acessing a share

Discussion in 'Server Networking' started by laimis, May 21, 2006.

  1. laimis

    laimis Guest

    This issue is driving me crazy!

    Here is the situation:

    I have a domain created, let's call it domain1. On that domain I have a
    server, call it server1, that has a share share1.

    I have one laptop to which I login as a local admin, and type in the IP
    address of server1 in order to access the share1. I get prompted for
    username/password and after entering, I can access the share with no
    problems.

    Now I take my work laptop home, and while disconnected from the work
    network, I login into that laptop with work's domain user. After loging
    in, wHen I try to access the server1 share with the IP, I get prompted
    for the username/password like before. I enter it, but this time I get
    the prompt for the username/password again, and again, and again. I can
    never see the share! I checked the network traffic with ethereal, and in
    the second case I see SMB STATUS_ACCESS_DENIED message being returned.
    Why is this happening? WHy can I connect to the share from the first
    laptop and not from the second?

    ANy clue would be very much appreciated because I am out of things that
    I can try to solve this.

    Thanks!
     
    laimis, May 21, 2006
    #1
    1. Advertisements

  2. Ben M. Schorr - MVP, May 21, 2006
    #2
    1. Advertisements

  3. laimis

    laimis Guest

    Hey guys,

    thanks for the input ... here is more info on my network:

    All three machines are connected to one router. All get assigned ip
    (192.168.0.100,1,and 2) inside the network. I can ping server1 from the
    problem laptop with no problems, and vice versa.

    Also, I can access the problem laptop from server1 by just typing in
    \\192.168.0.102 and entering work account credentials. But when I type
    in \\192.168.0.100 from the problem laptop to access server1 I also get
    prompted for username and password. Entering them doesn't help though. I
    get no error messages or anything like that, just the immediate prompt
    for the login information again.

    I see access denied when i look at SMB packets with ethereal.

    I am just so confused why this works from one laptop and not from the
    other...

    If there is anymore info I could provide, let me know

    Thanks
     
    laimis, May 21, 2006
    #3
  4. laimis

    laimis Guest

    hey,

    I can ping the server alright, but like u suspected, the IP doesn't
    resolve back to the server name. Is that a problem? I get the same
    results on the laptop that connects fine also...

    I cannot really login into the laptop with my home domain user since the
    laptop is a member of the work domain and I dont want to touch that. Do
    you think that matters?

    THanks,

    Laimis
     
    laimis, May 22, 2006
    #4
  5. laimis

    laimis Guest

    Another thing that I just noticed, I ran browstat status on the server
    and the laptop and they both have a different master browser... I am not
    sure if that matters because I am able to make the initial connection to
    the server and it fails in the authentication part, but this might
    matter, i don't know ...
     
    laimis, May 22, 2006
    #5
  6. In
    The machine joined to the domain will look for the master browser in it's
    own domain. But curious, how are you entering the credentials? Is it a
    duplicate name? Are you providing the machine name or domain name first,
    such as:
    machinename\username
    password

    or

    NetBIOSdomainName\username
    password


    --
    Ace

    This posting is provided "AS-IS" with no warranties or guarantees and
    confers no rights.

    Having difficulty reading or finding responses to your post?
    Instead of the website you're using, I suggest to use OEx (Outlook Express
    or any other newsreader), and configure a news account, pointing to
    news.microsoft.com. This is a direct link to the Microsoft Public
    Newsgroups. It is FREE and requires NO ISP's Usenet account. OEx allows you
    to easily find, track threads, cross-post, sort by date, poster's name,
    watched threads or subject.

    It's easy:
    How to Configure OEx for Internet News
    http://support.microsoft.com/?id=171164

    Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
    Microsoft MVP - Directory Services
    Microsoft Certified Trainer

    Infinite Diversities in Infinite Combinations
    Assimilation Imminent. Resistance is Futile
    "Very funny Scotty. Now, beam down my clothes."

    The only thing in life is change. Anything more is a blackhole consuming
    unnecessary energy. - [Me]
     
    Ace Fekay [MVP], May 22, 2006
    #6
  7. laimis

    laimis Guest

    My NetBIOSDomainName is LAIMISNET, so I am entering it like this:

    LAIMISNET\username
    password
     
    laimis, May 22, 2006
    #7
  8. Looks like a permissions issue to me. Make sure logging
    is enabled on the server for logon/logoff success and failure
    then check the security log in the event viewer to get more
    details on your particular issue. Both laptops are a member
    of the same domain1?

    Your original post talks about being at work and at home.
    Can you elaborate as to what exactly that means?
     
    Michael Giorgio - MS MVP, May 22, 2006
    #8
  9. laimis

    laimis Guest

    Hey,

    I checked the logs and in the security log I can see succesful logon for
    the user that I am using to access the share. And right after that I see
    logoff for that user. No error messages or unsuccesful logon. That's
    what is confusing. The log shows that everything is good.

    Sorry for the confusion on the home and work. At all times I am
    connected to my home network. I login into work laptop using work domain
    account.

    Thanks!
     
    laimis, May 23, 2006
    #9
  10. In
    Post the EventIDs please.

    Are you VPN'd into your work network or cached credentials?

    Ace
     
    Ace Fekay [MVP], May 23, 2006
    #10
  11. Hi Laimis,

    By default, logging is not enabled for failed logon
    attempts. You have to enable it to see the failed
    attempts.
     
    Michael Giorgio - MS MVP, May 23, 2006
    #11
  12. laimis

    laimis Guest

    No, i am not VPN'd into work.

    Event IDs are (in the order they are logged after entering
    username/password):

    538,
    672,
    680,
    576,
    540

    Thanks
     
    laimis, May 26, 2006
    #12
  13. laimis

    laimis Guest

    account logon auditing is enabled in the domain
     
    laimis, May 26, 2006
    #13
  14. laimis

    laimis Guest

    account logon auditing is enabled in the domain
     
    laimis, May 26, 2006
    #14
  15. My bad laimis. I was off with my reply to you.

    If you are logging on to a share that is not a member
    of your work domain you have to specify local user
     
    Michael Giorgio - MS MVP, May 26, 2006
    #15
  16. In
    I was assuming you had other sort of errors in the Application and System
    log. Those events you posted out of the security logs are normal and are
    just showing logon/logoff activities and since you didn't post the source, I
    am assuming failures, but not sure. If the servers are in a workgroup at
    home and not part of a domain, follow what Michael suggested about offering
    local accounts for authentication to those specific shares on their
    respective specific servers at home and not domain accounts, since domain
    accounts
    don't apply at home.

    For more info on event ids, visit www.eventid.net and provide the Event ID#
    and look and click on the cooresponding Source.

    Ace
     
    Ace Fekay [MVP], May 26, 2006
    #16
  17. laimis

    laimis Guest

    Hey,

    that server is a domain controller, thus I cannot create local accounts
    there.

    Thank you guys for all of your help and suggestions. Since this is my
    work's laptop I cannot change its network membership (make it join my
    domain at home, etc.) and do other things to network interfaces that
    might solve this problem. Thus I am leaving it alone. Something must be
    configured on this laptop that prevents me from seeing the shares on the
    server (not firewall, i have disabled it).

    I hate to leave this like that, and I am sure that I will keep on trying
    to resolve this, but cannot bother you guys any longer,

    thanks
     
    laimis, May 27, 2006
    #17
  18. I am still a bit lost here. Let's see if I am close?

    You have two networks, your work and home network.
    You are taking your work laptop home which is a member
    of your work domain. The share you are trying to access is
    located on a DC on your home network? If so you should
    be able to browse / access that particular share using the
    "connect as" feature.
     
    Michael Giorgio - MS MVP, May 30, 2006
    #18
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.