A Tip From Kinetic Computer Services ...

“Access is Denied” When Creating a Windows 2008 DFS Replication Group

Description of the Problem

You have two Windows 2008 servers. The first server is a domain controller in a parent domain. The second server is a member of a child domain in the same forest. You want to use DFS to replicate a set of folders from the parent server to the child server. You can successfully ping and log on to computers in the parent domain from the child domain, and vice versa. You have created replication targets on both servers and have set up the share and folder permissions correctly. You confirm that you can connect to each server's shared folder (via Map Network Drive or Net Use) from the other server and that you do have sufficient permissions. Nevertheless, when you run the Replicate Folder Wizard within the DFS Management tool, you receive the following error:

Information about the shared folder cannot be retrieved. Access is denied.

Cause

The above error can occur if the Domain Admins group of the parent domain hasn't been given administrative rights to the server in the child domain.

Solution

On the server in the child domain, open Control Panel -> Computer Management. Navigate to Local Users and Groups -> Groups. Double-click on Administrators. Click Add... Click the Locations button and then navigate to your parent domain. Type domain admins and press Check Names to underline it. Press OK.

Now that the Domain Admins group of the parent domain has administrative rights on the child server, log onto the child server as an administrator of the parent domain. You will now be able to run the Replicate Folder Wizard in the DFS Management tool without receiving any "Access is denied" errors.

This tip is a free service of Kinetic Computer Services - professional network consultants serving the Houston area since 1998.

Reproduction of this document without the author's consent is prohibited.