"Network access is denied" when using DFS links

Eric Gurevitz 1 Reputation point
2021-10-17T06:42:59.29+00:00

We have users who are receiving "Network access is denied" when trying certain DFS links.

  1. It works when on the office network.
  2. If the user starts at the office, puts their laptop to sleep, goes home and connects via VPN, it still works.
  3. If the user shutsdown and starts from power off at home, connects to the VPN, it fails with "Network access is denied".
  4. The users can connect directly to the NetApp hosting the share that the DFS link is pointing to at all times.

All of the denied links are pointing to one NetApp.

What does the error network access denied mean? What should we check ?

Thanks for all the help in advance.
Eric

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,325 questions
Windows 10 Network
Windows 10 Network
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Network: A group of devices that communicate either wirelessly or via a physical connection.
2,288 questions
Windows Server Storage
Windows Server Storage
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Storage: The hardware and software system used to retain data for subsequent retrieval.
637 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Marco Schiavon 711 Reputation points
    2021-10-17T17:08:26.09+00:00

    You have a DNS problem because by default, a Microsoft Distributed File System Namespace (DFSN) root referral reply to a DFS root referral query is in NetBIOS name format (\<Server>\<Share>).

    So, you have to enable FQDN DFS open a Powershell and do :

    1)Obtain the list of all name spaces

    Get-DfsnRoot - ComputerName YOURSERVERNAME |Where type -NotMatch "Standalone"

    2) remove all DFS name spaces

    Remove-DfsnRootTarget -TargetPath OBTAINEDInStep1

    3) enable the FQDN

    Set-DfsnServerConfiguration -ComputerName YOURSERVERNAME -UseFqdn $true

    4) Restart the DFS service:

    Stop-Service dfs; Start-Service dfs