how to create a local share on local computer

Hello,

we want to create a share on a computer. the name is services.domain.com. in
the dns I created a CNAME record "intranet" for "services" (A record). so i
can use intranet.domain.com like services.vescore.com.

But I do have some problems using network shares using my logical name
(intranet).

I added this reg key to the computer:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\lanmanserver\parameters]
"DisableStrictNameChecking"=dword:00000001

after this I can map to a share from any computer in the network to intranet:
net use Z: \\intranet\MyShare

The command completed successfully.

If I try this on the services computer localy, it does not work:
net use Z: \\intranet\MyShare
-> prompts for login and password -> I enter the correct credentials -> but
the error is:
System error 1326 has occurred.

Logon failure: unknown user name or bad password.

If I try:
net use Z: \\services\MyShare

It works!

What is the problem?

Thanks.

Christian


muelle60

In news:01394362-B68E-41F2-8242-(E-Mail Removed),
muelle60 <(E-Mail Removed)> stated, which I commented on
below:
> Hello,
>
> we want to create a share on a computer. the name is
> services.domain.com. in the dns I created a CNAME record "intranet"
> for "services" (A record). so i can use intranet.domain.com like
> services.vescore.com.
>
> But I do have some problems using network shares using my logical name
> (intranet).
>
> I added this reg key to the computer:
> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\lanmanserver\parameters]
> "DisableStrictNameChecking"=dword:00000001
>
> after this I can map to a share from any computer in the network to
> intranet: net use Z: \\intranet\MyShare
>
> The command completed successfully.
>
> If I try this on the services computer localy, it does not work:
> net use Z: \\intranet\MyShare
> -> prompts for login and password -> I enter the correct credentials
> -> but the error is:
> System error 1326 has occurred.
>
> Logon failure: unknown user name or bad password.
>
> If I try:
> net use Z: \\services\MyShare
>
> It works!
>
> What is the problem?
>
> Thanks.
>
> Christian

I assume the 'services' computer is using the same DNS server as the others.

From the services' computer, when you ping 'intranet', what does it resolve
to? Does it resolve to the same IP that intranet.vescore.com or
intranet.domain.com resolves to?

If you attempt to map to \\intranet.vescore.com (or dintranet.domain.com,
whichever you are using), does it work?

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Having difficulty reading or finding responses to your post?
Instead of the website you're using, I suggest to use OEx (Outlook Express
or any other newsreader), and configure a news account, pointing to
news.microsoft.com. This is a direct link to the Microsoft Public
Newsgroups. It is FREE and requires NO ISP's Usenet account. OEx allows you
to easily find, track threads, cross-post, sort by date, poster's name,
watched threads or subject.

It's easy:
How to Configure OEx for Internet News
http://support.microsoft.com/?id=171164

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft MVP - Directory Services
Microsoft Certified Trainer

Infinite Diversities in Infinite Combinations
Assimilation Imminent. Resistance is Futile
"Very funny Scotty. Now, beam down my clothes."

The only thing in life is change. Anything more is a blackhole consuming
unnecessary energy. - [Me]

Hello,

#1 there is only one domain: vescore.com (I use domain.com like foo.com)
#2 In the DNS there is a A record 172.16.129.100 for services.vescore.com
and a CNAME record intranet pointing to services.vescore.com
#3 So the ping returns for intranet und services 172.16.129.100

I think the problem is the authentification when I use net use.

net use \\services\MyShare uses the current credentials
net use \\intranet\MyShare uses ???, I think he can not resolve the
underlying machine, which he uses to check user name and password

Regards
Christian

"Ace Fekay [MVP]" wrote:

> In news:01394362-B68E-41F2-8242-(E-Mail Removed),
> muelle60 <(E-Mail Removed)> stated, which I commented on
> below:
> > Hello,
> >
> > we want to create a share on a computer. the name is
> > services.domain.com. in the dns I created a CNAME record "intranet"
> > for "services" (A record). so i can use intranet.domain.com like
> > services.vescore.com.
> >
> > But I do have some problems using network shares using my logical name
> > (intranet).
> >
> > I added this reg key to the computer:
> > [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\lanmanserver\parameters]
> > "DisableStrictNameChecking"=dword:00000001
> >
> > after this I can map to a share from any computer in the network to
> > intranet: net use Z: \\intranet\MyShare
> >
> > The command completed successfully.
> >
> > If I try this on the services computer localy, it does not work:
> > net use Z: \\intranet\MyShare
> > -> prompts for login and password -> I enter the correct credentials
> > -> but the error is:
> > System error 1326 has occurred.
> >
> > Logon failure: unknown user name or bad password.
> >
> > If I try:
> > net use Z: \\services\MyShare
> >
> > It works!
> >
> > What is the problem?
> >
> > Thanks.
> >
> > Christian
>
> I assume the 'services' computer is using the same DNS server as the others.
>
> From the services' computer, when you ping 'intranet', what does it resolve
> to? Does it resolve to the same IP that intranet.vescore.com or
> intranet.domain.com resolves to?
>
> If you attempt to map to \\intranet.vescore.com (or dintranet.domain.com,
> whichever you are using), does it work?
>
> --
> Ace
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> Having difficulty reading or finding responses to your post?
> Instead of the website you're using, I suggest to use OEx (Outlook Express
> or any other newsreader), and configure a news account, pointing to
> news.microsoft.com. This is a direct link to the Microsoft Public
> Newsgroups. It is FREE and requires NO ISP's Usenet account. OEx allows you
> to easily find, track threads, cross-post, sort by date, poster's name,
> watched threads or subject.
>
> It's easy:
> How to Configure OEx for Internet News
> http://support.microsoft.com/?id=171164
>
> Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
> Microsoft MVP - Directory Services
> Microsoft Certified Trainer
>
> Infinite Diversities in Infinite Combinations
> Assimilation Imminent. Resistance is Futile
> "Very funny Scotty. Now, beam down my clothes."
>
> The only thing in life is change. Anything more is a blackhole consuming
> unnecessary energy. - [Me]
>
>
>

Greetings,

Is the computer that has the share joined to the domain? If so, is the
permissions of the share setup for Domain Users (or whatever group your
account belongs to)?

Also check to ensure the computer you are using to test the connection
inside the network has the server as the DNS.

Hope this helps,

--
Louis Vitiello Jr.
------------------------------
MCSE, MCSA, MCP, A+/N+
ERCP XP Pro / Net Concepts


"muelle60" <(E-Mail Removed)> wrote in message
news:CEA35198-30D6-4371-998C-(E-Mail Removed)...
> Hello,
>
> #1 there is only one domain: vescore.com (I use domain.com like foo.com)
> #2 In the DNS there is a A record 172.16.129.100 for services.vescore.com
> and a CNAME record intranet pointing to services.vescore.com
> #3 So the ping returns for intranet und services 172.16.129.100
>
> I think the problem is the authentification when I use net use.
>
> net use \\services\MyShare uses the current credentials
> net use \\intranet\MyShare uses ???, I think he can not resolve the
> underlying machine, which he uses to check user name and password
>
> Regards
> Christian
>
> "Ace Fekay [MVP]" wrote:
>
>> In news:01394362-B68E-41F2-8242-(E-Mail Removed),
>> muelle60 <(E-Mail Removed)> stated, which I commented
>> on
>> below:
>> > Hello,
>> >
>> > we want to create a share on a computer. the name is
>> > services.domain.com. in the dns I created a CNAME record "intranet"
>> > for "services" (A record). so i can use intranet.domain.com like
>> > services.vescore.com.
>> >
>> > But I do have some problems using network shares using my logical name
>> > (intranet).
>> >
>> > I added this reg key to the computer:
>> > [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\lanmanserver\parameters]
>> > "DisableStrictNameChecking"=dword:00000001
>> >
>> > after this I can map to a share from any computer in the network to
>> > intranet: net use Z: \\intranet\MyShare
>> >
>> > The command completed successfully.
>> >
>> > If I try this on the services computer localy, it does not work:
>> > net use Z: \\intranet\MyShare
>> > -> prompts for login and password -> I enter the correct credentials
>> > -> but the error is:
>> > System error 1326 has occurred.
>> >
>> > Logon failure: unknown user name or bad password.
>> >
>> > If I try:
>> > net use Z: \\services\MyShare
>> >
>> > It works!
>> >
>> > What is the problem?
>> >
>> > Thanks.
>> >
>> > Christian
>>
>> I assume the 'services' computer is using the same DNS server as the
>> others.
>>
>> From the services' computer, when you ping 'intranet', what does it
>> resolve
>> to? Does it resolve to the same IP that intranet.vescore.com or
>> intranet.domain.com resolves to?
>>
>> If you attempt to map to \\intranet.vescore.com (or dintranet.domain.com,
>> whichever you are using), does it work?
>>
>> --
>> Ace
>>
>> This posting is provided "AS-IS" with no warranties or guarantees and
>> confers no rights.
>>
>> Having difficulty reading or finding responses to your post?
>> Instead of the website you're using, I suggest to use OEx (Outlook
>> Express
>> or any other newsreader), and configure a news account, pointing to
>> news.microsoft.com. This is a direct link to the Microsoft Public
>> Newsgroups. It is FREE and requires NO ISP's Usenet account. OEx allows
>> you
>> to easily find, track threads, cross-post, sort by date, poster's name,
>> watched threads or subject.
>>
>> It's easy:
>> How to Configure OEx for Internet News
>> http://support.microsoft.com/?id=171164
>>
>> Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
>> Microsoft MVP - Directory Services
>> Microsoft Certified Trainer
>>
>> Infinite Diversities in Infinite Combinations
>> Assimilation Imminent. Resistance is Futile
>> "Very funny Scotty. Now, beam down my clothes."
>>
>> The only thing in life is change. Anything more is a blackhole consuming
>> unnecessary energy. - [Me]
>>
>>
>>

Hello,

again, we have one domain: vescore.com, all computers are in the domain, the
services and intranet is the same server!

I want to map a share on the local computer:

\\services\MyShare -> works
\\intranet\MyShare -> does not work

I use the same login account (local Administrator or a domain account). If I
use the pyhsical computer name it works local, it does not work if I use the
logical name.

And both methods work if I map the share from another computer in the domain.

Can it be that the computer does not know the login accounts if I use the
logical computer name for local login?

Regards
Christian

"Louis Vitiello Jr." wrote:

> Greetings,
>
> Is the computer that has the share joined to the domain? If so, is the
> permissions of the share setup for Domain Users (or whatever group your
> account belongs to)?
>
> Also check to ensure the computer you are using to test the connection
> inside the network has the server as the DNS.
>
> Hope this helps,
>
> --
> Louis Vitiello Jr.
> ------------------------------
> MCSE, MCSA, MCP, A+/N+
> ERCP XP Pro / Net Concepts
>
>
> "muelle60" <(E-Mail Removed)> wrote in message
> news:CEA35198-30D6-4371-998C-(E-Mail Removed)...
> > Hello,
> >
> > #1 there is only one domain: vescore.com (I use domain.com like foo.com)
> > #2 In the DNS there is a A record 172.16.129.100 for services.vescore.com
> > and a CNAME record intranet pointing to services.vescore.com
> > #3 So the ping returns for intranet und services 172.16.129.100
> >
> > I think the problem is the authentification when I use net use.
> >
> > net use \\services\MyShare uses the current credentials
> > net use \\intranet\MyShare uses ???, I think he can not resolve the
> > underlying machine, which he uses to check user name and password
> >
> > Regards
> > Christian
> >
> > "Ace Fekay [MVP]" wrote:
> >
> >> In news:01394362-B68E-41F2-8242-(E-Mail Removed),
> >> muelle60 <(E-Mail Removed)> stated, which I commented
> >> on
> >> below:
> >> > Hello,
> >> >
> >> > we want to create a share on a computer. the name is
> >> > services.domain.com. in the dns I created a CNAME record "intranet"
> >> > for "services" (A record). so i can use intranet.domain.com like
> >> > services.vescore.com.
> >> >
> >> > But I do have some problems using network shares using my logical name
> >> > (intranet).
> >> >
> >> > I added this reg key to the computer:
> >> > [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\lanmanserver\parameters]
> >> > "DisableStrictNameChecking"=dword:00000001
> >> >
> >> > after this I can map to a share from any computer in the network to
> >> > intranet: net use Z: \\intranet\MyShare
> >> >
> >> > The command completed successfully.
> >> >
> >> > If I try this on the services computer localy, it does not work:
> >> > net use Z: \\intranet\MyShare
> >> > -> prompts for login and password -> I enter the correct credentials
> >> > -> but the error is:
> >> > System error 1326 has occurred.
> >> >
> >> > Logon failure: unknown user name or bad password.
> >> >
> >> > If I try:
> >> > net use Z: \\services\MyShare
> >> >
> >> > It works!
> >> >
> >> > What is the problem?
> >> >
> >> > Thanks.
> >> >
> >> > Christian
> >>
> >> I assume the 'services' computer is using the same DNS server as the
> >> others.
> >>
> >> From the services' computer, when you ping 'intranet', what does it
> >> resolve
> >> to? Does it resolve to the same IP that intranet.vescore.com or
> >> intranet.domain.com resolves to?
> >>
> >> If you attempt to map to \\intranet.vescore.com (or dintranet.domain.com,
> >> whichever you are using), does it work?
> >>
> >> --
> >> Ace
> >>
> >> This posting is provided "AS-IS" with no warranties or guarantees and
> >> confers no rights.
> >>
> >> Having difficulty reading or finding responses to your post?
> >> Instead of the website you're using, I suggest to use OEx (Outlook
> >> Express
> >> or any other newsreader), and configure a news account, pointing to
> >> news.microsoft.com. This is a direct link to the Microsoft Public
> >> Newsgroups. It is FREE and requires NO ISP's Usenet account. OEx allows
> >> you
> >> to easily find, track threads, cross-post, sort by date, poster's name,
> >> watched threads or subject.
> >>
> >> It's easy:
> >> How to Configure OEx for Internet News
> >> http://support.microsoft.com/?id=171164
> >>
> >> Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
> >> Microsoft MVP - Directory Services
> >> Microsoft Certified Trainer
> >>
> >> Infinite Diversities in Infinite Combinations
> >> Assimilation Imminent. Resistance is Futile
> >> "Very funny Scotty. Now, beam down my clothes."
> >>
> >> The only thing in life is change. Anything more is a blackhole consuming
> >> unnecessary energy. - [Me]
> >>
> >>
> >>
>
>
>

In news:0A9EAAF4-A053-43C7-B713-(E-Mail Removed),
muelle60 <(E-Mail Removed)> stated, which I commented on
below:
> Hello,
>
> again, we have one domain: vescore.com, all computers are in the
> domain, the services and intranet is the same server!
>
> I want to map a share on the local computer:
>
> \\services\MyShare -> works
> \\intranet\MyShare -> does not work
>
> I use the same login account (local Administrator or a domain
> account). If I use the pyhsical computer name it works local, it does
> not work if I use the logical name.
>
> And both methods work if I map the share from another computer in the
> domain.
>
> Can it be that the computer does not know the login accounts if I use
> the logical computer name for local login?
>
> Regards
> Christian

Christian, the issue appears to be an NTLM related authentication issue. If
you map using the actual computer's NetBIOS name, then it will use the
current logged on user's access token. A CNAME will not use this and
therefore you will need to supply credentials. The reg entry is good for
resolving, but can't be mapped or made to use the access token for
authentication. One way to map it is to physically go to the machine, and
map the drive by either using Windows Explorer, Tools, Map Drive, supply the
UNC and click on "use a different username". You can also batch it by using:

net use \\intranet\MyShare /user:username password /persistent:yes

(The persistent parameter will map it each time a user logs on).

Ace

Hello,

yes I know this and I also used these options (/user), but it does not work.

I used the local admin account and a domain account, but no success.

The error message is:

System error 1326 has occurred.

Logon failure: unknown user name or bad password.

Any other ideas?

Regards
Christian

"Ace Fekay [MVP]" wrote:

> In news:0A9EAAF4-A053-43C7-B713-(E-Mail Removed),
> muelle60 <(E-Mail Removed)> stated, which I commented on
> below:
> > Hello,
> >
> > again, we have one domain: vescore.com, all computers are in the
> > domain, the services and intranet is the same server!
> >
> > I want to map a share on the local computer:
> >
> > \\services\MyShare -> works
> > \\intranet\MyShare -> does not work
> >
> > I use the same login account (local Administrator or a domain
> > account). If I use the pyhsical computer name it works local, it does
> > not work if I use the logical name.
> >
> > And both methods work if I map the share from another computer in the
> > domain.
> >
> > Can it be that the computer does not know the login accounts if I use
> > the logical computer name for local login?
> >
> > Regards
> > Christian
>
> Christian, the issue appears to be an NTLM related authentication issue. If
> you map using the actual computer's NetBIOS name, then it will use the
> current logged on user's access token. A CNAME will not use this and
> therefore you will need to supply credentials. The reg entry is good for
> resolving, but can't be mapped or made to use the access token for
> authentication. One way to map it is to physically go to the machine, and
> map the drive by either using Windows Explorer, Tools, Map Drive, supply the
> UNC and click on "use a different username". You can also batch it by using:
>
> net use \\intranet\MyShare /user:username password /persistent:yes
>
> (The persistent parameter will map it each time a user logs on).
>
> Ace
>
>
>
>

In news:1DD87C73-2E23-4549-AC6E-(E-Mail Removed),
muelle60 <(E-Mail Removed)> stated, which I commented on
below:
> Hello,
>
> yes I know this and I also used these options (/user), but it does
> not work.
>
> I used the local admin account and a domain account, but no success.
>
> The error message is:
>
> System error 1326 has occurred.
>
> Logon failure: unknown user name or bad password.
>
> Any other ideas?
>
> Regards
> Christian

Hmm,

This has always been an issue with CNAMES. Curious, from what operating
system to what operating system are you trying to map?

See if this helps:
http://www.chicagotech.net/systemerr...bad%20password.

I assume that you read this article and how you were aware of the
DisableStrictNameChecking reg entry?
281308 - Connecting to SMB Share on a Windows 2000-Based Server May Not Work
with an Alias Name [Doesn't work with CNAMES]:
http://support.microsoft.com/?id=281308

Ace

Hello,

as I said: From any pc it works, but not on the local machine.

Yes I know the kb-article and I added already this reg entry, because of
this it works from remote machines.

But I dont know, why it dont work localy.

Any ideas?

Thanks.

Regards
Christian

"Ace Fekay [MVP]" wrote:

> In news:1DD87C73-2E23-4549-AC6E-(E-Mail Removed),
> muelle60 <(E-Mail Removed)> stated, which I commented on
> below:
> > Hello,
> >
> > yes I know this and I also used these options (/user), but it does
> > not work.
> >
> > I used the local admin account and a domain account, but no success.
> >
> > The error message is:
> >
> > System error 1326 has occurred.
> >
> > Logon failure: unknown user name or bad password.
> >
> > Any other ideas?
> >
> > Regards
> > Christian
>
> Hmm,
>
> This has always been an issue with CNAMES. Curious, from what operating
> system to what operating system are you trying to map?
>
> See if this helps:
> http://www.chicagotech.net/systemerr...bad%20password.
>
> I assume that you read this article and how you were aware of the
> DisableStrictNameChecking reg entry?
> 281308 - Connecting to SMB Share on a Windows 2000-Based Server May Not Work
> with an Alias Name [Doesn't work with CNAMES]:
> http://support.microsoft.com/?id=281308
>
> Ace
>
>
>
>

In news:E558FF25-E906-4D8B-9882-(E-Mail Removed),
muelle60 <(E-Mail Removed)> stated, which I commented on
below:
> Hello,
>
> as I said: From any pc it works, but not on the local machine.

Then may I *assume* it's XP? Or any other operating system?

>
> Yes I know the kb-article and I added already this reg entry, because
> of this it works from remote machines.

I was merely asking *IF* that was the article.

>
> But I dont know, why it dont work localy.

Probably because of what I posted earlier. My original thought was that it
is trying to authenticate with a matching access token with the actual
NetBIOS name of the machine (kind of like the same function when you use
nbtstat) and it won't accept a CNAME for an authentication source.
FYI, for what it's worth, here's info on the nbtstat command:
Understanding an Nbtstat -n output - Microsoft Windows 2000 Server
Documentation:
http://www.microsoft.com/windows2000...sReference.htm


Maybe you can *force* the machine itself into believing it has TWO NetBIOS
names, one of them being the other one.

How can I define multiple NetBIOS names for a machine:
http://www.windows2000faq.com/Articl...rticleID=14475

Windows NT Windows Names Aliases - cnames and dupe names:
http://www.experts-exchange.com/Oper..._20410956.html


> Any ideas?

If that doesn't work, than I'm fresh out of ideas.

Ace