Category: Troubleshooting Playbooks · View source ↗
IT Glue Hudu Liongard NinjaOne
Role: Technician
Outcome: Faster Resolution & Response
When to use: Users open a namespace path and land on the wrong (or a slow/remote) server or get “no target”; files created on one server aren’t appearing on another or edits are stale between sites; DFSR reports a large backlog, an error state, or a replicated folder stopped replicating; or conflicts/losses (“ConflictAndDeleted”) or the staging area/quota is a bottleneck.
Run it: on the one ticket you’re working — a tech drives this hands-on at the member servers, not unattended.
Prompt
You are diagnosing a DFS problem. Two different systems share the name "DFS" and fail differently. DFS-N (namespaces) is about referrals — which target a user is sent to. DFS-R (replication) is about content getting between targets. Separate them first, then work from referral order or backlog evidence — a reckless DFS-R reinitialize can lose recent changes on the losing side.
Layout and version first. Check the client's documentation and knowledge base for the DFS design: the namespace(s) and folder targets (which servers back each path), whether targets are referral-ordered by site/cost, the replication groups and their topology (hub-spoke vs full-mesh), the replicated-folder paths, staging-quota sizes, and Windows Server version. Establish whether the complaint is a referral problem or a replication problem — they're separate. If a Liongard AD/Windows inspector runs, corroborate from its inspector data and note the dataprint age. Documentation and Liongard coverage varies per tenant — note what you couldn't check.
History first. Search this client's past tickets for DFS/file shares: a recent server add/remove/rename, a large data migration (DFSR backlogs balloon after bulk changes), a disk-full or staging event, or an unexpected reboot (a dirty shutdown can force a DFSR recovery). Sudden onset after a change names the cause.
Get the evidence before acting. DFS-N: dfsutil referral output / the management console — which targets exist for the path, their referral order and enabled/online state, and whether targets are actually reachable. DFS-R: the backlog count between the specific sending/receiving members (dfsrdiag Backlog), the DFSR health report, and the DFSR event log for state (recovery, error, staging-full events). Read the actual backlog/state — not "replication is broken". dfsutil/dfsrdiag and console steps are guidance for a tech with the right access, not remote execution; if the RMM is connected, open a member server in it (a deep link for the tech, not script execution) for the hands-on handoff, otherwise have the tech work at the server directly.
Branch:
1. DFS-N referral problems — users hit the wrong/slow target or none: check target priority/ordering (should honor site cost so users use the local target), whether a target is disabled or its server offline, and client-site awareness (a client in the wrong AD site gets wrong referrals). Fix the referral order/target state; a "no target" often means every target for that folder is offline or the folder target was removed.
2. DFS-R backlog — content is stale because changes are queued: read whether the backlog is draining (a big migration replicating out — patience, and possibly a staging-quota bump) vs stuck (an error state, a member unreachable, or content-freshness expired). A member down longer than the MaxOfflineTimeInDays becomes stale and needs deliberate recovery — don't just re-enable it. Escalate when a member has been offline past the content-freshness limit — reconnecting it wrong can resurrect deleted files or lose changes.
3. Conflicts / losses — simultaneous edits on two members create a conflict; DFSR keeps the last-writer and moves the loser to ConflictAndDeleted (recoverable for a time, not forever). This is expected behaviour for multi-master editing, not a bug — the durable answer is often a namespace/locking design change (single writable target, or per-site folders), not "fixing" DFSR. Never treat DFSR as a two-way sync for actively co-edited files — if the real problem is concurrent editing, fix the design (single-writer / SharePoint-OneDrive), don't blame replication.
4. Staging quota bottleneck — replication crawls or errors under heavy change because the staging area is too small (staging must fit the largest files/churn) or the staging disk is full. Read staging events; enlarging the quota is the tuning lever, but confirm disk space and the churn source first.
Never reinitialize / re-create replication or delete the DFSR database as a first move — an authoritative/non-authoritative sync resets one side to the other and can lose recent changes on the losing member; understand which member is authoritative and get sign-off first. This is a data-integrity decision. Do not reconnect a long-offline member that's past content-freshness without deliberate recovery. Do not invent dfsrdiag/dfsutil syntax, event IDs, or offline-limit values — check Microsoft's docs on the web and cite (defaults change by version).
Verify and note. Success is a real test: a file created on one member appears on the other within expectations, the backlog is at/near zero (or draining as expected), referrals send a test client to the correct local target. Leave a plain-text internal note (raw URLs, not markdown, no emojis): DFS-N vs DFS-R, the evidence (referral order / backlog / events), branch, action or handoff, verification, and what you couldn't check plus dataprint age.