Windows sharing and shared printers cannot be used properly

Question

Background description:

Server: win server 2012 R2
Client: win7 and win10

Fault description:

The client (some irregular users) cannot access the server's share normally. In the "my computer" address field, enter the shared address "\ \ 172.24.9.12" no response, no error report, no prompt, no link, etc

The results of packet capture are shown in the following figure: (the result is that one server has 222 packets returned, and one server does not have 118 packets. They are all on the same computer, 222 can access them normally)

Known conditions:

1. There is no rule restriction in LAN
2. The server has installed patches: kb4561673 (this patch may cause unable to print) and kb4567521 (it is said to fix the problem that kb4561673 cannot be printed)
3. The server firewall service is running but has been shut down
4. 172.24.201.118 and 172.24.201.222 are the same computer, 118 cannot access, 222 can access
5. After the server closes windows firewall, all clients can not service the server, and the server can access the client
6. Restart cannot be resolved
7. Win10 and win7 have appeared without any rules. Win7 encounters more problems
8. The sharing correlation in firewall rules has allowed traffic to pass through
9. If you view the SMB server log, you will find many prompts that SMB session authentication failed, but the clients corresponding to IP can access the share normally

10. The server is a printer sharing server
11. 172.24.201.118 other shared servers can be accessed

The known SMB protocol packet exchange is shown in the figure below

12. At present, the server does not return an error code or a valid uid when it encounters packet 3

Pls HELP ME

Answer 1

HI

1. Have your print server w2012r2 and win10 client joined the same domain? Or are they all in the same working group?

2.Can you enter the following command in the command prompt of the print server w2012r2 to see if you have set the security policy on this w2012r2 before?
gpresult /h c:\rds.html

Network access: Do not allow anonymous enumeration of SAM accounts and shares
https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-do-not-allow-anonymous-enumeration-of-sam-accounts-and-shares

3.“172.24.201.118 and 172.24.201.222 are the same computer, 118 cannot access, 222 can access”
(are these ip addresses the ip addresses of client computers ?)
172.24.66.228
172.24.201.118
172.24.201.222
Your print server ip address is 172.24.9.12

4.You run the following powershell command on the client computer
get-SmbClientConfiguration
You run the following powershell command on the problem printer server and other servers that this win10 client can access, and compare whether the SMBserver configuration information is the same?
Get-SmbServerConfiguration

Answer 2

HI
Is there any progress on your question?