You receive an error message when you try to access a link under a DFS root in Windows Server 2003, in Windows 2000 Advanced Server, or in Windows 2000 Server (821097)


The information in this article applies to:

  • Microsoft Windows Server 2003, Enterprise Edition
  • Microsoft Windows Server 2003, Standard Edition
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Server

SYMPTOMS

Consider the following scenario. In Windows Server 2003, in Windows 2000 Advanced Server, or in Windows 2000 Server, you try to connect to a shared folder. This shared folder belongs to a workgroup. Alternatively, this shared folder belongs to a forest that is not a trusted forest. In this scenario, you cannot connect to the shared folder. Additionally, you receive the following error message:
Cannot access the \\<domain name>\<DFS root name>\<link name>
Possibly you may not have the access permission. Ask your administrator if you have the access authorization for this server.
Log-on failed : Might not be able to recognize the user name, or you typed the wrong password.
For example, you experience this problem if you use Microsoft Windows Explorer to connect to the following shared location:

\\Domain.local\Root

Note In this example, the link name under the root is Target1. The target is \\Server1\Share1. The target is located in the Server1 workgroup server.

When you try to connect to this shared folder, you receive an authentication dialog box. You type a user name and password that has the correct user permissions. Then, the error message that is mentioned in this section occurs. You expect to receive another authentication dialog box. However, you receive the error message that is mentioned in this section. Additionally, you cannot access the shared folder.

WORKAROUND

To work around this problem, use one of the following methods:
  • Access the resource for the direct purpose on the shared server. When you access the link (folder) from the DFS root, create a shortcut to connect a server in the DFS root.
  • Connect by creating an account that has the same user name and password as the logon user on the target server.
  • Link target should be on the same server of the same forest.

STATUS

This behavior is by design.

MORE INFORMATION

When you try to access a link through the DFS root, the session to the DFS root is established first. To open the link under the DFS link, use the established session, and then try to access. However, the access to the linked target fails.

Because a sessionis already established to the DFS root, an attempt to establish another session to the link under the DFS root uses the same connection target. Therefore, access fails. But the authentication dialog box does not appear.
Modification Type:MajorLast Reviewed:8/31/2006
Keywords:kberrmsg kbtshoot kbprb kbExpertiseInter kbExpertiseAdvanced KB821097 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.