What are the Schema Extension Requirements for running Windows Server 2008 DFSR?

What are the Schema Extension Requirements for running Windows … | Windows 2008 Security

Thu, 03 Jul 2008 08:44:57 GMT

PingBack from http://windows2008security.com/network-security/what-are-the-schema-extension-requirements-for-running-windows/

Interesting Links 7/09/2007

Matt Johnson's Technical Adventures — Wed, 09 Jul 2008 15:38:25 GMT

The list is a little longer today because of not posting last week. Enjoy! Microsoft Advanced Windows

New blog posts on DFS-R

The Storage Team at Microsoft - File Cabinet Blog — Thu, 11 Sep 2008 20:08:21 GMT

Hello, everyone Below you have a compilation of some very interesting blog posts from AskDS and Extreme

Some interesting posts on DFS-R

Dario IT Solutions Blog — Fri, 12 Sep 2008 17:04:38 GMT

Check out the following posts: What is the purpose of the 'Deleted' folder in DFSR? DFSR and

Domain Infrastructure Research

Confluence: Campus Active Directory — Thu, 23 Oct 2008 02:45:21 GMT

Microsoft Support Documents 2008 "Lag site" or "hot site" (aka delayed replication) for Active Directory Disaster Recovery support

re: What are the Schema Extension Requirements for running Windows Server 2008 DFSR?

MatM — Sat, 15 Nov 2008 15:31:13 GMT

Hi Ned,

I'm interested particular in the msDFSR-ReadOnly attribute.

What would happen if you set this on a custom replication group (i.e. not SYSVOL)?

re: What are the Schema Extension Requirements for running Windows Server 2008 DFSR?

NedPyle — Sat, 15 Nov 2008 23:21:22 GMT

Hi,

Here's a reprint of some things I wrote in an internal article for MS Support Engineers. Basically, you can do it, but it's entirely at your own risk and there can be... unexpected results. :-/

- This read-only system in Win2008 was designed for SYSVOL and RODC's - it does not

scale well with large amounts of data, nor with highly dynamic data.

- It was never tested by MS Development for custom datasets - there may be catastrophic results with large data sets.

- It is totally unsupported by Microsoft except for SYSVOL RODC.

- If there are issues there will be no Dev/3rd tier CSS support - customer must undo the change and follow recommended share permissions method.

- You cannot have servers be read-only where they pull from another read-only. The relationship must always be read-write and read-only. This may necessitate a custom topology.

- There is no DFSMGMT.MSC interface for this by design.

- As you can tell by now, this system is not true read-only - it is a 'latent automatic undo'. So users will find it confusing when they appear to save data only to have their changes or files disappear.

But all is not lost - take a look at:

Introduction to Windows Server 2008 R2 - http://download.microsoft.com/download/F/2/1/F2146213-4AC0-4C50-B69A-12428FF0B077/Windows_Server_2008_R2_Reviewers_Guide_(BETA).doc

We have a real read-only feature under development in Win7. :)

- Ned

re: What are the Schema Extension Requirements for running Windows Server 2008 DFSR?

MatM — Wed, 19 Nov 2008 02:48:15 GMT

Thanks Ned, that is fantastic information - I hope this goes ahead.

This is slightly unrelated, but I just have a quick question, which I can't seem to find an answer on anywhere.

Is there a way to manually change a DFS folder target to belong to a different site?

We are consolidating all of our file servers in to data centres and out of branch offices, but we still need to seperate the resources for each individual office (they will all be connected in via fibre).

So say Site1 is our data centre and hosts our data, and we have Site2 and Site3 which need their own resources, I wanted to have a share for each site which maps to data on the server in Site1 and have those shares present themselves accordingly to Site2 and Site3 via DFS.

Can you point me in the right direction?

re: What are the Schema Extension Requirements for running Windows Server 2008 DFSR?

NedPyle — Wed, 19 Nov 2008 04:29:44 GMT

Cool. :)

To your next question, the way we usually change a target to belong to another site is to make sure that the server it lives on is associated with a subnet, which is itself associated with a site. So in DSSITE.MSC, we'd make sure that a subnet was defined. We'd then link that to the site that was appropriate. And the server folder target should belong to that actual IP subnet range.

Let me know of that doesn't make sense 100%. A bit more info (don't worry that they are 2003 R2 centric, it's no different in 2008 for this subject):

http://technet.microsoft.com/en-us/library/cc737358.aspx

http://www.microsoft.com/windowsserver2003/techinfo/overview/dfsfaq.mspx

- ned

re: What are the Schema Extension Requirements for running Windows Server 2008 DFSR?

MatM — Wed, 19 Nov 2008 04:46:18 GMT

Thanks again,

I realised I missed the most critical piece of information from my last question!

The shares that I was speaking of will actually be on the same server, so I guess what I was hoping is that there was a way to manually re-assign an individual folder target to a different site, even though they were on a server that exists in an unrelated site.

Sounds dodgy, I know, and I can't see that it is possible; but I'm hoping there's a way to achieve this (or something like it)!

re: What are the Schema Extension Requirements for running Windows Server 2008 DFSR?

NedPyle — Wed, 19 Nov 2008 04:53:33 GMT

Not possible, I'm afraid. The boundary is the server target itself.

Now... There's nothing that stops you from pointing a DFS target to another DFS target. So in theory, your first target folder in one site could actually point to another DFS target altogether, which itself resides in another site. But it doesn't sound like that would meet your needs for this...

- ned

re: What are the Schema Extension Requirements for running Windows Server 2008 DFSR?

MatM — Wed, 19 Nov 2008 11:36:42 GMT

Yeah, thought it was a long shot...

Thanks for your help!

Configuring a read-only replicated folder.

The Storage Team at Microsoft - File Cabinet Blog — Wed, 01 Apr 2009 18:23:16 GMT

The previous post explained the concept of a read-only replicated folder. Now, let us take a look at

What are the Schema Extension Requirements for running Windows Server 2008 DFSR?

What are the Schema Extension Requirements for running Windows … | Windows 2008 Security

Interesting Links 7/09/2007

New blog posts on DFS-R

Some interesting posts on DFS-R

Domain Infrastructure Research

re: What are the Schema Extension Requirements for running Windows Server 2008 DFSR?

re: What are the Schema Extension Requirements for running Windows Server 2008 DFSR?

re: What are the Schema Extension Requirements for running Windows Server 2008 DFSR?

re: What are the Schema Extension Requirements for running Windows Server 2008 DFSR?

re: What are the Schema Extension Requirements for running Windows Server 2008 DFSR?

re: What are the Schema Extension Requirements for running Windows Server 2008 DFSR?

re: What are the Schema Extension Requirements for running Windows Server 2008 DFSR?

Top AskDS Blog Posts

Configuring a read-only replicated folder.