Solved: share between Vista and Snap Server

[blin]

It's OK I fixed the problem myself.
To do it you need to alter the value of the LM authentication level to 2 in
VISTA.
This can be done by the following steps:

1) Click Start
2) Click Control Panel (not classic view)
3) Click System & Maintenance
4) Click Administrative Tools
5) Double Click Local Security Policy
6) On the left pane, click to expand Local Policies
7) On the left pane, click on Security Options
Now, on the right pane, near the bottom, click on
Network Security LAN Manager Authentication Level
9) On the drop down, change the default setting (NTLMv2 only) to
Send LM & NTLM - use NTLMv2 session if negotiated.

Hope this saves others the hours that I wasted!



"Ian" wrote:

> At work we have a Snap Server 1100 running Snap OS 4 shared on our workgroup.
> I have a new PC with Visa Business. When I try to logon to the Snap Server
> through the network using my username and password the logon is unsuccessful.
> I think the problem could be that Vista places a "\" in front of my username
> and the Snap Server doesn't recognise it, or allow backslahes in usernames.
>
> Is there a way I can login to the Snap Server from a Vista machine without
> removing all security off the server?
>
> thanks,
>
> Ian

[CLUT]

Hey,

I found this topic about the problem with vista and snap server. So i changed the setting to Send LM & NTLM - use NTLMv2 session if negotiated, and i hope that i can authenticate with the snapserver but not! I hope that someone can help me, beceause it's our file server and he is very important. I can't work without our snap server, so i hope someone here have any sugestion for me.

A lot of thanks,

CHristian

[chicagotech]

We need more information to help. Please post more details.

[CLUT]

Oke i'm sorry about it.

More details are:

My system is Vista Business
Snapserver is a snapserver Quantum, like this one

Uhm, i'm still working in a domain, but it does matter, beceause i tried in a workgroup and it also didn't work.

When i try to acces the snapserver, by ip adres or his name i get a new window (empty) and a couple seconds later the authenticate window.

So i put my username and password and after a couple of seconds, i see the authenticate window again.

I tried with more than one username. But it still not work.

I hope that this is enough information, but ask it to me if you need more!

Lot of thanks again,

Christian

[chicagotech]

As we know, some Snap Servers are not supported by Vista. Do you have latest firmware?

[CLUT]

As we know, some Snap Servers are not supported by Vista. Do you have latest firmware?

Yes we have... But what is the problem between Vista and snapserver, kan we fix it?

[chicagotech]

have you read the following post? In the last part of the post, it says, mapping with password may work. Try that and please post the result back.

Vista: Can’t access NAS,MAC, Linux ...
The fixed can be found this link: Solved: share between Vista and Snap Server - http://www.chicagotech.net/netforums/vi ... .php?t=306 ...
www.chicagotech.net/netforums/viewtopic.php?t=460

[CLUT]

have you read the following post? In the last part of the post, it says, mapping with password may work. Try that and please post the result back.

Vista: Can’t access NAS,MAC, Linux ...
The fixed can be found this link: Solved: share between Vista and Snap Server - http://www.chicagotech.net/netforums/vi ... .php?t=306 ...
www.chicagotech.net/netforums/viewtopic.php?t=460

So my result is negative. I tried to mapping with password by ip adress and servername but both are negative.

The message is: Can't find [servername] so i look to the settings of the securitiy center, and the firewall is completely off. So the problem is not the firewall. By pinging the server i get reply, so he's alive....

Christian

[Bill Castner]

What needs to be done is to match your Vista settings to that of the Snap Server.

• If the Server does not support NLMv2 at all, then you have to be sure that other older authentication methods are tried first.
• If the Server is configured for LM Hashes, you need to enable LM Hashing in Vista.

Then clear any existing stale credentials on your Vista keyring [*].
Reboot your computer.

Then try the authentication again.

As a final test, after making the Local Security Policy changes from above, create a new user account. Logon as the new user and try the access again. If this succeeds there are older credentials still stored for your original username that still have to be cleared, likely from drive mappings made with the /Persistence setting enabled. (It is so by default).

[*] You can do this exactly as in XP, using Control Userpassword2 - Advanced, or the User Account applet in Control Panel. Reboot after the clearing. Then do a Command Line invocation of NET USE to try an access to a Snap server share. In making the Command line argument, use the /savecred optional argument, and pass as well the /user optional argument. Do not include the password, but substitute the asterix '*' option to force prompting. This will force a new key entry on your credentials keyring for the Snap server map.

[CLUT]

What needs to be done is to match your Vista settings to that of the Snap Server.

• If the Server does not support NLMv2 at all, then you have to be sure that other older authentication methods are tried first.
• If the Server is configured for LM Hashes, you need to enable LM Hashing in Vista.

Then clear any existing stale credentials on your Vista keyring [*].
Reboot your computer.

Then try the authentication again.

As a final test, after making the Local Security Policy changes from above, create a new user account. Logon as the new user and try the access again. If this succeeds there are older credentials still stored for your original username that still have to be cleared, likely from drive mappings made with the /Persistence setting enabled. (It is so by default).

[*] You can do this exactly as in XP, using Control Userpassword2 - Advanced, or the User Account applet in Control Panel. Reboot after the clearing. Then do a Command Line invocation of NET USE to try an access to a Snap server share. In making the Command line argument, use the /savecred optional argument, and pass as well the /user optional argument. Do not include the password, but substitute the asterix '*' option to force prompting. This will force a new key entry on your credentials keyring for the Snap server map.

Thanks for help! I tried but it still not work but maybe i do something wrong. I'm not sure if our snap server is support NLMv2 but i can not look for it. So i set my Network Security LAN Manager Authentication Level to LM- and NTLM. I turned the LM hashing on but by theze settings my first Vista crash is born!!! Everytime when i try to access the snapserver i have again a frozen screen, and after a while vista restart.

So i begin to re-install vista, thats no problem beceause it's a test laptop. When i'm ready with installation i let you know

THanks Christian

Thank for help,

Christian

[blin]

also check these posts:

Access is denied when Vista accesses a FAT32 drive
http://www.chicagotech.net/netforums/vi ... =2790#2790

Vista: Logon failure unknown user name or bad password
http://www.chicagotech.net/netforums/vi ... php?t=1665

System error 1326 has occurred when using net use in Vista
http://www.chicagotech.net/netforums/vi ... php?t=1664

System error 5 when using net view command in Vista
http://www.chicagotech.net/netforums/vi ... php?t=1663

[davegillian]

Hi,

I have a similar problem with Vista denying access to my snap.

I followed your instructions but there is no "Local Security Policy" option in Administrative Tools...this may be because I have Vista Home Premium rather than Vista Business. Do you know another way to get around this problem?

Many thanks,

Dave

It's OK I fixed the problem myself.
To do it you need to alter the value of the LM authentication level to 2 in
VISTA.
This can be done by the following steps:

1) Click Start
2) Click Control Panel (not classic view)
3) Click System & Maintenance
4) Click Administrative Tools
5) Double Click Local Security Policy
6) On the left pane, click to expand Local Policies
7) On the left pane, click on Security Options
Now, on the right pane, near the bottom, click on
Network Security LAN Manager Authentication Level
9) On the drop down, change the default setting (NTLMv2 only) to
Send LM & NTLM - use NTLMv2 session if negotiated.

Hope this saves others the hours that I wasted!



"Ian" wrote:

> At work we have a Snap Server 1100 running Snap OS 4 shared on our workgroup.
> I have a new PC with Visa Business. When I try to logon to the Snap Server
> through the network using my username and password the logon is unsuccessful.
> I think the problem could be that Vista places a "" in front of my username
> and the Snap Server doesn't recognise it, or allow backslahes in usernames.
>
> Is there a way I can login to the Snap Server from a Vista machine without
> removing all security off the server?
>
> thanks,
>
> Ian

[chicagotech]

Try this:

1- Start - Run - Regedit
2- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControl... l\Lsa
3- Double click "LmCompatibilityLevel", and change the value from 0
"Default" to 1
4- Restart your computer.


Also please refer to Microsoft article 239869 for other OS.

1. Start Registry Editor (Regedit.exe).
2. Locate the following key in the registry:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\control\LSA\MSV1_0
3. On the Edit menu, click Add Value, and then add the following registry value:
Value Name: NtlmMinClientSec
Data Type: REG_WORD
Value: one of the values below:
• 0x00000010- Message integrity
• 0x00000020- Message confidentiality
• 0x00080000- NTLM 2 session security
• 0x20000000- 128-bit encryption
• 0x80000000- 56-bit encryption

4. Quit Registry Editor.

[davegillian]

Try this:

1- Start - Run - Regedit
2- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControl... l\Lsa
3- Double click "LmCompatibilityLevel", and change the value from 0
"Default" to 1
4- Restart your computer.

Hi,

Thanks for your help. This has partially worked although the value was initally "3" not the default value "0" as you stated. I changed it to "1" anyway and I've managed to gain access to the snap now...I can browse it, open, save etc but there are a couple of problems still.

Firstly when trying to open MS Access databases I get the error message:

"Microsoft Access cannot open this file. This file is located outside your intranet or on an untrusted site. Microsoft Access will not open the file due to potential security problems. To open the file, copy it to your machine or an accessible network location."

Second problem is certain things are still restricted within the snap. It seems to be just in terms of folders. If I right click and go to New > Folder it crashes explorer and when I reopen the folder numerous new folders (literally 100s...New Folder, New Folder[1], New Folder[2]...etc etc) are created! Also I can't move folders into others by dragging them. First of all I get told that a folder of the same name already exists, then I get asked if I want to merge them and if I say yes I get the error message "You need permission to perform this action".

My account has full permissions to the snap and need full access! I also can't move the access databases to a "secure location" as there are multiple users requiring access to them...hence getting the snap in the first place!!!

Any help you can offer would be greatly appreciated as this is driving me crazy and stopping me getting any work done!

Cheers,

Dave

PS. I've tried all of the above on 2 different Vista Home Premium laptops and I've had exactly the same problems therefore it is definately a Vista HP rather than a laptop issue!

[chicagotech]

I believe the first issue is Access security settings. I need to search our database to find the solution.

The second issue could be ownership issue if you have full permission on the sharing and security. Check the owner of the folder first.