This is one thing I didn’t know until today and I think it’s pretty cool! Why?
For example, we have a global corporate DFS namespace:
With a folder:
\\lab.priv\DFS\testshare that points to \\NASVM01-DATA1.lab.priv\testshare
But we want to give delegated permissions to a subset of this namespace (specifically, in this example, anything on NetApp) without changing the original DFS path, so we create a new namespace:
And create a folder:
\\lab.priv\NA\testshare that points to \\NASVM01-DATA1.lab.priv\testshare
Then we simply change our original DFS folder:
\\lab.priv\DFS\testshare to point to \\lab.priv\NA\testshare instead!
Image 1: \\lab.priv\DFS\testshare pointing to \\lab.priv\NA\testshare
Image 2: \\lab.priv\NA\testshare pointing to \\NASVM01-DATA1.lab.priv\testshare
And test our \\lab.priv\DFS\testshare works via \\lab.priv\NA\testshare to get to \\NASVM01-DATA1.lab.priv\testshare and it does:
C:\Users\netappadmin>net use Z: \\lab.priv\DFS\testshare
The command completed successfully.
Then our DFS Administrator can delegate permissions for \\lab.priv\NA to a NetApp Administrator to control updating DFS links (such as adding a disabled secondary DR path, and/or flipping from a primary path to secondary path in the event of a DR failover situation.)
Image 3: DFS Delegate Management Permissions...