Monitoring DFS namespace usage

Solution 1:

You may consider something like this:

1 - Reconfigure the "staff" directory to be shared twice, as both "staff" and "staffBad"
2 - Reconfigure the "missmelled" link in DFS so that its only target is "\srv01\staffBad". User access will not be interrupted, they'll still get to it, just through a different share.
3 - Run a powershell script (loop on some kind of interval for an entire day/week) to query who is connected through the "staffBad" share and log the results to a file

gwmi -comp srv01 Win32_ServerConnection | where {$_.sharename -eq "staffBad" } | select username, sharename, computername | out-file -append staffBad.txt

The powershell could be more complex... Log as csv or xml. Log only connections that were not found in the previous run. Or SELECT UNIQUE from the full results upon review.