Not sure where to post this, so I started here. If the thread should be moved to a different forum, please move it or let me know where to ask the question. We use a DFS setup. One DFS server is a Windows 2003 server, the other is a Windows 2008 server. When using a Windows XP client, we do not have any problems accessing EXE programs on the network. When using a Windows 7 client, we have intermittent problems with "Access denied" messages when trying to run EXE programs from the network. When this error happens, I can go to any folder on the particular UNC path, choose Properties, then the DFS tab, then switch the active DFS server from one to the other. Once I switch the active server, I can then run the program. I noticed today that when the denied message comes up, if I look at the program icon, it looks like the standard Windows 7 unknown file type icon, and when I change the active server and refresh, the program icon then appears. I had also found that it does not seem to matter which DFS server is active - either one can be active and we can get the error. It is simply the act of changing the active DFS server that resolves the error. I am not a domain admin, so I may or may not be able to check any settings, but I can get settings checked. I am looking for any ideas or suggestions on what may be wrong here. We are starting to deploy Windows 7, and this will be kind of a show-stopper for regular users. Thank you.

Are both servers added to the Local Intranet zone on the clients? (This may happen also automatically for a server, which is in the same IP subnet, but not for one, which is in a different subnet, which would explain the differences.) Best greetings from Germany Olaf

Hi, Thanks for posting in Microsoft TechNet forums. I would recommend you to post in Windows Server File Services and Storage forums to get a better assistance. The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us. Thank you for your understanding. Personally, I would like share the following KB on troubleshooting problems on DFS share. How to troubleshoot Distributed File System Namespace access failures in Windows Best Regards Dale Qiao TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Yes, the local intranet zone has our local domain added so that all local server are in there.

Ok. I will post this question to the Windows server forum. Thanks for pointing me to the right place.

Yes, the local intranet zone has our local domain added so that all local server are in there. The policy is also applied to the users? Verify this in Internet Options/Security/Local Intranet/Advanced/Sites. There also exists a policy for Internet Explorer security settings, which will control the behavior of clicking executable files in that zone. The file itself is not downloaded from somewhere and has still the blocked attribute? Right click it, and select Properties to check, if there is still an Unblock button there. Best greetings from Germany Olaf

Ok. I will post this question to the Windows server forum. Thanks for pointing me to the right place. Thanks for your cooperation. Currently I will close this thread. Hope you can find the solution in Windows Server forums. Best Regards Dale Qiao TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.