Share via

We are observing data stream modification/creation in the AD server in satging folder.

Md. Mahfuzur Rahman 346 Reputation points
2022-08-24T14:47:45.717+00:00

We are observing data stream modification/creation in the file path D:\Windows\SYSVOL\staging\domain\ContentSet{F0D884-0B78-4D32-898D-F4FAB7C0B63C}-{FC74168C6C-4C79-9379-3A40B4A3FAC0}\35\ by the process “C:\Windows\System32\dfsrs.exe”on the server AD-DC3(also on other AD server) as per McAfee FIM.

Below file some modification for reference:

D:\Windows\SYSVOL\staging\domain\ContentSet{F0DDB884-0B7-898D-F4FAB7C0B63C}-{FC741688-DC6C-4C79-9379-3A40B4A3FAC0}\35\616339-{B542BA0A-DDAE-4232-3-C329ABEC9EC6}-v435-{B542BA0A-DDAE-4232-BAD3-C329ABEC9EC6}-v616339-Downloading.frx
D:\Windows\SYSVOL\staging\domain\ContentSet{F0DDB884-0B78-4D32-898D-F4FABB63C}-{FC741688-DC6C-4C79-9379-3A40B4A3FAC0}\35\616358-{B542BA0A-DDAE-4232-BAD3-C9ABEC9EC6}-v435-{B542BA0A-DDAE-4232-BAD3-C329ABEC9EC6}-v616358-Downloading.frx
D:\Windows\SYSVOL\staging\domain\ContentSet{F0DDB884-0B78-4D32-8-F4F7C0B63C}-{FC741688-DC6C-4C79-9379-3A40B4A3FAC0}\35\616367-{B542BA0A-DDAE-4232-BAD3-C32BEC9EC6}-v435-{B542BA0A-DDA232-BAD3-C329ABEC9EC6}-v616367-Downloading.frx

This modification/creation is normal behavior of DFSR or not?

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,807 questions

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.