NAS logs says window user connects successfully, but windows says they dont have permission

---

HappyBovine wrote:

I mean that deleting all the active SMB connections, then readding them didn't work.

---

Did you include her credentials in the commands that added her back?

Yes, I included her username, and I got it to prompt for her password. 

"Net use [\\network location\directory] /user:[username@domain] * /p:yes"

I also looked in her credential manager, and confirmed her credentials were inputted there correctly. 

---

HappyBovine wrote:

Yes, I included her username, and I got it to prompt for her password. 

"Net use [\\network location\directory] /user:[username@domain] * /p:yes"

 

I also looked in her credential manager, and confirmed her credentials were inputted there correctly. 

---

This is puzzling, and I am not sure what you should try next.

A workaround would be to create a local user account for her on the NAS, give that account access to the share, and then put the local user credentials in the Windows credential manager on her PC.  That might not be consistent with your enterprise security policy though.

Have you taken a look at the PC of a user who does have access to this share?  Checking the credential manager, etc to see if there is something different about their setup?

So I got some progress, but its still not 100% working. 

The folder owner and group were originally set as "guest", but after changing the owner to an AD admin account we use for automating some things across our systems, and setting the group to "domain admins", she is now able to access the root of the shared directory, however she is still getting permission denied for all the subdirectories within the share. Is there some sort of directory permissions for the directories within the share? I cant seem to find anything like that in the UI. It doesn't make sense to me why changing the owner and group for the share would suddenly give her access like this, since its been working with our other users for years without this change. Luckily this change doesn't seem to affect the other users. 

I had checked her credential manager, and her credentials are good there. I don't mind trying to set her up with a local account just for herself, but it looks like simultaneous usage of AD accounts with local accounts isn't supported. We don't want to set up local accounts if it means we can no longer use AD authentication.

---

HappyBovine wrote:

The folder owner and group were originally set as "guest", but after changing the owner to an AD admin account we use for automating some things across our systems, and setting the group to "domain admins", she is now able to access the root of the shared directory, however she is still getting permission denied for all the subdirectories within the share. Is there some sort of directory permissions for the directories within the share?

---

Yes.  Go back to the "File Access" tab in the share permissions, and then use the "Reset" control on the bottom left.  That will recursively apply the ownership/group change to all folder and files in the share.

That is done in the background - there will be a message when it completes (that will also show up on the log page).  Generally it completes pretty quickly.

---

HappyBovine wrote:

It doesn't make sense to me why changing the owner and group for the share would suddenly give her access like this, since its been working with our other users for years without this change. Luckily this change doesn't seem to affect the other users. 

 

---

Windows has gotten more restrictive about "guest" over the years.  While that isn't really an explanation, personally I stopped using "guest" on my own NAS some years back.