Thanks to all for the helpful feedback so
far.
We currently have 5 DC’s. DC3 is the sole Win2000 SP4 and houses only
DFS root we have: \\tcu.edu\dfs1 There
is no replication of the root structure at the moment. DC4 through DC7 are Win2003 SP1 All of our users and processes reference
that root path (e.g. \\tcu.edu\dfs1\sharename)
and changing the name would be a nightmare. Maximum downtime would probably be
48-72 if the new root couldn’t be brought up with the same name
simultaneously on another DC. Upgrading DC3 is potentially an option,
however it is much older hardware. Bryan Lucas Server Administrator From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Kevin Brunson Good call, if not using replication then
2000 does a dfs root just fine From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grillenmeier, Guido changing the permissions to read only on
the DFS roots is no issue at all (doesn't matter what type of server the root is
hosted on - DC or member). I'd actually replace everyone with Auth. Users at
the same time. as for Kevin's other comment on using
Win2000 for DFS vs. Win2003 or R2 - totally agree that especially R2 has
extensive improvements in the DFS service itself and especially in the
file-replication engine (DFS-R). But if Fully agree though, if file replication
is involved, DFS-R in R2 is much preferred over FRS in Win2000 and Win2003
(RTM). Really depends on your situation if you need it. /Guido From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of I have never had any problems caused by
changing permissions on a DFS root. One thing to consider before you move
too far down the road of configuration though is if you really want to invest
in a 2000 DFS structure when the 2003 R2 DFS structure is so much more robust
and reliable. I have had and heard of countless problems with 2000
DFS. I have not had any problems with 2003 R2 DFS at all. If you
decide to move forward with 2000 DFS, be aware that they will probably stop
replicating occasionally. You will then spend hours
troubleshooting. Seriously it is worth building this on 2003 R2 servers
even if you don’t currently have any, if you are doing anything with
DFS. I know that is not what you are asking, sorry. Anyone disagree? From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of We built a DFS Root on a windows 2000 domain controller and
the root of the share has “Everyone” Full Control. E.g. if I
go to \\domain.com, right click on the dfs
root’s properties, the security tab. Can I simply take FC away? I’m a bit hesitant
because it lives on the DC and came this way by default. Bryan Lucas Server Administrator |