# Choose DFS referral ordering without losing an off-site access path

> Compare DFS referral ordering choices, site-only limits, and the exception for explicitly prioritized targets.

- Canonical URL: https://update.dsesecurity.com/updates/dse-20260908-017-choose-dfs-referral-ordering-without-losing-an-off-site-access-path/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-09-08T18:16:54+00:00
- Modified: 2026-09-08T18:17:13+00:00
- Last reviewed by DSE: 2026-09-08
- Resource type: Explainer
- DSE priority: Information
- Topics: Business Continuity, IT, Networks & Infrastructure
- Reading time: 2 minutes

## What you need to know

Compare DFS referral ordering choices, site-only limits, and the exception for explicitly prioritized targets.

## Potentially affected

Administrators configuring referral ordering for DFS namespace roots or folders with targets.

## DSE recommendation

Test referral results from each client site, including a site without an available local target, before changing ordering policy.

## Article

## Source facts

[Microsoft’s DFS documentation](https://learn.microsoft.com/en-us/windows-server/storage/dfs-namespaces/set-the-ordering-method-for-targets-in-referrals) describes referrals as ordered target lists: clients try the first target and move to the next when it is unavailable. The lowest-cost method places same-site targets first, then orders remote targets by cost; equal-cost targets are randomized. Without an overriding target priority, the site-only method returns only same-site targets; if none exist, the client receives no referral. Targets prioritized first or last across all targets remain in referrals despite site-only ordering.

## Applicability

Decide whether the change concerns the namespace root or a folder. Review client site placement and the intended target set. Treat a requirement to avoid remote access and a requirement to retain access during a local outage as separate business decisions that need an owner.

## DSE recommendation

Write down the intended outcome for each site before choosing the ordering method. Include the normal local target, acceptable remote alternatives, and conditions under which access should deliberately be unavailable. Ask the application or file-service owner to approve that last condition explicitly. Preserve the prior ordering configuration so the change can be reversed.

## Verification

Collect actual referrals and successful file-access results from representative clients. Repeat the exercise with an approved unavailable-target scenario and with a client site lacking a local target. Compare the returned order with the approved design. Record the target actually reached, not merely whether the namespace name resolved.

## Official references

[Microsoft Learn: Set the Ordering Method for Targets in Referrals](https://learn.microsoft.com/en-us/windows-server/storage/dfs-namespaces/set-the-ordering-method-for-targets-in-referrals). Source reviewed September 8, 2026.

## Primary reference

- Name: Set the Ordering Method for Targets in Referrals
- Authority: Microsoft Learn
- URL: https://learn.microsoft.com/en-us/windows-server/storage/dfs-namespaces/set-the-ordering-method-for-targets-in-referrals
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Choose DFS referral ordering without losing an off-site access path,” DSE Security, https://update.dsesecurity.com/updates/dse-20260908-017-choose-dfs-referral-ordering-without-losing-an-off-site-access-path/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.