Unable to access network share files from one server


Recommended Posts

Hi all,

 

Unable to access network files (e.g. \\servername\c$) from newly build windows server 2012.

FYI, By IP address of target network server we can access the ping, RDP as well as network files, and if we do 2012 server reboot then this will work for 2-3 days or longer as a week. 

This issue occurred for just for one single server others 700 servers are working as expected.

Guys, please help me for this issue.    

 

 

  On 20/03/2014 at 11:32, Chandgude said:

Then how it will works after win2012 server reboot?? 

 

One more information I would like to add, If I tried to access same network server from any windows 2008 or other 2012 servers it is working fine. but same userID this is not working in one particular windows server 2012. 

And what error do you get?  From a command line when you try and access \\servername\c$ what do you get for an error?

 

net use \\servername\c$

 

do you get access denied and asked for credentials?  Do you have any other sessions open to this machine?  You say you can access not admin shares just fine?

 

Are you sure the shares are there?  They could be recreated on reboot.. So what does net share look like when ran on the server?

 

exmaple

 

post-14624-0-09940200-1395315814.png

 

 

edit:

"but same userID this is not working in one particular windows server 2012."

 

That points to this box you can not access other server from having a session open to the server that does not have the rights to access the admin shares to me - your saying it can access other network shares?  Check what sessions this machine has open.  For example if something mapped to this server as user X, you can then not access server as user Y.

  On 20/03/2014 at 11:32, Chandgude said:

Then how it will works after win2012 server reboot??

Your OP wasn't clear, sorry.

Maybe someone is messing around with permissions or they are getting reset...

What is the exact error when you try to access the network share?

  On 20/03/2014 at 11:43, BudMan said:

And what error do you get?  From a command line when you try and access \\servername\c$ what do you get for an error?

 

net use \\servername\c$

 

do you get access denied and asked for credentials?  Do you have any other sessions open to this machine?  You say you can access not admin shares just fine?

 

Are you sure the shares are there?  They could be recreated on reboot.. So what does net share look like when ran on the server?

 

exmaple

 

attachicon.gifadminshares.png

 

 

edit:

"but same userID this is not working in one particular windows server 2012."

 

That points to this box you can not access other server from having a session open to the server that does not have the rights to access the admin shares to me - your saying it can access other network shares?  Check what sessions this machine has open.  For example if something mapped to this server as user X, you can then not access server as user Y.

 

Hi Budman,

 

net use \\servername\c$  

Got below error message,

 

System error 64 has occurred.
 
The specified network name is no longer available.
 
by IP it's gave success msg...
 
But same I have tried on my 2008 server there I got, The command completed successfully message
Also i have tried from three different userID from different machines and we successfully access the \\servername\c$.

So that is a really generic error.. what do you get when you do net view \\servername ?

 

Your saying you can access all the other shares on this box, just not C$ from this location?

  On 20/03/2014 at 12:55, BudMan said:

So that is a really generic error.. what do you get when you do net view \\servername ?

 

Your saying you can access all the other shares on this box, just not C$ from this location?

 

Same issue for \\servername, or \\Servername\c$ or servername\D$... 

My concern is only that what is the reason that am not able to access network server from one 2012 server????

 

let me clear the scenario, 

 

e.g. I have below servers in my organization. 

 

PC1 = Hostname is SCCMwin2012

PC2 = Hostname is SQLwin2008

PC3 = Hostname is webwin2008

PC4 = Hostname is SCOMwin2012

PC5 = Hostname is DCwin2008

PC6 = Hostname is DHCPwin2008

PC7 = Hostname is Serverwin2008

PC8 = Hostname is server2win2012

 

All above machine in one domain, and can be ping each other, accessing data by using \\servername\**$ (any drive) but but but.

 

from PC1(SCCMwin2012) can not access data of server PC2 (SQLwin2008). (\\servername, \\servername\C$ any share not working here.) if I do reboot SCCMwin2012 server then only able to access SQLwin2008 data from network.

 

pls let me know if in case still any concerns. 

\\servername doesn't work....hmmm, active directory?  if so what are your dns servers in ip properties (ipconfig/all)...sounds like  you are trying to resolve by name and you can't, if you can connect via IP address. 

  On 20/03/2014 at 13:59, CCS-IT said:
  On 20/03/2014 at 13:59, CCS-IT said:
  On 20/03/2014 at 13:59, CCS-IT said:
 
  On 20/03/2014 at 16:20, CCS-IT said:

 

  On 20/03/2014 at 13:59, CCS-IT said:
  On 20/03/2014 at 13:59, CCS-IT said:
  On 20/03/2014 at 13:59, CCS-IT said:

 

Found following events in windows server 2012 machine.... {ID 30620, Warning_Microsoft-Windows-SMBClient Microsoft-Windows-SMBClient/Operational - Connection to server \servername IP Address x.x.x.x:445 was aborted.}

 

FYI. NIC MTU is set as 1500 on source and destination machine. 

So your saying this SCCMwin2012 can not access any other server?  And if you reboot it you can only access the one SQLwin2008 box?

 

how are you checking mtu? 

 

C:\>netsh interface ipv4 show subinterfaces

   MTU  MediaSenseState   Bytes In  Bytes Out  Interface
------  ---------------  ---------  ---------  -------------
4294967295                1          0      23269  Loopback Pseudo-Interface 1
  1500                5          0          0  Wireless Network Connection
  1500                1  347094734   21410209  Local Area Connection
  1500                5          0          0  Local Area Connection* 11
  1400                5          0          0  Local Area Connection* 17
  1500                1   21162628    1569741  vpn

 

This show 1500?

  On 20/03/2014 at 18:59, BudMan said:

So your saying this SCCMwin2012 can not access any other server?  And if you reboot it you can only access the one SQLwin2008 box?

 

how are you checking mtu? 

 

C:\>netsh interface ipv4 show subinterfaces

   MTU  MediaSenseState   Bytes In  Bytes Out  Interface

------  ---------------  ---------  ---------  -------------

4294967295                1          0      23269  Loopback Pseudo-Interface 1

  1500                5          0          0  Wireless Network Connection

  1500                1  347094734   21410209  Local Area Connection

  1500                5          0          0  Local Area Connection* 11

  1400                5          0          0  Local Area Connection* 17

  1500                1   21162628    1569741  vpn

 

This show 1500?

 

Yes, I checked MYU by using same command as you mentioned. and I sow 1500 MTU from that command output.

 

SCCMwin2012 can access all servers which are listed in my previous post, except  SQLwin2008... I can ping SQLwin2008 from SCCMwin2012 server but can not access the RDP as well as data from SQLwin2008 machine. 

"but can not access the RDP as well as data from SQLwin2008 machine. "

 

Well RDP is completely different -- do you get prompted for access and denied, or get told can not find.. What error do you get when you try and RDP to its IP address.  And your saying other machines can rdp to sqlwin2008 just fine.

Budman,

As per the weekend patching we have rebooted SQLwin2008 server, hence as I told earlier post that after reboot issue getting resolved and now we all are accessing the server resources from our WinSCCM2012 machine.

 

FYI error msg: "Specified network name is no longer available" while accessing network data.. (\\servername\c$) if we do \\10.xx.xx.xx\c$ it's accessible perfectly. 

 

I'll keep you posted once issue re-occur.

  • 2 weeks later...
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Hundreds of printer models with weak password algorithms exposed, no firmware patch possible by Usama Jawad Many people don't think or care about it, but printer security is a pretty important avenue when it comes to evaluating your cybersecurity posture. Last month, it was found that the companion software for Procolored printers was distributing malware. Now, it has been revealed that hundreds of printer models all over the globe are susceptible to attacks targeting their admin credentials. Bleeping Computer has reported that CVE-2024-51978 is a one of the eight printer vulnerabilities recently discovered by security researchers. Combined, these allow authenticated and unauthenticated attackers to discover the default admin password, perform remote code execution (RCE), crash the printer, and leak other sensitive information. Severity ratings go from a score of 5.3 (medium) to 9.8 (critical), indicating that these are pretty severe vulnerabilities. The most dangerous vulnerability in there exposes the default admin password, and primarily affects Brother printers. This is because Brother utilizes a rather weak password generation algorithm that is highly dependent upon the device's serial number and a static salt table. Analysis of the code revealed that the first 16 characters of the serial number are appended with eight bytes from a static salt table, with the results being hashed with SHA256 and Base64-encoded. Finally, the first eight characters are then taken and some of them are replaced with special characters to form the password. The static nature of the password generation algorithm means that an attacker can chain various existing vulnerabilities to get access to your serial number and eventually your default admin password. It is important to note that not all printer models are affected by all of these flaws, but the default admin password exposure does affect 695 models. The breakdown for the number of printer model affected by the eight vulnerabilities is as follows: Brother: 689 Fujifilm: 46 Konica Minolta: 6 Ricoh: 5 Toshiba: 2 Brother has informed the security researchers that it cannot fully remediate the password generation vulnerability through a firmware patch. It can only fix the issue in its next printer models by patching the problem during the manufacturing process. This makes it crucial for customers of affected models to change their default admin password as soon as possible, which is good practice anyway.
    • Win11 being 2.3x faster than Win10, so that means without changing any hardware, Doom Eternal will run at over 2x the framerate? Or that any computational stuff will be done 2x faster just because of OS? Press X for doubt. I wonder where they pulled these metrics out of coz they make no sense. Not to mention my laptop with Ryzen 2500U that used to run Windows 11 simply CAN'T anymore because of BS arbitrary requirements Microsoft has imposed in Win11 that weren't there intiially. So, that laptop is now running Ubuntu or Fedora and runs at 1000000000000000000000x faster speeds because Windows 11 just doesn't work at all so it gets DNF.
    • “Ask Photos” is coming to more Google Photos users in the US by Paul Hill Google has announced several improvements to a Gemini-powered Google Photos feature called Ask Photos. The feature launched last year in early access and it was great for longer search requests, however, when users typed “Dog” or “Beach” looking for those types of pictures, Ask Photos underperformed. Now, Google has addressed this and is bringing the feature to more eligible users in the United States. The search giant said that users enjoyed asking queries such as “suggest photos that’d make great phone backgrounds” or “what did I eat on my trip to Barcelona?” and getting Gemini-powered responses to these complex questions. Unfortunately, simple searches like “beach” or “dogs” were generating less than optimal results and people complained. To remedy the situation, Google has brought the best of Google Photos’ classic search feature to Ask Photos to improve latency. Easy, short requests will be dealt with by the old search mechanism and when you ask complex queries, it will switch over to the Gemini-powered search results. Now that Google has addressed this main issue of simple searches by integrated functionality from the previous search model, the company feels more confident to open up beyond early access and deliver it to more users in the United States. To be eligible, you must be 18+, be in the US, have your Google Account language set to English (United States), and have Face Groups turned on. This feature is only available on Android and iOS. To start using it, open Google Photos and tap on Ask at the bottom, then press Try now and agree to the terms. If you do not see the Ask button, it means you’re not yet eligible. The feature also can’t be used on computers yet. Hopefully, Google will quickly expand this feature outside the US so that international users can try it out too.
    • When are MS going to learn. Traditional home users who email, watch cat videos and perform basic tasks don't care if W11 is slightly faster...assuming it's true. Few home users care about faster speed and more secure claims. In any event, it's irrelevant. MS stopped caring about home users years ago as evident by their hostile, anti choice home user policies.
    • They have. https://www.xda-developers.com...-25h2-update-kind-of-small/
  • Recent Achievements

    • Week One Done
      suprememobiles earned a badge
      Week One Done
    • Week One Done
      Marites earned a badge
      Week One Done
    • One Year In
      runge100 earned a badge
      One Year In
    • One Month Later
      runge100 earned a badge
      One Month Later
    • One Month Later
      jfam earned a badge
      One Month Later
  • Popular Contributors

    1. 1
      +primortal
      567
    2. 2
      +FloatingFatMan
      177
    3. 3
      ATLien_0
      169
    4. 4
      Michael Scrip
      127
    5. 5
      Xenon
      119
  • Tell a friend

    Love Neowin? Tell a friend!