NTFRS replication does not replicate security at the root of the file system

[matthew_hallson]

Hi Everyone,

I am using DFS to provide an enterprise data structure globally.
There are about 10 root replicas in the dfs root, and I have set up a
replication policy so that NTFRS is used to replicate the folders, and
the security on the folders.

However, it appears that FRS does not replicate the security at the
root of the DFS topology between members of the replica set. Does
anyone know if this behaviour can be adjusted?


Regards,
Matt Hallson

 

[Luiz Miranda [MSFT]]

FRS only replicates the data within a replica set. It is not responsible for
replicating the actual DFS root folder or DFS link folders, DFS creates
those. Only way to accomplish what you'd like is to set the desired security
yourself on those parent folder(s).

example:

If you have a DFS root called \\mydomain.com\myDFSRoot which has 2 root
replicas Srv1 and Srv2 both which contain a folder in their data drive named
d:\myDFSRoot and is shared out as "myDFSRoot"; if you enable FRS replication
on that root then FRS will replicate the contents of the "d:\myDFSRoot"
folders and not the folders themselves.

Note: It is actually a better idea to create DFS links and enable FRS
replication on the DFS links instead of the DFS root, but that's another
story all together.


ps: Below are some useful lnks:

- Distributed File System

http://www.microsoft.com/windows2000/techinfo/howitworks/fileandprint/dfsnew.asp

- Distributed File System (DFS): Best Practices and Troubleshooting Guide

http://www.microsoft.com/windows2000/techinfo/administration/fileandprint/dfsbp.asp

- Step-by-Step Guide to Distributed File System (Dfs)

http://www.microsoft.com/windows2000/techinfo/planning/fileandprint/dfssteps.asp


~Luiz