrreplicatedfolderinfo get replicationgroupname,replicatedfoldername,state) to see the status of the Replication Groups, I see duplicate values for a given RG with a status of '0' (Uninitialized). I have already checked everything I could... If I open the DFS Management console I don't see any duplicate Replication Groups there; the contents of the XML configuration files under "C:\System Volume Information\DFSR" & "E:\System Volume Information\DFSR" - being the latter one where the replicated data resides - are OK (no duplicate entries); and on registry (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\DFSR), I also only see what's really configured (again, no duplicate values).
I strongly suspect it's some sort of left over on the WMI repository that was not handled properly by DFS-R when the Replication Groups were re-created, but as I've never had to delete spefic instances from WMI, I am wondering whether someone out there has already faced the same issue or has any clues on how to get rid of these disturbing duplicate results being returned on "Wmic /namespace:\root\microsoftdfs path dfsrreplicatedfolderinfo get replicationgroupname,replicatedfoldername,state".
Just wanted to emphasize that replication is working fine between the two boxes (in both directions), the only issue being faced here is the duplicate thing.
Thanks in advance! :-)
I am facing a very weird issue with DFS-R. Recently I had to recreate two Replication Groups (Data Collection) in order to restore file replication after a disaster with one of the servers. Everything went well during the whole process and both servers are already in sync with each other. However, when I run a WMI query (Wmic /namespace:\root\microsoftdfs path dfsrreplicatedfolderinfo get replicationgroupname,replicatedfoldername,state) to see the status of the Replication Groups, I see duplicate values for a given RG with a status of '0' (Uninitialized). I have already checked everything I could... If I open the DFS Management console I don't see any duplicate Replication Groups there; the contents of the XML configuration files under "C:\System Volume Information\DFSR" & "E:\System Volume Information\DFSR" - being the latter one where the replicated data resides - are OK (no duplicate entries); and on registry (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\DFSR), I also only see what's really configured (again, no duplicate values).
I strongly suspect it's some sort of left over on the WMI repository that was not handled properly by DFS-R when the Replication Groups were re-created, but as I've never had to delete spefic instances from WMI, I am wondering whether someone out there has already faced the same issue or has any clues on how to get rid of these disturbing duplicate results being returned on "Wmic /namespace:\root\microsoftdfs path dfsrreplicatedfolderinfo get replicationgroupname,replicatedfoldername,state".
Just wanted to emphasize that replication is working fine between the two boxes (in both directions), the only issue being faced here is the duplicate thing.
Thanks in advance! :-)
↧
Showing C Partition 100MB only but more space available
Hi Team,
my one windows server 2008 r2
in this server C partition allocated 60 GB, but it show 100mb only in Server Manager --> Disk Management.
please help me.
↧
Client for NFS showmount command port mapper failure
Not sure if this is the proper forum for this. I have Client for NFS installed on my Windows 2012 Standard server. I am attempting to connect to a mount on HP-UX. When I use the 'mount' command I get the standard error "Network Error - 53". While troubleshooting this error I found that when I run the command 'showmount -e 192.168.1.1' I get the error:
RPC: Remote system errorRPC: Port mapper failure - RPC: Timed out.
This appears to indicate the RPC problem is on the Unix side but I'm not sure how to confirm that. If I run rpcinfo on both the Windows and Unix servers I get the expected list of ports and addresses. When I run 'exportfs' on the Unix server I show that the target share is visible with -anon=65534 privileges.
Can anyone tell me where to look for addition information on this issue?
Thanks,
Joe
↧
↧
Disk Defragmenter for Windows Vista
My PC is a Toshiba with an OS of Windows Vista Basic. For the past week or so, whenever I try to run the Disk Defragmenter that came with the PC, it runs for about 45 seconds and then I get the check mark like it is finished. In the past, it
would usually take 20-30 minutes to complete. Any ideas as to what is going on and/or how to fix it??
↧
Work Folders - Works with Windows, not with iPad or Android
Hi all,
Having an issue getting Work Folders configured properly to allow access for iPads and Android devices.
I can add Work Folders from Windows 10 machines, both on and off domain, without issue. If I use a mobile device, all I can get is 'Check your user name and password'.
I checked event viewer this morning and noticed this under Microsoft / Windows / SyncShare / Operational.
"There was a problem retrieving a user attribute from Active Directory Domain Services. This can occur if this server could not reach a domain controller or if the attribute has not been set.No action is required unless you deployed Work Folders with multiple sync servers, want users to automatically discover their sync server, and the msDS-SyncServerUrl user property is listed below."
After a bit of searching, I followed the instructions here: A New User Attribute for Work Folders Server
Since then, I don't see anything relevant in those logs.
Is there somewhere else I should be looking for the reason this is failing? I cant seem to find any other logs or events which would explain this issue, but the fact that it is giving credential errors suggests that it has discovered the server and is talking to it well enough to get an authentication error.
Any advice or assistance greatly appreciated. I'm running out of things to check.
↧
Physical disk not used in storage spaces after replacement
Hello everyone,
I have clustered storage spaces on windows server 2012 r2 and I've replaced one disk in pool (ex PhysicalDisk1). From performance counters I can see, that new physical disk is not used (no read/write operations).
Just running Repair-VirtualDisk or Optimize-Volume doesn't help. I can set Usage of any other disk (ex. PhysicalDisk2) as Retired, than Repair-VirtualDisk, and than set it back to AutoSelect. After that PhysicalDisk1 will be used for IO operations, but PhysicalDisk2 - will not.
Is there a way to equally redistribute load between all physical disk after repalcement?
I have clustered storage spaces on windows server 2012 r2 and I've replaced one disk in pool (ex PhysicalDisk1). From performance counters I can see, that new physical disk is not used (no read/write operations).
Just running Repair-VirtualDisk or Optimize-Volume doesn't help. I can set Usage of any other disk (ex. PhysicalDisk2) as Retired, than Repair-VirtualDisk, and than set it back to AutoSelect. After that PhysicalDisk1 will be used for IO operations, but PhysicalDisk2 - will not.
Is there a way to equally redistribute load between all physical disk after repalcement?
↧
Work Folders
Hi
we are new to the work folders concept and we tried to configure it on a new environment composing of a windows server 2012 r2 AD and File server.
we configure the File server with the work folder feature including the security groups on AD.
Our aim is to configure Work Folder on our domain-joined laptops and pc.
As I understood the file server will become the Sync Server, so logically the path shall behttp://FQDN of the file server.
we also run the following on our test clients to enable them to have the possibility to connect to Http:
" Reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WorkFolders /v AllowUnsecureConnection /t REG_DWORD /d 1 "
Even after that we forced the setup via GPO but we are prompted "To Sign in to your PC again..." but this message comes back but not the work folder.
As per Event viewer:
Sync Share discovery failed. Server URL: http://"FQDN"; Partnership type: User Data; Error: (0x80c80301) No sync server could be found for the user.
We do not want to set up any certificate server. it may look straight forward on any website but when setting up its not the same.
Can anyone please help.
↧
↧
occasionally 4663 is logging before 4656
while deleting a file, sometimes 4663 and 4660 is logging before its corresponding 4656(based on process id,handle id). This happens occasionally and the order of these events is also not constant all the time i.e, one time the order of events was 4660,4663,4656
another time the order was like 4663,4656,4660. |
can someone please explain me about this behaviour.
↧
Can I use iobit advanced system care 9 on windows server 2008r2
all I need is a simple yes or no
↧
How to check disk WWN ID for all drives in server
Hi ALL,
Can any one have information about WWN ID number for all disks. How to check WWN ID? I have windows 2012 r2 server. I run The fcinfo tool also. But it is not giving wwn number for all disks..
Thanks in advance
...
↧
Work Folder
We have a user where work folders works fine on his old laptop, and we are transitioning him to a new surface pro 4. Log files are available.
Sync Share discovery failed. Server URL: https://lslsvdfs02.lam.liebherr.i; Partnership type: User Data; Error: (0x80c80037) You're not set up on the server. Email your organization's tech support and ask them if they can give you access to Work Folders.
configuration of Work Folders through Group Policy failed.
Error: (0x80c80037) You're not set up on the server. Email your organization's tech support and ask them if they can give you access to Work Folders.
.
His share premissions are the same as everyone else, so no security issues. We tried:
resetting his AD password
Enabling and disabling his account
pushing GPO on and off
renaming his share
rebooting/shutting down numerous times
Ensuring all WSUS updates.
restarting services on his client, rebooting server and checking services on ours
checking certificate (good) and other users don't report issues.
I need help, as we cannot get him on.
↧
↧
Storage Space - Retired Disk - Degraded Virtual Disk - Cannot Remove Retired Disk
Hi,
I am running Windows Server 2012 R2.
I had a 6 x 3TB Storage Space (Party, Thin) which had one of the drives beginning to throw bad sectors. Everything was showing healthy, but I could see a pending failure and I wanted to be proactive.
I conducted the following steps:
- Identified the drive that was failing
- Renamed the failing drive to 'ToRemove'
- Added a new 3TB drive to the storage space
- Marked the failing drive "retired" through powershell
- Repaired the virtual disk (this ran for about 9hrs and moved all but 512MB off of the failing drive)
- Attempted to remove the retired drive through both the Server Manger GUI and Powershell
Issue I am facing:
- The retired drive is still showing 512MB in used space, which I am guessing may be stored on failing sectors and may not be movable
- The virtual disk is still showing "warning: degraded" (which I'm guessing has to do with the 512MB on the retired disk, or the fact that the storage space has a retired drive as a member)
When I try and remove the drive, I'm given two warning screens:
- Warning 1: Windows will attempt to rebuild any virtual disks that store data on this physical disk. For this to succeed, the storage pool must have a sufficient number of physical disks that have enough free space to store the data currently on this physical disk. The ability to to tolerate a physical disk failure will be reduced until the virtual disks are successfully rebuilt. Do you want to remove this physical disk from the pool?
[CLICK YES]
- Warning 2: This storage pool contains one or more virual disks that are not in a healthy state. Remvoing this physical disk now can cause data loss. To remove this phyiscal disk, first repair the following virtual disks: Storage space
[CLICK OK]
Where I'm stuck:
- Trying to repair the virtual disk through either GUI or Powershell takes about 30seconds and completes with no messages. The virtual disk continues to show as degraded. (as a reminder, my first repair run lasted 9 hours and moved most of the data off the failing drive)
- I cannot repair the virtual disk, and I cannot remove the retired failing disk
I have spent 2 days reading every forum post and how-to guide I can find... but I'm at a loss for how to proceed now.
Any help that can be provided would be greatly appreciated,
Gavin
↧
Performance of file classification in FSRM
Hi,
I'm testing File Classification for user files on windows 2012R1. The performance is very poor, taking up to 6 minutes to process a fodler with one document with one line in it. That is just with one rule with one regular expression. Also sometimes when the rule starts, it stays queued for a long time. There are file screening tasks running also, but the server has plenty of resources. Is it possible to improve the performance and see at a debug level what is happening?. Get-FsrmClassification just shows the status as queued or running. The Server is part of a failover cluster.
thanks
Mike
↧
Storage tiering with existing hardware raid
we have a hyper-v 2012 r2 cluster running on a raid volume comprised of 12 4tb sas disks. our controller cannot do pass-through so disks will always show as RAID. we are looking to move to 2016 as soon as its available(on mission-critical VM's)
my question is in 2016 can we add SSD's as a caching tier for this array. basically, create a raid 0 with some SSD's as an upper tier for the Spinning rust underneath. storage speed is fine (nearing 3000Mbps) but Iops are horrible and with enough disk activity from the VM's the whole thing slows to a crawl. hoping adding a SSD tier could help the IOPS situation.
the other thing we have looked at is adding storage spaces direct. we have plenty of 15K sasdrives laying around and each node can take 8 but again with the dell perc 700 we can't do passthrough so storage spaces direct won't let us use the disks as they show as raid even when they are single disks. we would love to fill each node with SSD's and use storage spaces direct but it seems we are blocked from doing this.
eventually, we will be adding an NVME storage server for OS drives and use the other storage server for bulk cold storage. all networking is dual 40Gbe so network speed is not a problem.
↧