Mviking~ That is an interesting issue. For questions 1 & 2: The only DFS whitepapers I have seen are available from Microsoft or ITpapers.com, there may be more out there, but ITpapers is a good place to start (free registration req). I have not seen domain spanning specific articles, but I also haven't seen anything that would prevent your DFS from spanning parent/child domains. How is your DNS namespace configured? All vanilla (AD integrated, KCC defined replication, etc.)? Or do you have any custom configurations there as well? Are you able to connect to the server\share from the remote directly (circumvention of the dfs namespace)? A great way to troubleshoot is to check sysvol for your domain/subddomain. \\company.com\sysvol, \\branch.company.com\sysvol. What user groups do you have setup on your DFS root? Domain Users, Authenticated Users, or a custom group setup? For many issues, the sysvol and the dfs are a great comparison for troubleshooting, since they operate in a very similar manner. Permissions are generally important. I would give the root of the DFS authenticated users and domain users as a troubleshooting step, then work outwards. Establish as general permissions as you can on the dfs root. Make sure your file folder permissions are all in sync as well at every link location. For question 3: I would start with Ultrasound for general observation of our your replication structure. I have used it extensively to solve a myriad of issues at my company on both the sysvol and dfs roots. Then I would hit this page for a number of utils (Ultrasound link is on this page too): FRS Tools I hope that helps, I know it is not probably as specific as you would like, but it could offer a starting point.