This started off simple enough as an issue where we couldn't save changes to existing GPOs. In digging into it, what i have found is that i cannot create or modify any files within the SYSVOL folder.
The error received varies by which application tries to do it, but if i browse to \server\sysvol\domain.com\scripts and right click to create a new text file, the error is "Error 0x8007003A: The specified server cannot perform the requested operation".
I've ruled out and isolated many things so far, but at this point i have no idea.
- Browsing directly to C:\Windows\SYSVOL to create a file works fine, in any directory
- I am able to READ all files, and also able to create directories
- \server\netlogon and \server\sysvol allow file creation/editing, it isn't until i enter \server\sysvol\domain.com that the error comes up.
- I am aware that domain.com is a junction, i have tried re-creating it with the same result
- I have confirmed the Share permission is set to Full
- I have ruled out NTFS errors by 1) checking effective access and 2) the fact that i can create the files on the filesystem without problem, it's only a problem on the share. I also compared the NTFS and share permissions at all levels with a different domain controller (which is working fine).
- The issue occurs when accessing the share from another computer as well
- NTFRS is disabled/gone (migrated to DFS-R), and DFS-R is healthy (no errors reported)
- This is the only domain controller in the environment, all others have been removed cleanly.
- Turned off Antivirus just to make sure
- Other shares on the system behave normally
- Tried accessing via IPv4 address, hostname, fqdn, and IPv6 address, all same result.
I went as far as to run Procmon, but nothing obvious was there. The Explorer.EXE entry is for operation CreateFile, and the result is NAME NOT FOUND. After that entry are some SYSTEM entries, the most telling one probably being operation CreateFile, result 0x8000002D. I have been unable to determine what this result means.
Edit: Thanks to Harry's comment i scrutinized the link a bit more, and it seems that it can be on any share on the system (not just SYSVOL), and only occurs when trying to work within a junction. I'll be digging into this further to see what i can find.