one of my user regularly loses access to SOME network shares - windows

attached image - user view
One of my user quite regularly (~ once a week) loses access to some network shares. What's important, at the same time other network shares (at the same server!!) are still available! The only working solution is log out and log in. Even rebooting client system doesn't work! She need to log out and log in
client os: Windows 10 (domain member)
server os: windows 2019 Server (domain controller)
And just to clarify: I'm not talking about unmapped network drive. Drive is still mapped, but access to some shares is forbidden! (see attached image)
I even tried disconnect computer from domain and rejoin .

Related

How to prevent multiple users from simultaneously accessing an Azure VM?

We created a VM as a replacement for physical machine with rarely used software on it.
When I tested it I noticed when a second user accesses the VM, the first user is kicked out and sees the message "You have been disconnected because another connection was made to the remote computer".
However, on another VM that wasn't set up by me, I'm getting the warning "Another user is signed in. If you continue, they’ll be disconnected. Do you want to sign in any way?"
What VM or Windows setting(s) do I need to change to display this message on the new VM?
I found the following answer on serverfault more helpful than the "copy & paste reply" by Jabbar.
The message you want will appear for the 3rd user on Windows server:
By default a Windows VM in Azure is configured for remote administration, which allows up to 2 users to access the machine to undertake remote administration of that machine. If a third user attempts to connect you will see this message. you will see this if a user has disconnected, but not logged off so their session is till running and using a slot.
Windows Server will, by default, let 2 concurrent users log on. Windows 10, will only allow only 1 user.

How to restore access to a windows shared folder after host password change?

I have a shared folder on a windows 10 host machine. I could access it from a windows 10 client machine, where I had set "remember credentials" when first accessing the share. I changed the password on the host. Now the client cannot access the shared folder. That was expected. But I could not find a way on the client to allow the user to re-establish access to the shared folder.
I expected it would ask for credentials again. However I got a network error saying that windows cannot access the host machine.
Based on a number of entries on various forums, I tried a few things. The credentials manager on the client does not show the host. I stopped and restarted file and printer sharing on the client, without any change in the result. Network diagnosis and the windows troubleshooter gave no help.
The problem was due to some previous connections remaining in the network table, even though disconnected, as presented by the "net use" command from the command prompt.
>net use
Status Local Remote Network
--------------------------------------------------------------------------
Disconnected \\192.168.1.71\IPC$ Microsoft Windows Network
Disconnected \\HOST\IPC$ Microsoft Windows Network
After deleting them (via "net use /delete") the next attempt to access the host asked for credentials. Yay!
I began the path to the solution when I tried
net use z: \\host\shared /user:admin password
which gave system error 1219 stating multiple connections to a server are not allowed. Disconnect all previous connections and try again. Obviously, even though known to be disconnected, the entries prevented reconnection.

Using Server USB SmartCard reader

i'm running a Terminal Server (Windows Server 2012 R2)
And have a big problem accessing smart cards (in my setting German "Gesundheitskarten") on our Terminal Server in RDP Sessions. These cards are not used to provide login to a program, but to transmit data like Insurance Number, Street, Postal Code etc... to our Database.
The Problem is, that the Smart Card reader (https://www.identiv.com/products/smart-card-readers/contact-smart-card-readers/utrust-2700-r-contact-smart-card-reader) which is attached to the Server (via USB) is showing in the device manager but not accessible in an RDP Session. The manufacturers test programm says that the Smart Card Ressource Manager is NOT Running (which isn't true) which indicates the the device is not accessible.
When i logon directly on the server (without RDP) the reader works fine. (Logged in as Admin or User)
I would try to connect the reader to the client device, but there a numerous reasons against it. Just to name a few: We have all sorts of clients (Mac/Android/iOs/Windows) who need access to the reader when they are near our front desk. Mobile Devices and Macs do not support SmartCard redirection. Also the Application which reads the Cards is unknown to support the redirection setup.
(Just for clarification, i don't want to give our users direct physical access to the Server - they use the app via RDP or mainly via Remote Resources)
Is there any way to map/bind the USB Smart Card Reader to a user also in an RDP Session which is connected to the Server? Is there any group policy setting i forgot?
You have to crack WinSCard.dll and SCardSvr.dll.
Refer to this page: http://lifayk.blogspot.co.uk/2012/07/windows-smart-card-subsystem-and-remote.html
I had tested the method and it works on Windows 2012 R2 Standard and Dataceneter.

Browsing UNC Paths with a Mobile Emulator/Device

What would cause an emulator unable to view the network UNC shares? When attempting to open any computer on the network via 'Open Path' or Internet Explorer, I am tossed "The network path was not found." followed by "Network resource cannot be found or you do not have permission to access the network." Things to note:
Connecting to the IP address does not work.
I am able to browse the internet via the emulator.
ActiveSync has been configured appropriately and I have installed the needed drivers for the adapter, and the emulator is cradled.
Firewall disabled/setup with correct forwardings.
Network folder permissions are setup properly.
What strikes me as odd is I have also attempted to browse UNC shares on a physical Windows Mobile 5 device, with the same issue. This leads me to believe something within our network settings is causing this but I'm not sure where to start. People have recommended checking ActiveDirectory security policies, but what policies affect UNC shares? This has turned into a rather serious issue because until I am able to resolve this, I am unable to go through with setting up merge replication. Has anyone experienced this and successfully resolved this issue?
Your network is looking for authentication.
I get that here at my work place, too.
As long as your network key is entered correctly, you should be able to try browsing to that same path 2 or 3 more times, still getting those same obnoxious ("The network path was not found." followed by "Network resource cannot be found or you do not have permission to access the network.") messages.
At one of those times, a login box should appear where you type in a Username, Password, and Domain.
You will also have the ability at this point to save your password so you are not prompted for it every time you attempt to access something across your network.
Now here's the real crapper: After you save your Username/Password combination, there does not appear to be any mechanism within the Windows Mobile device to change that password after it expires on your network. You will never be prompted again to change that password, either. You will only get one of those silly messages above because your password is incorrect.
The only solution to this seems to be to reset the device. I have had a question open with Microsoft for about 3 years now, and it has been passed from one forum to another. I've finally just decided that it must not be able to be done, but Microsoft has never written back to tell me that.

Host unavailable when user is logged off

I am facing a problem that I discovered while I was implementing a small client/host application.
The client side runs Windows 7 64-bit and machine never turns off but user is automatically logged off after 30 minutes of inactivity. When user is automatically logged off the host becomes unreachable, first I thought the problem was isolated to my application, but after som investigation I discovered that resources and vnc server is also unavailable.
The question might be a bit off limit for this forum but I can't find any reasonable explanation somewhere else. Does anyone know how I can keep user being logged off automatically but with the host still reachable on the network?
You need to have them as services.
Are you connecting to some port opened by a server/service which runs as the user? If so, that's the reason. To circumvent, you need to have the service installed/started independently of the user, for entire machine (using administrator priviledges)

Resources