CIFS and MS Windows Server 2003 Domain Controler

[Timothy P. Jackson]

I am trying to mount a drive on a MS Windows Server 2003 Domain Controler. I keep getting the error message "Connecting Share: DOS: Access denied"

Here is the screwy thing. I have five MS Windows Server 2003 servers. Only two of them are Domain Controlers. I can connect to every server except the two Domain Controlers. Does any one have any ideal as to what I am missing?

Here is the command I am using from the HP-UX 11.11 machine.

cifsmount //mniusg2/tpjc /tpjtest -U tpj

Thanks,
Tim Jackson
tpj@roisystems.com

[Helen French]

Is your HP server configured as part of that domain? Do you have permissions (probably admin) on the Windows domains? Can you connect these shares on other Windows systems?

The cifsmount command you are using is right.

[Timothy P. Jackson]

The HP-UX 11.11 server and all five MS Windows Server 2003 servers are all on the same domain. I have admin rights with the login I am trying to use. I have even tried to the administrator login, but I get the same message. This is driving me nuts! I can connect with no problem to the three non Domain Controlers and can't to the two Domain Controlers.

Thanks Again!
Tim

[Helen French]

One possible try will be: Log in as administrator, go to server manager and select the domain controller system. Check the shared drives and it's properties. Check the share properties and NTFS properties on these directories. Remember that your NTFS properties will overwrite shared properties.

Log in to another Windows client system (out of 3) and try mapping the same drive using the same user. Check if this happens only with HP-UX system or even with Windows. That way you can minimize the causes.

[Timothy P. Jackson]

I checked the NTFS permissions as well as the Share permissions and they are all set to full control. So I tried another approach. I installed a new MS Windows Server 2003 and down loaded all the patches available from Micorsoft. Then I Shared the "C" drive and tried to cifsmount it from the HP-UX machine, it worked just fine. Then I promoted the MS windows Server 2003 server to a domain controler and tried it again. This time it did not work. I had not changed anything but promoted it to a domain controler!?!.

[Timothy P. Jackson]

Just another update. I have tried the same share, with the same permissions and same user on all 5 servers, actually 6 now that I have created a new domain controller. The only ones that I cannot cifsmount to are the three domain controllers.

I also down loaded the latest version of CIFS client just to make sure I had all the bases covered.

Tim

[Krishna Prasad]

Can you do a cifslogin to the domain controller?

Also can you login to different Samba server other then the Windows Domain Controller?

[Timothy P. Jackson]

No, the 2003 domain controller will not let me cifslogin to it.

Just to narrow things down a bit, I installed a Windows 2000 Server machine and promoted it to a domain controller on the same domain and network that the MS Windows Server 2003 domain controlers are on. I had no problems attaching to it before or after it was promoted to a domain controller. So this looks like it is something new in MS Windows Server 2003.

Thanks for Everyone input.

Tim

[Steven E. Protter]

I think you need an account for the machine.

It needs to be pretty much like a user account with rights and abilities to map a drive.

You may have to do the cifs login with a password after the system is already up, in a /sbin/init.d script.

Give that a try if not already done. I've seen this question floating for days, but avoided it due to its title.

Believe it or not, I had to do the same thing to let our HP-UX boxes log into a W2K box a few months ago.

SEP

[Rene Wiesner]

Hello,

run into the same problem:
Using cifsmount to mount from a w2k file server. After upgrading to w3k I got access denied.
The admin of the windows machine found the solution - it's the new behaviour of using signed SMB packages (as default on w3k dc).
This could be disabled by a policy.

See also
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/windowsserver2003/proddocs/standard/570.asp