Unable to access domain shares from a non domain computer

Discussion in 'Windows Networking' started by Joe Thomas, Jun 22, 2006.

  1. Joe Thomas

    Joe Thomas Guest

    Hi,

    We have a domain controller that is also a file server running W2k3 SP1.
    There are shares defined on this machine. All machines that are connected to
    the domain can access the shares without problem. We have some machines that
    are not allowed to join the domain. However I need users who have domain
    accounts to be able access their shares from this non domain machine. Can I
    access the domain shares from a XP Pro SP2 machine that is not connected to
    the domain using valid domain accounts?

    When I key in \\filesvr_computer\share_folder as the address in Windows
    explorer on the non-domain computer I get a username and password prompt. I
    use a valid domain account username and password of the form
    "domainname\username" and the domain password, the prompt appears a second
    time. When I key in the same info again it comes out with a "Windows cannot
    find "\\filesvr_computer\share_folder". Check the spelling ... " prompt. The
    share pathname and user information is surely correct. When I checked the
    filesvr_computer's Event security log I get a event id 533, saying "User not
    allowed to logon at this computer". Since the file server is also a Domain
    controller we don't not want users to logon locally on the domain controller.
    How can I get domain shares to be accessible on a non-domain computer using
    valid domain authentication?

    Thanks.

    Joe
    --------------
     
    Joe Thomas, Jun 22, 2006
    #1
    1. Advertisements

  2. That should work. Try the administrator account. Can you access it?

    Bob Lin, MS-MVP, MCSE & CNE
    Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
    How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
    Hi,

    We have a domain controller that is also a file server running W2k3 SP1.
    There are shares defined on this machine. All machines that are connected to
    the domain can access the shares without problem. We have some machines that
    are not allowed to join the domain. However I need users who have domain
    accounts to be able access their shares from this non domain machine. Can I
    access the domain shares from a XP Pro SP2 machine that is not connected to
    the domain using valid domain accounts?

    When I key in \\filesvr_computer\share_folder as the address in Windows
    explorer on the non-domain computer I get a username and password prompt. I
    use a valid domain account username and password of the form
    "domainname\username" and the domain password, the prompt appears a second
    time. When I key in the same info again it comes out with a "Windows cannot
    find "\\filesvr_computer\share_folder". Check the spelling ... " prompt. The
    share pathname and user information is surely correct. When I checked the
    filesvr_computer's Event security log I get a event id 533, saying "User not
    allowed to logon at this computer". Since the file server is also a Domain
    controller we don't not want users to logon locally on the domain controller.
    How can I get domain shares to be accessible on a non-domain computer using
    valid domain authentication?

    Thanks.

    Joe
    --------------
     
    Robert L [MS-MVP], Jun 22, 2006
    #2
    1. Advertisements

  3. Joe Thomas

    Joe Thomas Guest

    Hi Robert,

    If I use the administrator domain account I can access the share without
    problem, but I need the user domain account to be able to access the share
    from the non domain computer.

    Regards,

    Joe
     
    Joe Thomas, Jun 22, 2006
    #3
  4. If administrator can access it but the user, I would check the permission. Also try this command: net view \\servername\sharedname /u:domanname\username. Do you receive system error 5?

    Bob Lin, MS-MVP, MCSE & CNE
    Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
    How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
    Hi Robert,

    If I use the administrator domain account I can access the share without
    problem, but I need the user domain account to be able to access the share
    from the non domain computer.

    Regards,

    Joe
     
    Robert L [MS-MVP], Jun 22, 2006
    #4
  5. Joe Thomas

    Joe Thomas Guest

    Hi Robert,

    I have already checked the permissions and they shouldn't be a problem
    because the same share can be accessed by me when I login as a user on a
    domain connected computer. The net view command doesn't take /u as an option,
    it says "The option /u:mydomainname\myusername is unknown", any other syntax
    you want me to try?

    Regards,

    Joe
     
    Joe Thomas, Jun 23, 2006
    #5
  6. hi joe ,
    in a domain based environments , access to the objects can perform by a TOKEN
    ACCESS LIST .
    users obtain this token when they login to the Domain Controller , and that
    shows a user can access to what of resources on the network. when a resource
    is not i the domain , like your situation , the TOKEN ACCESS LIST can not
    define that resource to the users , becouse that resource in not in the
    directories of recourses of the DC.
    i guess u , create LOCAL username and password on the computers of your
    workgroup like the usernames and passwords of their Domain.
    babak fruzanfar (mcp2k3)
     
    babak via WinServerKB.com, Jun 23, 2006
    #6
  7. Joe Thomas

    Joe Thomas Guest

    Hi Robert,

    Instead of "net view" I tried "net use" and I got the following:-


    System error 2240 has occurred.

    The user is not allowed to log on from this workstation.


    Any idea on what changes to make to allow share to be accessible from a non
    domain computer?

    Regards,

    Joe
     
    Joe Thomas, Jun 26, 2006
    #7
  8. Joe Thomas

    Joe Thomas Guest

    Hi Babak,

    Even with same local user name and password as the domain account I can't
    access the share.

    Regards,

    Joe
     
    Joe Thomas, Jun 26, 2006
    #8
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.