DFS V2 setting ABE with Powershell


hello everybody

we have stand-alone dfs running on w2k8r2 without replication. inside our central namespace access based enumeration enabled. in former times create dfs-share dfscmd.exe for and used dfsutil.exe setting abe. works fine.

now tried powershell:

new-dfsnfolder creates share expected.

grant-dfsnaccess seems works without error.

but share still has "use inheritance permissions local filesystem" instead of "set explicit permissions on dfs folder" , viewable everybody. switching inside gui "explicit permission" shows permissions given grant-dfsnaccess.

has idea how switch setting?

best regards germany   guido

hi guido,

it seems have encounter issue described in article:

the windows powershell cmdlet grant-dfsnaccess not change inheritance on dfs links

this is because although grant-dfsnaccess cmdlet configures view permissions individual groups or users, cmdlet not change inheritance mode use inherited set explicit.

to work around problem, use 1 of following method:

dfsutil property sd grant \\contoso.com\software\projects contoso\sarahjones:rx protect

if there else regarding issue, please feel free post back.

best regards,

anna wang


please remember mark replies answers if , unmark them if provide no help. if have feedback technet support, contact tnmff@microsoft.com



Windows Server  >  File Services and Storage



Comments

Popular posts from this blog

Edit Group Policy

Hyper-V VM not reaching OS 'Logon' screen

DNS question...