question

drClays avatar image
0 Votes"
drClays asked MotoX80 answered

I don't have access to network share by ip - windows server 2008r2/2012r2

Hey,

2 days ago I had a problem with energy in my data center and my servers were restarted.

After they UP I saw a problem with access to a network share by IP, for example:

Not working: \\10.0.0.20\c$
Working: \\server\c$

Access by IP doesn't work to file server(Windows Server 2008r2), database, and rdp(Windows Server 2012r2), but works to two domain controllers and hyper-v host.

I think it's a problem with NTLM but how to find a bug and fix it?

windows-serverwindows-active-directory
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

yagmoth555 avatar image
0 Votes"
yagmoth555 answered drClays commented

Hi

First, does the server changed IP in the restart ? can you do a "ping server" to validate it's still 10.0.0.20

Second point; It can happen with StrictNameChecking registry settings, please set it to 1 to disable it, to test it;

Registry location: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters
DWORD name: DisableStrictNameChecking
DWORD value: 1

· 4
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Servers have still the same IP address - it's set static

I can ping servers by ip and fqdn

0 Votes 0 ·

Perfect, then try the settings I gave you. It open the server to listen to any share/smb connection coming to the server that dont respect it's netbios name.

0 Votes 0 ·

I try to check it, but the servers don't have a problem with netbios name. It's the problem with access to share via IP

0 Votes 0 ·

I tried this registry but it didn't give anythink

0 Votes 0 ·
rr-4098 avatar image
0 Votes"
rr-4098 answered drClays commented

Are the servers that are failing, and the DC's that are working, on the same subnet or vlan? Are the network properties and advanced properties the same?

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Yes, all servers are in the same subnet and vlan.

All network properties and advanced properties are correct and the same

0 Votes 0 ·
rr-4098 avatar image
0 Votes"
rr-4098 answered drClays commented

Are there error's in the SMBClient and SMBServer event logs?

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I have some events - it's Netlogon - 3210 ID error

0 Votes 0 ·
drClays avatar image
0 Votes"
drClays answered

Does anyone have some ideas?

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MotoX80 avatar image
0 Votes"
MotoX80 answered

Does anyone have some ideas?



As I recall, this is a Kerberos problem. Do you have NTLM enabled?

https://www.bing.com/search?q=windows%20share%20kerberos%20logon%20failure%20ip

By default Windows will not attempt Kerberos authentication for a host if the hostname is an IP address. It will fall back to other enabled authentication protocols like NTLM. However, applications are sometimes hardcoded to use IP addresses which means the application will fall back to NTLM and not use Kerberos.


The simplest solution is to just use the server name and not the IP address.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.