Permissions are not correctly inherited in a DFS topology on Windows 2000 Server and Windows Server 2003

Article translations Article translations
Article ID: 842604 - View products that this article applies to.
Expand all | Collapse all

SYMPTOMS

When you use Windows Explorer to modify the folder permissions on a Distributed File System (DFS) topology, the permissions may be inherited from the DFS structure instead of from the target NTFS file system folder. For example, when you access the \\DomainName\DFSRoot structure directly, and you modify the folder permissions under that DFS root, the permissions may not be applied as you expect.

CAUSE

When you set permissions on files or folders by using the DFS link path (virtual location) instead of the DFS target path (actual location), inheritance for security descriptors is applied based on the DFS link parent path instead of the DFS target parent path. This behavior is by design.

RESOLUTION

To resolve this behavior, use the path of the physical folder to set permissions. For example, use the following path:
\\ServerName\ShareName
In this path, ServerName is a placeholder for the name of the server, and ShareName is a placeholder for the name of the target share in the DFS structure.

Important Do not use the DFS path to set permissions on a folder. When you use the DFS path to set permissions on a folder, the folder may inherit permissions from the parent folder in the DFS topology.

REFERENCES

For more information about DFS, click the following article number to view the article in the Microsoft Knowledge Base:
812487 Overview of DFS in Windows 2000
For more information about how to set permissions on DFS structures, visit the following Microsoft Web site:
http://technet2.microsoft.com/WindowsServer/en/library/09f11266-8675-4dd6-8848-a5dd6c3839671033.mspx?mfr=true

Properties

Article ID: 842604 - Last Review: July 20, 2009 - Revision: 2.0
APPLIES TO
  • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
  • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
  • Microsoft Windows Server 2003, Enterprise x64 Edition
  • Microsoft Windows Server 2003, Web Edition
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Server
Keywords: 
kbwinservnetwork kbfileprintservices kbprb KB842604

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com