geoperkins We're experiencing an intermittent Access Denied issue with DFS as well, but it only impacts a single folder referral.
We can access \\domain.com\dfsroot perfectly fine.
We only have 1 file server that has the DFS root and the file shares (for now).
\\domain.com\dfsroot\whatever works... except for 1 folder that intermittently does not work, and is usually fixed with a client reboot (don't have to do anything on the server).
Unfortunately, it's your Users share, which has user profiles, home folders and desktops on it.
If we access \\domain.com\dfsroot\users we get access denied. If we access \\actualfileserver\dfsroot\users it works, as does \\actualfileserver\users. It's only when we use the domain name that it fails.
Is this the issue you've been experiencing? If so, did you find a resolution?
----UPDATE----
From this thread: https://social.technet.microsoft.com/Forums/windows/en-US/22db822b-22f6-49bf-8799-da7928027462/access-denied-on-dfs-target-folder
We followed the registry change/reboot in this comment by Kim Zhou on a computer experiencing this today, and it resolved the issue for that computer. We do NOT know if this is the actual workaround/fix, as we have to try it on more computers when they experience it.
1. Click Start, type regedit in the Start Search box, and then press ENTER. If you are prompted for an administrator password or for a confirmation, type the password, or click Continue.
2. Locate the following registry subkey, and then right-click it:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CSC
3. Point to New, and then click Key.
4. Type Parameters in the box.
5. Right-click Parameters, point to New, and then click DWORD (32-bit)Value.
6. Type FormatDatabase, and then press ENTER.
7. Right-click FormatDatabase, and then click Modify.
8. In the Value data box, type 1, and then click OK.
9. Exit Registry Editor, and then restart the computer.