3.3.4.2.1 NetrDfsEnumEx (Opnum 21)

  • Article

A DFS server on a DC SHOULD support the Level parameter 200. The DFS server MUST validate the DfsEntryPath parameter against the name of the domain to which the DC is joined, and fail with ERROR_INVALID_NAME (0x0000007B) if it does not match. The DFS server then returns the list of domain-based DFS namespaces in the domain. This MUST be returned by performing an LDAP search for objects on the domain controller under the container. The container has the following DN:

 CN=Dfs-Configuration,CN=System,<domain>
 

where <domain> is the DN of the domain. For details and more information, see section 2.3.1.<148>