{"id":40,"date":"2012-11-06T01:54:22","date_gmt":"2012-11-06T09:54:22","guid":{"rendered":"http:\/\/blog.ls-al.com\/?p=40"},"modified":"2012-11-06T01:54:22","modified_gmt":"2012-11-06T09:54:22","slug":"troubleshoot-dfs-connectivity-on-clients","status":"publish","type":"post","link":"https:\/\/blog.ls-al.com\/troubleshoot-dfs-connectivity-on-clients\/","title":{"rendered":"Troubleshoot DFS Connectivity on Clients"},"content":{"rendered":"<p>To troubleshoot when clients have issues accessing DFS shares. This occurs mostly over VPN connections. Just a few notes to help troubleshooting these cases. Mostly this happens on Windows XP or when DNS settings are incorrect.<\/p>\n<ul>\n<li>Make sure machines can see each other, for example ping both ends.<\/li>\n<li>Make sure you enable file sharing.<\/li>\n<li>Make sure client is in the same DOMAIN.<\/li>\n<li>Enable NetBIOS over TCP\/IP.<\/li>\n<li>Make sure no firewall\/security software block sharing.<\/li>\n<li>Create the same username and password on all shared computers.<\/li>\n<li>Disable the IPv6 from the property page of the NIC.<\/li>\n<li>Reset Network Security LAN Manager Authentication Level from the default setting (NTLMv2 only) to Send LM &amp; NTLM - use NTLMv2 session if negotiated.<\/li>\n<li>To rule out permissions test the users account on a different XP client. For instance a Windows XP client hooked up to a guest Internet port, logged in locally as relevant user, using user\u2019s own VPN account and then trying DFS. This will ensure it is a DFS\/DNS issue on client\u2019s pc or network and not a generic permissions issue.<br \/>\n<strong>Check general requirements (VPN interface):<\/strong><\/p>\n<pre class=\"brush: plain\">C:\\Program Files\\Support Tools&gt;ipconfig \/all<\/pre>\n<p>Check for correct DNS servers, WINS servers and DNS suffix. While connected to VPN use nslookup to check if correct DNS server is being used.<\/p>\n<p>**Note if you are experiencing DNS hijacking as done by some ISP's, it is out of scope of this document and need to be resolved first.<\/p>\n<p><strong>Check output of this DNS command for DFS and\/or DNS server entries:<\/strong><\/p>\n<pre class=\"brush: plain\">C:\\Program Files\\Support Tools&gt;ipconfig \/displaydns<\/pre>\n<p><strong>Test basic non DNS Windows file sharing:<\/strong><\/p>\n<pre class=\"brush: plain\">C:\\Program Files\\Support Tools&gt;start \\\\172.20.10.222\r\n** You should see an explorer window displaying the volumes of this server.\r\n\r\nC:\\Program Files\\Support Tools&gt;net view \\\\172.20.10.222\r\nShared resources at \\\\172.20.10.222\r\nShare name  Type  Used as  Comment\r\n-------------------------------------------------------------------------------\r\nNETLOGON    Disk           Logon server share\r\nSYSVOL      Disk           Logon server share\r\nThe command completed successfully.<\/pre>\n<p><strong>Try DFS share from command line:<\/strong><\/p>\n<pre class=\"brush: plain\">C:\\Program Files\\Support Tools&gt;net use * \\\\YOUR_DOMAIN\\TOP_LEVEL_SHARE<\/pre>\n<p><strong>Install Windows XP Service Pack 2 Support Tools:<\/strong><br \/>\nhttp:\/\/www.microsoft.com\/downloads\/en\/details.aspx?FamilyID=49ae8576-9bb9-4126-9761-ba8011fabf38&displaylang=en<\/p>\n<p><strong>Run dfsutil \/pktinfo and record results:<\/strong><\/p>\n<pre class=\"brush: plain\"> C:\\Program Files\\Support Tools&gt;dfsutil \/pktinfo\r\n--mup.sys--\r\n3 entries...\r\nEntry: \\domain.com\\SysVol\r\nShortEntry: \\domain.com\\SysVol\r\nExpires in 0 seconds\r\nUseCount: 0 Type:0x1 ( DFS )\r\n   0:[\\server0.domain.com\\SysVol] State:0x131 ( ACTIVE )\r\n   1:[\\server1.domain.com\\SysVol] State:0x21 ( )\r\n...snip\r\n  16:[\\server16.domain.com\\SysVol] State:0x21 ( )\r\n\r\nEntry: \\domain.com\\corp\r\nShortEntry: \\domain.com\\corp\r\nExpires in 0 seconds\r\nUseCount: 2 Type:0x8081 ( REFERRAL_SVC DFS )\r\n   0:[\\server0\\Corp] State:0x119 ( ACTIVE )\r\n   1:[\\server1\\Corp] State:0x09 ( )\r\n...snip\r\n  11:[\\server11\\Corp] State:0x09 ( )\r\n\r\nEntry: \\domain.com\\corp\\us\r\nShortEntry: \\domain.com\\corp\\us\r\nExpires in 360 seconds\r\nUseCount: 0 Type:0x8001 ( DFS )\r\n   0:[\\server0\\DFSData$\\usdfs101_data1\\corp\\US] State:0x131 ( ACTIVE )\r\n\r\nDone processing this command.<\/pre>\n<p><strong>Run dfsutil \/spcinfo and record results:<\/strong><\/p>\n<pre class=\"brush: plain\"> C:\\Program Files\\Support Tools&gt;dfsutil \/spcinfo\r\n[*][server.sonosite.com]\r\n[*][DOMAIN]\r\n[*][domain.com]\r\n[+][domain.com]\r\n        [+server0.sonosite.com]\r\n...snip\r\nDone processing this command.<\/pre>\n<p><strong>Links:<\/strong><br \/>\nhttp:\/\/support.microsoft.com\/kb\/975440<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>To troubleshoot when clients have issues accessing DFS shares. This occurs mostly over VPN connections. Just a few notes to<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12],"tags":[],"class_list":["post-40","post","type-post","status-publish","format-standard","hentry","category-dfs"],"_links":{"self":[{"href":"https:\/\/blog.ls-al.com\/wp-json\/wp\/v2\/posts\/40","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.ls-al.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.ls-al.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.ls-al.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.ls-al.com\/wp-json\/wp\/v2\/comments?post=40"}],"version-history":[{"count":0,"href":"https:\/\/blog.ls-al.com\/wp-json\/wp\/v2\/posts\/40\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.ls-al.com\/wp-json\/wp\/v2\/media?parent=40"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.ls-al.com\/wp-json\/wp\/v2\/categories?post=40"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.ls-al.com\/wp-json\/wp\/v2\/tags?post=40"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}