Hi,
i got an issue in a multidomain forest fo rone Domain. after my Holiday i realized that i cannot add existing namespaces in the dfs Management gui or Display them in dfsutil.
In my Holiday there was an upgrade of some Domain Controllers in different sites and also the upgrade to Domain functional Level 2008.
the pdc and all other dcs in the problematic Domain replicate with no Problem.
the namespaces work, but can only be managed on the Namespace Servers, where the namspace roots are created. i cannot browse. there is no Firewall interrupting the communication.
I can flush the Cache, create a new dfs Namespace Server, work in different sites and also it is possible to query all dfs Namespace configurations with get-adobject from every Domain Controller. with wireshare a cannot find any difference between a fresh test Environment and the problematic Domain. the pdc Emulator produces a tcp 445 Response with dfs_enumex and the structure without any visible error and the communication Ends normally.
Does anyone give me advise what the cause of the Problem could be? Why could an pdc produce an empty list, although ist Information in Active Directory is correct? Meanwhile i deleted the namespaces, cause they are all in preproduction state, but the new created ones would not get into Display/query at all.
Domain Controllers are all running 2008 r2 Standard, namespaces are now in v2 mode. (makes no difference)
no Domain Controller got the dfs-n Service role.
my Namespace Server are dedicated.
Thanks if someone has advice where to search next. (Service, Kerberos, where this got cached).
Bye Mathias Rühn