Accessing a folder under a mapped network drive to a Distributed File System Namespace (DFSN) folder target may fail on Windows Vista and later with error “Access is Denied”

Symptoms

Accessing a folder under a mapped network drive to a Distributed File System Namespace (DFSN) folder target may fail on Windows Vista and later with error “Access is Denied”. Vista clients do not receive errors accessing the mapped folder, only its subfolders. Pre-Vista clients are able to successfully access the same subfolders without issue.

Accessing the subfolder from Windows Explorer will result in the following error message:

"You do not have permission to access \\dfsnroot\dfslinktarget\share. Contact your network administrator to request access."
Accessing the subfolder from the command prompt results in error "Access is denied."

Cause

The behavior is by-design, and is due to an additional check introduced with Windows Vista Server Message Block (SMB) Protocol for permission on the target. 

Resolution

To resolve the issue, the subfolder permissions must allow "Traverse Folder/Execute File" for the user or group needing access.

More Information

The behavior documented is introduced with Windows Vista Server Message Block (SMB) protocol, and is present in later operating systems as well. 
Properties

Article ID: 2385108 - Last Review: Aug 18, 2010 - Revision: 1

Windows Vista Enterprise, Windows Vista Business, Windows Vista Ultimate, Windows 7 Enterprise, Windows 7 Professional, Windows Server 2008 R2 Datacenter, Windows Server 2008 R2 Datacenter without Hyper-V, Windows Server 2008 R2 Enterprise, Windows Server 2008 R2 Enterprise without Hyper-V, Windows Server 2008 R2 Standard, Windows Server 2008 R2 Standard without Hyper-V, Windows Server 2008 Standard without Hyper-V, Windows Server 2008 Datacenter, Windows Server 2008 Enterprise, Windows Server 2008 Standard

Feedback