The following sections introduce namespaces and walk you step-by-step through the process of deploying a namespace in a test lab. The tasks in these sections are designed for administrators who are new to DFS Namespaces as well as administrators who have experience using DFS in Windows Server 2003 and Windows® 2000 Server. These tasks walk you through deployment steps and point out aspects of the DFS Management snap-in that are new or significantly different from previous DFS management tools.
If you have not used DFS in Windows Server 2003 or Windows 2000 Server, we recommend that you read the introduction section that follows to learn more about namespaces before you begin the tasks.
DFS Namespaces allows you to group shared folders located on different servers by transparently connecting them to one or more namespaces. A namespace is a virtual view of shared folders in an organization. When you create a namespace, you select which shared folders to add to the namespace, design the hierarchy in which those folders appear, and determine the names that the shared folders show in the namespace. When a user views the namespace, the folders appear to reside on a single, high-capacity hard disk. Users can navigate the namespace without needing to know the server names or shared folders hosting the data.
The path to a namespace is similar to a Universal Naming Convention (UNC) path of a shared folder, such as \\Server1\Public\Software\Tools. If you are familiar with UNC paths, you know that in this example the shared folder, Public, and its subfolders, Software and Tools, are all hosted on Server1. Now, assume you want to give users a single place to locate data, but you want to host data on different servers for availability and performance purposes. To do this, you can deploy a namespace similar to the one shown in the following figure. The elements of this namespace are described after the figure.
.gif)
- Namespace server. A namespace server hosts a namespace. The namespace server can be a member server or a domain controller.
- Namespace root. The root is the starting point of the namespace. In the previous figure, the name of the root is Public, and the namespace path is \\Contoso\Public. This type of namespace is known as a domain-based namespace, because it begins with a domain name (for example, Contoso) and its metadata is stored in Active Directory. Although a single namespace server is shown in the previous figure, a domain-based namespace can be hosted on multiple namespace servers.
- Folder. Folders help build the namespace hierarchy. Folders can optionally have folder targets. When users browse a folder with targets in the namespace, the client computer receives a referral that directs the client computer to one of the folder targets.
- Folder targets. A folder target is a UNC path of a shared folder or another namespace that is associated with a folder in a namespace. In the previous figure, the folder named Tools has two folder targets, one in London and one in New York, and the folder named Training Guides has a single folder target in New York. A user who browses to \\Contoso\Public\Software\Tools is transparently redirected to the shared folder \\LDN-SVR-01\Tools or \\NYC-SVR-01\Tools, depending on which site the user is in.
To view an online demo that describes the purpose and benefits of Distributed File System in Windows Server 2003, click the link "Distributed File System: Simplifying Complexity" on the Distributed File System and File Replication services page on the Microsoft Web site (http://go.microsoft.com/fwlink/?LinkId=39468).
The tasks in this section walk you through the process of deploying a namespace that looks similar to the namespace shown in the figure that appears in "Introduction to Namespaces" earlier in this guide.
Task 1: Create a Namespace
In this task, you create a new namespace using the DFS Management snap-in.
To create a namespace
In the console tree of the DFS Management snap-in, right-click the Namespaces node, and then click New Namespace.
Follow the steps in the New Namespace Wizard and supply the information described in the following table.
|
New Namespace Wizard Page
|
What to Enter
|
|---|
Namespace Server | Enter the name of the server to host the namespace. The server can be a domain controller or a member server. |
Namespace Name and Settings | In Name, type Public. |
Namespace Type | If Active Directory is deployed in your test lab and you are a member of the Domain Admins group or have been delegated permission to create domain-based namespaces, choose Domain-based namespace. Otherwise, choose Stand-alone namespace. To learn how a member of the Domain Admins group can delegate permission to create domain-based namespaces, see "Security requirements for creating and managing namespaces" in DFS Management Help. |
Review Settings and Create Namespace | Click Create to create the namespace. |
Confirmation | Click Close to close the wizard. |
When the wizard finishes, your new namespace will be added to the console tree. Double-click the Namespaces node, if necessary, to view your namespace, which should be similar to the following figure.
.gif)
To browse the new namespace, type the following command in the Run dialog box, substituting either the server name (if you created a stand-alone namespace) or the domain name (if you created a domain-based namespace) as appropriate:
\\server_or_domain\Public
Task 2: Add a Namespace Server
If you created a domain-based namespace, perform this task to specify an additional server to host the namespace. Doing so increases the availability of the namespace and allows you to place namespace servers in the same sites as users. If you created a stand-alone namespace, you must skip this task because stand-alone namespaces only support a single namespace server.
To add a namespace server
In the console tree of the DFS Management snap-in, right-click \\domain\Public, and then click Add Namespace Server.
In Namespace server, type the name of another server to host the namespace, and then click OK.
After you finish this procedure, click the \\domain\Public namespace in the console tree and review the contents of the Namespace Servers tab in the details pane, which should look similar to the following figure. Notice that two UNC paths are listed. The site of each namespace server is also displayed.
.gif)
Task 3: Delegate Management Permissions
You can delegate management permissions so that users who are not members of the Domain Admins group can create domain-based namespaces, and you can delegate management permissions so that users or groups can manage existing namespaces. In this section, you will delegate permissions to manage the namespace you created in the previous task.
To delegate permission to manage an existing namespace
In the console tree of the DFS Management snap-in, right-click \\server_or_domain\Public, and then click Delegate Management Permissions.
Type the name of a user or group that you want to manage the namespace, and then click OK.
After you finish this procedure, review the contents of the Delegation tab in the details pane. It should look similar to the following figure.
.gif)
Notice that the user or group you added shows "Explicit" in the How Permission Is Granted column. "Explicit" means that you can remove the user or group from the delegation list by right-clicking the user or group, and then clicking Remove. Any users or groups that show "Inherited" have inherited management permissions from Active Directory, and you cannot remove them from the delegation list using the DFS Management snap-in.
Note |
|---|
|
To delegate the ability to create domain-based namespaces, see "Security requirements for creating and managing namespaces" in DFS Management Help. |
Task 4: Add Folders to the Namespace
In this task, you add three folders to the namespace. Two of the folders will have folder targets. The hierarchy of the folders you will add is shown in the "Elements of a Namespace" figure earlier in this guide.
To create a folder named Software in the namespace
In the console tree of the DFS Management snap-in, right-click \\server_or_domain\Public, and then click New Folder.
In Name, type Software, and then click OK.
Note that the previous procedure creates a new folder in the namespace to build depth in the namespace hierarchy. You are not specifying the name of an existing folder, nor will you store data in this folder. This folder will not have folder targets that direct clients to other servers.
After you finish this procedure, the Software folder is added to the console tree as shown in the following figure. (You might need to double-click the \\server_or_domain\Public root to display the Software folder.
.gif)
Next, you add two folders with targets to the namespace. You create one folder named Tools within the Software folder, and you create another folder named Training Guides directly under the root named Public.
To create a folder named Tools in the namespace
In the console tree of the DFS Management snap-in, right-click the Software folder, and then click New Folder.
In Name, type Tools.
Click Add to add a folder target.
Click Browse to open the Browse for Shared Folders dialog box.
In Server, enter the name of the server that will host the Tools shared folder.
Click New Shared Folder.
In the Create Share dialog box, in the Share name box, type Tools, and then enter the local path where you want the shared folder to be created. If the folder does not exist, you are prompted to create it. Click OK to close all dialog boxes.
After you finish this procedure, the Tools folder is added to the console tree as shown in the following figure. (You might need to double-click the Software folder to display the Tools folder.) Notice the icon next to the Tools folder and how it differs from the Software folder’s icon. This icon appears next to all folders that have targets to differentiate them from folders that do not have targets.
.gif)
Now, select the Tools folder and review the contents of the Folder Targets tab in the details pane. Notice there is a single path shown. This means that only one server hosts the folder target that corresponds to the Tools folder. If that server becomes unavailable, the shared folder is also unavailable.
To increase the availability of the Tools folder, you can add a second folder target.
To add a second folder target to the Tools folder
In the console tree of the DFS Management snap-in, right-click the Tools folder, and then click Add Folder Target.
Click Browse to open the Browse for Shared Folders dialog box.
In Server, enter the name of another server that will host the Tools shared folder. Be sure to enter a different server from the one you specified in the previous procedure.
Click New Shared Folder.
In the Create Share dialog box, in the Share name box, type Tools, and then enter the local path where you want the shared folder to be created. If the folder does not exist, you are prompted to create it. Click OK to close all dialog boxes.
You are prompted to choose whether to create a replication group for these folder targets. For now, click No. You will enable DFS Replication on this folder in a later task.
To create a folder named Training Guides in the namespace
In the console tree of the DFS Management snap-in, right-click \\server_or_domain\Public, and then click New Folder.
In Name, type Training Guides.
Click Add to add a folder target.
Click Browse to open the Browse for Shared Folders dialog box.
In Server, enter the name of the server that will host the Training Guides shared folder.
Click New Shared Folder.
In the Create Share dialog box, in the Share name box, type Training Guides, and then enter the local path where you want the shared folder to be created. If the folder does not exist, you are prompted to create it. Click OK to close all dialog boxes.
When you finish these procedures, your namespace will look like the following figure.
.gif)
Task 5: Change How Targets Are Ordered in Referrals
In this task, you change settings that optimize how targets are ordered in referrals. If you are not familiar with referrals, a referral is a list of targets that a client computer receives from a domain controller or namespace server when the user accesses a namespace root or folder with targets in the namespace. The referral tells the client which servers host the associated root target or folder target. So, for example, when a client navigates to \\server_or_domain\Public, the client receives a root referral that contains a list of root targets on the namespace servers. When the client then navigates to the Tools folder, which has folder targets, the client receives a folder referral that contains a list of folder targets that correspond to the Tools folder.
When a client requests a referral, the Distributed File System service takes into account the site of the client and the site of the target and provides a referral with targets that are ordered according to the current referral ordering method. By default, targets in a client’s site are listed first in a referral in random order, followed by a list of targets outside of the client’s site, sorted by lowest cost.
To fine-tune how targets outside of a client’s site are ordered, you can change the ordering method for an entire namespace or for individual folders with targets. Changing the ordering method is an important consideration in namespaces whose targets span sites. For example, there might be situations in which you want to prevent the client from accessing targets outside of its own site. If so, you can configure the namespace root or folder with targets so that clients receive referrals only for targets within their own site.
To further optimize how targets are listed in referrals, you can set target priority, which overrides the ordering method. For example, you can specify that a target is always first or last in a referral, regardless of the client’s site, or you can specify that a target is always first or last among the targets that have the same connection cost. One common scenario for using target priority is when you have a "hot standby" server that is considered the server of last resort. In this scenario, you can specify that the standby server always appears last in referrals, and clients will fail over to this server only if all the other servers fail or become unavailable due to network outages.
In the following procedures, you verify the referral ordering method for the namespace and choose target priority of a folder target.
To verify the referral ordering method for a namespace
In the console tree of the DFS Management snap-in, right-click \\server_or_domain\Public, and then click Properties.
On the Referrals tab, in Ordering method, verify that Lowest cost is selected.
In the lowest cost ordering method, also called least expensive target selection or site costing in previous documentation, targets in a referral are ordered as follows:
-
Targets in the same site as the client are listed in random order at the top of the referral.
-
Targets outside of the client’s site are listed in order of lowest cost to highest cost. Referrals with the same cost are grouped together and within each group the targets are listed in random order.
This method ensures that clients do not traverse expensive wide area network (WAN) links to access targets when lower-cost targets are available. This ordering method works in both stand-alone and domain-based namespaces, as long as all namespace servers and all domain controllers are running Windows Server 2003.
Note |
|---|
|
If you do not want clients to access folder targets outside of their site, you can override the ordering method for individual folders. To do this, right-click a folder with targets in the console tree, click Properties, click the Referrals tab, and then click Exclude targets outside of the client’s site. Note that if no same-site targets are available, the client fails to access the folder because no folder targets are returned in the referral. |
In the next procedure, you change the priority of one of the folder targets of the Tools folder.
To change the priority of a folder target
In the console tree of the DFS Management snap-in, click the Tools folder.
In the details pane, on the Folder Targets tab, right-click one of the folder targets, and then click Properties.
On the Advanced tab, click Override referral ordering, and then click Last among all targets.
Task 6: Rename and Move a Folder
You can use the DFS Management snap-in to rename folders or move folders to another location in the namespace. This is useful if you need to change a folder name or restructure the namespace.
In this task, you rename the Training Guides folder to Training Demos and move it to the Software folder. Currently, your namespace should look similar to the following figure.
To rename the Training Guides folder
In the console tree of the DFS Management snap-in, right-click the Training Guides folder, and then click Rename Folder.
In the Rename Folder dialog box, in New name, type Training Demos.
To move the Training Demos folder
After you finish these procedures, your namespace should look like this:
.gif)
Task 7: Replicate a Folder in the Namespace Using DFS Replication
In this task, you enable DFS Replication on the Tools folder. If you recall from "Task 4: Add Folders to the Namespace," you created two folder targets for the Tools folder. Because users can be directed to either one of the folder targets, you need to ensure that the contents of the folders are kept synchronized.
If you are familiar with File Replication service (FRS) in Windows Server 2003, you know that FRS is only supported in domain-based namespaces. In Windows Server 2003 R2, you can use DFS Replication in both stand-alone and domain-based namespaces. Therefore, you can complete this task regardless of the type of namespace you created in "Task 1: Create a Namespace."
Important |
|---|
|
To perform this task, you need to have Active Directory deployed in your test lab environment, and you must be a member of the Domain Admins group or have been delegated the ability to create replication groups to perform this task. |
Important |
|---|
|
After you complete this task, replication does not begin immediately. The topology and DFS Replication settings must be replicated to all domain controllers, and each member in the replication group must poll its closest domain controller to obtain these settings. The amount of time this takes depends on Active Directory replication latency and the long polling interval (60 minutes) on each member. |
To enable DFS Replication on the Tools folder
In the console tree of the DFS Management snap-in, right-click the Tools folder, and then click Replicate Folder.
Follow the steps in the Replicate Folder Wizard and supply the information in the following table.
|
Replicate Folder Wizard Page
|
What to Enter
|
|---|
Replication Group and Replicated Folder Name | Accept the defaults. |
Replication Eligibility | Accept the defaults. |
Primary Member | If the folder targets are empty, choose either member. If both folder targets contain content, choose the member that has the most up-to-date content. |
Topology Selection | Select Full mesh. |
Replication Group Schedule and Bandwidth | Select Replicate continuously using the specified bandwidth. |
Review Settings and Create Replication Group | Click Create to create the replication group. |
Confirmation | Click Close to close the wizard. |
Replication Delay | Click OK to close the dialog box that warns you about the delay in initial replication. |
After you finish the previous procedure, navigate to the Replication node in the console tree. Notice that a new replication group has been created, as shown in the following figure.
.gif)
If you are not familiar with DFS Replication terminology, a replication group is a set of servers, known as members, that participates in the replication of one or more replicated folders. A replicated folder is a folder that is kept synchronized on each member. When you enable DFS Replication on a folder with targets, the servers that host the folder targets become members of the replication group, and the folder targets are associated with the replicated folder. The name of the replication group matches the namespace path (Contoso.com\Public\Software\Tools), and the name of the replicated folder matches the folder name (Tools).
From the Replication node, you can manage aspects of DFS Replication, such as the schedule and bandwidth usage, file and subfolder filters, and the topology (a framework of replication paths between members). On the Replicated Folders tab in the details pane, you can also view the namespace path that corresponds to the replicated folder, as shown in the following figure.
.gif)
If you navigate back to the Tools folder in the Namespaces node, notice that the Replication tab in the details pane shows that the Tools folder is being replicated using DFS Replication.
.gif)
If one of the folders targets contained data when you enabled DFS Replication, you can verify that replication has completed by clicking the Folder Targets tab, right-clicking the folder target that initially held no data, and then clicking Open in Explorer. After the initial replication delay, the files in this folder target should match the files in the target that initially held the data.
Another way to view the status of replication is to create a diagnostic report. You will do this in the following task.
Task 8: Create a Diagnostic Report
In this task, you create a diagnostic report to check the status of replication. The diagnostic report is an .html file that includes error and warning events, replication statistics, backlogged files, and other information for each member of the replication group.
To create a diagnostic report
In the console tree of the DFS Management snap-in, under the Replication node, right-click the \\domain\Public\Software\Tools replication group, and then click Create Diagnostic Report.
Follow the steps in the Diagnostic Report Wizard and supply the information in the following table.
|
Diagnostic Report Wizard Page
|
What to Enter
|
|---|
Path and Name | Accept the defaults. |
Members to Include | Accept the defaults. |
Options | Ensure that Yes, count backlogged files in this report is selected, and also click the Count the replicated files and their sizes on each member check box. |
Review Settings and Create Report | Click Create to create the diagnostic report. |
Confirmation | The wizard closes automatically, and the diagnostic report appears. |
Review the diagnostic report created for the Tools replication group. In particular, take a look at the following sections:
-
Note the DFS Replication efficiency savings. This savings will change over time as files are added and changed.
-
Review any errors or warnings, if any, for the members. These are typically event log errors that appear in the member's respective DFS Replication event log.
-
In the informational section for each member, review the replicated folder status (the status will be "Normal" after initial replication is complete) and other information. Notice that the primary member will show different statistics from the non-primary member; this is because data originated from the primary member and replicated to the non-primary member during initial replication.
Task 9: Browse the Namespace
In this task, you browse the namespace you created and view the referrals in the client’s referral cache as you browse portions of the namespace. Viewing referrals cached on the client is useful in troubleshooting scenarios. The following procedures assume you are performing these tasks from a client computer running Windows XP or Windows Server 2003.
To browse to the namespace root and view the root referral
Click Start, click Run, type \\server_or_domain\Public, and then click OK.
Windows Explorer opens and your view of the namespace looks similar to the following figure:
.gif)
In Windows Explorer, click the Folders button to display the Public root in the folder tree.
In the folder tree, right-click Public, and then click Properties to open the Properties dialog box.
On the DFS tab, review the paths listed under Referral list. These are the root targets in the root referral that the client received when it accessed \\server_or_domain\Public. These should match the root targets you created earlier in this guide. The target marked Active is the target currently connected to your client computer.
Click OK to close the dialog box.
To browse to the Tools and Training Demos folders and view their folder referrals
In Windows Explorer, double-click the Software folder. You should see two folders, Tools and Training Demos.
Double-click the Tools folder to open it.
In the folder tree, right-click the Tools folder, and then click Properties.
On the DFS tab, review the paths listed under Referral list. These are the folder targets in the folder referral that the client received when it accessed \\server_or_domain\Public\Software\Tools. These should match the folder targets you created earlier in this guide, and the target you marked as Last among all targets, when you set the target priority, should be listed last. The target marked Active is the target currently connected to your client computer.
Click OK to close the dialog box.
Click the Training Demos folder in the folder tree to open it.
Right-click the Training Demos folder in the folder tree, click Properties, and then click the DFS tab. Notice that only one folder target is listed in the referral list. Your client computer is currently connected to this folder target.
Task 10: Test Failover
In this task, disable the network card or turn off the server that hosts one of the root targets for the \\domain\Public namespace. Do the same for a server that hosts one of the folder targets for the Tools folder. After the network cards are disabled or the servers are turned off, repeat the procedures in "Task 9: Browse the Namespace." The procedures should work because another server continues to host the \\domain\Public namespace and the Tools folder.