dfsutil error - unable to modify acl on dfs link

Discussion:

(too old to reply)

Cory

2009-04-27 21:34:04 UTC

I'm trying to use dfsutil to setup the NTFS permissions on our DFS Links
using the dfsutil command:

dfsutil property acl grant \\contoso.com\Namespace1\Link1 Contoso\User1:F

However, I am recieving this error:

Could not execute the command successfully
SYSTEM ERROR - The request is not supported.

I get this error in both my production and test environments, using Domain
based namespaces on server 2008.

So, clearly I am doing something wrong but thusfar Google hasn't come up
with an answer for me, any ideas?...

Isaac Oben [MCITP:EA, MCSE]

2009-04-28 01:37:22 UTC

Permalink

Hello Cory,

I aam not sure if you can use dfsutil for acl permissions. You can do
permissions directly from folder property or here is a suggestion

CACLS DriveLetter:\path...\Link1 /E /G contoso\User1:F

Hope this helps

Isaac

Post by Cory
I'm trying to use dfsutil to setup the NTFS permissions on our DFS Links
dfsutil property acl grant \\contoso.com\Namespace1\Link1 Contoso\User1:F
Could not execute the command successfully
SYSTEM ERROR - The request is not supported.
I get this error in both my production and test environments, using Domain
based namespaces on server 2008.
So, clearly I am doing something wrong but thusfar Google hasn't come up
with an answer for me, any ideas?...

Cory

2009-04-28 14:38:04 UTC

Permalink

Hi Isaac,

Thanks for your reply.

I am getting the information from:

http://technet.microsoft.com/en-us/library/cc753479.aspx

It says:

After enabling access-based enumeration, set the appropriate security for
each DFS folder by modifying the Access Control Lists (ACLs) using the
following command:

dfsutil property ACL grant\\<namespace_root>\<folder><username>:<permission>

I can use calcs just fine but I guess the real problem is trying to
synchronize the ACL of these DFS Links across a large number of servers
(100+). I was hoping that, if I set the ACL using the dfsutil command, that
the information would somehow be stored in the DFS Metadata.

My current situation is that everytime I create a new DFS Link, I need to
modify that links ACL on each server hosting the namespace. Likewise, if I
create a new server to host the namespace, I need to modify the ACL for all
existing links...

I'm sure I could script this somehow but it seems to me that this should be
a built in feature...

Post by Isaac Oben [MCITP:EA, MCSE]
Hello Cory,
I aam not sure if you can use dfsutil for acl permissions. You can do
permissions directly from folder property or here is a suggestion
CACLS DriveLetter:\path...\Link1 /E /G contoso\User1:F
Hope this helps
Isaac

Ganesh Prasad

2009-06-22 19:55:01 UTC

Permalink

Hi,

Can you verify the namespace type? The ACL can be applied only to windows
2008 mode namespace. You can check the namespace type by following these steps
1. Open DFS management GUI
2. Add the namespace to display
3. Right click on the namespace and go to "Properties"
4. Verify if the Type: is Domain (Windows Server 2008 mode)

Thanks
Ganesh