Fileserver Woes

Discussion in 'Business & Enterprise Computing' started by Ravennoir, Dec 13, 2018.

  1. Ravennoir

    Ravennoir Member

    Joined:
    May 1, 2007
    Messages:
    6,385
    Location:
    Melbourne
    Hey Everyone,

    I have been having an ongoing issue where users are losing access to files\folders they previously had access to.

    When i check the effective permissions, they have the Modify access as required

    These are granted via AD security groups, and the groups have the correct permissions

    The File Shares themselves are CIFs shares from an EMC NAS. The share permissions havent changed, and other folders within the same share are not effected

    are there any settings or troubleshooting steps I can check to work out why these users are having this random issues

    thanks
     
  2. power

    power Member

    Joined:
    Apr 20, 2002
    Messages:
    55,902
    Location:
    brisbane
    NTFS or share?

    define "random issues".
     
  3. OP
    OP
    Ravennoir

    Ravennoir Member

    Joined:
    May 1, 2007
    Messages:
    6,385
    Location:
    Melbourne
    Both NTFS and Share permissions appear fine, from what we can tell the users have the correct access but still get permission denied

    I meant random, as in that it randomly drops off without (as far as I can tell) anyone making changes
     
  4. PabloEscobar

    PabloEscobar Member

    Joined:
    Jan 28, 2008
    Messages:
    12,551
  5. OP
    OP
    Ravennoir

    Ravennoir Member

    Joined:
    May 1, 2007
    Messages:
    6,385
    Location:
    Melbourne
    They might be, but it is happening far too often to be all of them :)

    How do those registry changes work when the fileshare is on a CIFs share presented from a SAN\NAS

    The weird thing I see is with the effective permissions

    this is showing the user has access, but they cant do anything
     
  6. broccoli

    broccoli Member

    Joined:
    Feb 21, 2010
    Messages:
    18,865
    Location:
    Perth
    Well, it's probably got nothing to do with your scenario, but as I was just looking into why I couldn't access folders on my nas (I'm in the process of moving to it), I'll mention it just in case it might give you some ideas.
    For some reason, my computer thought that I was already connected to the nas and it would not let me "connect again". It gave an error message that multiple logons by the same user were not permitted. (there was no other logon, it was remembering some other access)
    Rebooting fixed it.
     
  7. OP
    OP
    Ravennoir

    Ravennoir Member

    Joined:
    May 1, 2007
    Messages:
    6,385
    Location:
    Melbourne
    Yeah thats not the error they are getting, and im sure someone would be annoyed if I rebooted the SAN :)
     
  8. NSanity

    NSanity Member

    Joined:
    Mar 11, 2002
    Messages:
    17,348
    Location:
    Canberra
    Are you deploying the drive mappings via GPO? Are you using Create, Update or Replace?
    Is Time Sync between the NAS/SAN and the PDC Emulator FSMO Role Holder Healthy?
    Is Time Sync between the Clients and the PDC Emulator FSMO Role Holder Healthy?
    Is Time Sync between the Clients and the NAS/SAN Healthy?
    Is AD Replication healthy - particularly within the AD Site that contains the affected end-points and SAN?
    is the NAS/SAN's AD Computer membership healthy?
    What do AD / Computer security logs say?
    What does the Samba/SMBD/whatever logs on the SAN say?
    What does your SAN Vendor's support team say?
    Specifically - what does the error say? either in Explorer and/or via Net Use?
    Does the error persist when you use local SAN-based authentication to the share?
     
    Last edited: Dec 14, 2018
  9. broccoli

    broccoli Member

    Joined:
    Feb 21, 2010
    Messages:
    18,865
    Location:
    Perth
    Rebooted my computer, it was the one thinking it was connected.
     
  10. OP
    OP
    Ravennoir

    Ravennoir Member

    Joined:
    May 1, 2007
    Messages:
    6,385
    Location:
    Melbourne
    Not mapped by GPO
    Time Sync is all good
    AD Replication is good
    Nothing in the logs to show permissions issues
    The User gets the Error saying permission denied (mostly) in Explorer
    I can access the shares\files, so can other users, it will just happen to one or a group of users to a particular folder\file, other folders and files are fine
     
  11. person

    person Member

    Joined:
    Mar 7, 2003
    Messages:
    322
    Location:
    Brisbane
    Are the drives mapped using DNS\Netbios name OR IP Address?
     
  12. power

    power Member

    Joined:
    Apr 20, 2002
    Messages:
    55,902
    Location:
    brisbane
    what happens when you remove and re-write the permissions?
     
  13. OP
    OP
    Ravennoir

    Ravennoir Member

    Joined:
    May 1, 2007
    Messages:
    6,385
    Location:
    Melbourne
    DNS name
     
  14. GTiRolla

    GTiRolla Member

    Joined:
    Apr 17, 2007
    Messages:
    352
    Location:
    Canberra :(
    What type of EMC NAS?
    CLARIION, VNX, VNXe, Unity, Isilon?

    Each type have different quirks, but is there anything in the array logs when users are 'loosing access' I.e cifs server loosing connectivity, cifs share switching to the other SP with/without CA enabled?

    Issues with file locks, replication?
    Are you using LDAP or Ad auth?

    All the users using same OS?
     
  15. PsydFX

    PsydFX Member

    Joined:
    Jan 1, 2011
    Messages:
    2,785
    DNS Round Robin to the Array?

    Have you tried connecting via IP instead?
     
  16. OP
    OP
    Ravennoir

    Ravennoir Member

    Joined:
    May 1, 2007
    Messages:
    6,385
    Location:
    Melbourne
    Its a VMAX, there isnt anything in the logs as they can still access folders in that cifs share, its just some folders\files

    Permissions are granted via AD groups

    Users are either using Win7 or Win10, but it doesnt seem to be isolated to one OS or another
     
  17. NSanity

    NSanity Member

    Joined:
    Mar 11, 2002
    Messages:
    17,348
    Location:
    Canberra
    How the fuck do you have a VMax and you haven't got EMC to fix it for you...

    I get it, IT people hate physically speaking to people - CALL THE FUCKING VENDOR
     
  18. OP
    OP
    Ravennoir

    Ravennoir Member

    Joined:
    May 1, 2007
    Messages:
    6,385
    Location:
    Melbourne
    I dont think its a VMAX issue, if it was, the whole share would be effected, not just single files or folders

    To me it seems like a permissions issue, but as far as I can tell, the permissions are correct

    If I add a user direct access (not via a group), this resolves the issue. Of course I dont want to be doing this as standard
     
  19. GTiRolla

    GTiRolla Member

    Joined:
    Apr 17, 2007
    Messages:
    352
    Location:
    Canberra :(
    Definitely looks like a permissions issue.

    Strip and reapply the permissions.
     
  20. m0n4g3

    m0n4g3 Member

    Joined:
    Aug 5, 2009
    Messages:
    3,593
    Location:
    Perth, WA
    The permissions are handled by smb/cifs. The vendor manages the CIFS/SMB implementation..... call the vendor.
     
    mooboyj, Daemon and NSanity like this.

Share This Page