Access shared folder with local user in a domain server

Question

Hello.

I've this situation:

• A WIN10 acting as server. It's in a domain.
• There are shared folders here, one public and another accesible by a domain group.
• I wan't to change this to only one folder accesible by a simple local user auth, not in domain. Like "myuser" "mypassword-1231231" or whatever.

How I can do it?
If I create a local user and configure in the folder, when I try to access, I get only an error. I wan't to get the "typical" prompt asking for user/password, despite PC is in domain.

I read that changing an option in advanced network options (unable the auto-login) will work, but I haven't this option (because the system is on a domain, I guess).

Many many thanks!!

Answer 1

Hi there,

When using a local account to access a domain network share, you will be prompted to enter the user credential for the domain. Please note that all servers in a domain must be passed domain credentials. If the credentials passed are in a different context, then the file servers (member servers) of the domain will attempt to check their local user accounts only. If the credentials do not match, then the user is prompted for valid credentials (or access is not permitted).

In your situation, the users are logging locally on the clients. This creates a user session in the LOCALMACHINE\USERNAME context. Because the user is not in the domain context, DOMAIN\USERNAME, any attempts to connect to domain resources will require either a server local account that matches the local machine credentials or a prompt for a new username/password.

It is recommended to use domain users to access the domain resources. Meanwhile, if you insist, as a workaround, local accounts on each member server where the shared folders are stored will have to be created to directly map to the same username/password combinations the users are using on each local machine

---

--If the reply is helpful, please Upvote and Accept it as an answer--

Answer 2

Hi!
Thanks for your answer.
I shared folder (a new resource) with the local machine user, but in my pc (logged with my domain/user domain) when I try to access, only an error "Windows can't obtain access..." and never the typical "request user" prompt.

Even if I try to do with "Connect to network drive" where I could force an user, I also have an error (despite I'm forcing the machine\myuser login).

There are any way to do it?
Thanks!!!

Answer 3

There are share permissions and there are file+folder permissions. The share permissions act as a filter to the file+folder permissions. So if the file+folder permissions show "everyone:full", but the share permissions only have "everyone:read", then when any user accesses the files via the share they will only be able to read (not update) the files.

When I share a folder I always use the "Advanced Sharing" button. I never use the "Share" button because it disables permission inheritance on that folder. I prefer to manage folder permissions myself.

So start by analyzing the share permissions.

Your local account will be able to access the share (typically) via it's name, or "everyone" or "authenticated users". If you only have Domain Users, that won't work.

What do you have listed in the share permissions? What is listed in the file/folder permissions?

Answer 4

Hi!
Thanks for answer.

Testing now I have only the local user created (nothing about domain users). Neither users allowed.

But in my personal PC (logged with a domain user) I just got an error, not the user/password prompt.

Even if I try to do as network resource, where I can force user:

I don't know how to do it :(

What I want is by default Windows asking for user/password when you try to enter like in the 4th (grey) image.

Answer 5

Anyone? :)