Share via

DFS: Can't delete member of replication group

Question

Tuesday, January 26, 2016 6:27 AM

Hi,

I try to delete a member of a replication group. DFS say that I have insufficient rights, but I use my domain admin account for this. I can delete the member from the namespace folder target. I also try to delete this member with a powershell command, this is the result:

PS C:\Windows\system32> Remove-DfsrConnection -GroupName "Replikationsgruppe" -SourceComputerName "Sendeserver" -DestinationComputerName "Empfangssender" -Force
Remove-DfsrConnection : Could not remove the DFSR connection with replication group: "bebr.drv\data\homes"; sending
computer: "Sendeserver"; receiving computer: "Empfangssender"; GUID: None specified The user has insufficient access rights.
At line:1 char:1
+ Remove-DfsrConnection -GroupName bebr.drv\data\homes -SourceComputerName "Sendes ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (DFSR connection... None specified:String) [Remove-DfsrConnection], DfsrEx
   ception
    + FullyQualifiedErrorId : Remove-DfsrConnection.OMException,Microsoft.DistributedFileSystemReplication.Commands.Re
   moveDfsrConnectionCommand

When I try to disable this member I have the follow error:

This is the view of the DFS-Snapin in the MMC:

I hope anybody can help me.

MfG,
Rob

/Edit:

I also try to delete a replication group, but I have the Problem, DFS can't delete the object in Acitve Directory.

The unknown objects in this screenshot existing in the Active Directory. How can DFS delete this object in the Active Directory? I have nothing change on the permissions in Active Directory.

All replies (8)

Monday, February 1, 2016 10:08 AM ✅Answered

One problem is fixed, a new is here.

I can now delete the DFS-Replicationsgroups. There was an entry in the security-tab. The right "Deny Delete" was for the group "everyone". After delete this permission, it works.

Now I have the problem that i can build a new replication, but they wont start. I have two screenshots:

One Solutions is to grant "Full Control" for me on the folder "System Volume Information" and than delete the DFSR-Folder. But thats not an option, because the data on these server a now different and thats a problem. How can I start the replication without deleting the DFSR-Folder?

Tuesday, February 2, 2016 9:15 AM ✅Answered

Hi h725k,

Glad that you figure out the first question. And for your new problem, it seems to be still related to the permission problem. You may check about the thread discussed before, the issue maybe occur because the DFS servers do not have the permission to read AD information on themselves or their partners.

https://social.technet.microsoft.com/Forums/windowsserver/en-US/953be9ef-e9e3-4885-a5c4-47fc475ba562/dfs-is-not-working-anymore?forum=winserverfiles

Best Regards,

Mary Dong

Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected].

Tuesday, January 26, 2016 11:24 AM

Hi h725k,

Thanks for your post.

Could you please check the event viewer if there's any other events related to the dfs?

According to your description, error with insufficient rights, it is more related to be permission. However, by default, Domain Admins group can create or remove a dfs replication group.

Could you please also test do the option with another account.

You could also delegate to a user or group the ability to create replication groups and the user must add to the local Administrators group on the namespace server.

Delegate the Ability to Manage DFS Replication
http://msdn.microsoft.com/en-us/library/cc771465.aspx
   
Please try using ADSI Edit and look at the following location:

 DC=YOURDOMAIN, CN=System, CN=Dfs-Configuration. Try to delete the corrupted Namespace.

Also here is a similar thread which provides steps to delete DFS replication group in AD:

http://social.technet.microsoft.com/Forums/en-US/winserverfiles/thread/a7724837-b80a-436b-89df-97bb189bcecc

Best Regards,

Mary Dong

Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected].

Tuesday, January 26, 2016 11:53 AM

Hello,

the event viewer show my that exists a problem with one replication group. But the other works.

I try it with a domain account and a normal account that have the rights to administrate the DFS, but nothing, I can delete the replication group.
I could delete the namespace over ADSI Edit, but the namespace is in use from a many users. I can't delete this.

MfG,
Rob

Thursday, January 28, 2016 2:18 AM

Hi h725rk,

Thanks for your reply.

You may also refer to the thread about Can't remove DFS Share after Namespace is deleted

https://social.technet.microsoft.com/Forums/windowsserver/en-US/e25fbe88-102c-4b3f-89be-b11c336ed7d2/cant-remove-dfs-share-after-namespace-is-deleted?forum=winserverfiles

And in your scenairo, "the requested task cannot be completed because one or more of the selected objects have errors", the sending memeber and receiving member is unknow. It may also be the delay object. You delet the object but still show.  If possible, could you please restart the server to have a check.

Best Regards,

Mary Dong  

Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected].

Thursday, January 28, 2016 6:46 AM

I can't delete no containers under the DFSR-Container in the ADSI-Edit.

I have full control for this container and all objects among them.

Thursday, January 28, 2016 9:30 AM

Also, I can't delete this replicationgroup in ADSI Edit with the domain administrator with SID *-500.

Friday, January 29, 2016 6:48 AM

Now I see the replication doesn't work.

To the delete the namespace is no an option.