The DACL of a DFS link is corrupted in Windows Server 2008 or in Windows Vista if you use the Dfsutil.exe utility to export DFS configuration data from the DFS link
Consider the following scenario:
- You have a computer that is running Windows Server 2008 or Windows Vista.
- You use the Dfsutil.exe utility to export Distributed File System (DFS) configuration data from a DFS link. For example, you export DFS namespace information to a file by using the following command:
dfsutil /root: dfs_root /export: <file_name>
- You use the same utility to import the exported data to the DFS link.
In this scenario, the discretionary access control list (DACL) of the DFS link is corrupted after the importing operation.
For more information on this issue, including potential causes, workarounds, and resolutions, see: Microsoft KB Article KB2394849.