Accessing a folder under a mapped network drive to a Distributed File System Namespace (DFSN) folder target may fail on Windows Vista and later with error “Access is Denied”

S’applique à : Windows Vista EnterpriseWindows Vista BusinessWindows Vista Ultimate Plus

Symptoms


Accessing a folder under a mapped network drive to a Distributed File System Namespace (DFSN) folder target may fail on Windows Vista and later with error “Access is Denied”. Vista clients do not receive errors accessing the mapped folder, only its subfolders. Pre-Vista clients are able to successfully access the same subfolders without issue.

Accessing the subfolder from Windows Explorer will result in the following error message:

"You do not have permission to access \\dfsnroot\dfslinktarget\share. Contact your network administrator to request access."
Accessing the subfolder from the command prompt results in error "Access is denied."

Cause


The behavior is by-design, and is due to an additional check introduced with Windows Vista Server Message Block (SMB) Protocol for permission on the target. 

Resolution


To resolve the issue, the subfolder permissions must allow "Traverse Folder/Execute File" for the user or group needing access.

More Information


The behavior documented is introduced with Windows Vista Server Message Block (SMB) protocol, and is present in later operating systems as well.