DFS server in Parent Domain is slow when there is no local DC


  • We are implementing DFS 2k8 R2 and have this set up in the Parent Domain where all of the DC's are 2k8 R2. We have "hub" dfs servers in strategic locations where we also have a parent domain DC/GC/DNS server. However at some of the satalite offices we only have child domain DC/GC's and we have been experiencing some latency when users attempt to access files/folders. Is this because it is contacting the parent domain DC over the WAN? Is there anything that we can do to direct it to a local DC/GC or will we be forced to install a parent Domain DC/GC at every site?  Any help would be appreciated
    Tuesday, September 21, 2010 11:51 PM

All replies

  • You could deploy RODC to your branches so that authentication and access to the file server could be made even if the WAN fails. You should properly configure sites and replication costs. Assign the correct DC to that site and the users will use that DC assignet to their site for authentication. Active Directory Sites and Services Read-Only Domain Controllers Step-by-Step Guide

    MCTS - Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Monday, January 30, 2012 12:09 PM
  • Hi,

    One hint: check your sites topology. DFS Namespaces are site-aware. On your specific case, do the following checks:

    • In the published folder targets, check the Exclude Targets outside of the client's site, this will force DFS not to accept folder targets outside the satelite location site. Important: you must define a specific site for each different network segment (remote location) and put the DFS server inside this specific site

    • Other way is to define priorities between the targets, this is in the Folder Target Properties. Here you can override the priority for the targets, giving a TOP prio for the local DFS server.

    In my opinion these 2 options can solve or reduce your problems.

    Please do not forget to Vote as Helpful or Mark as an Answer if this info helped you.

    Thank you,

    F. Schubert
    System Administrator

    MCP | Microsoft Certified Professional
    MCTS 70-640 | Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    MCTS 70-642 | Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

    • Proposed as answer by CoffeineNerd Thursday, February 09, 2012 9:28 PM
    Tuesday, February 07, 2012 12:51 PM