Local access to Administrative Share

[gsartin]

On Windows Server 2012 R2 on domain.



Lets say I have the following two DNS entries:

ComputerName = 1.1.1.1
NOTComputerName = 2.2.2.2

I can navigate to \\2.2.2.2\c$ without being prompted for credentials, just as expected.

I can navigate to \\ComputerName\c$ without being prompted for credentials, just as expected.

I can NOT navigate to \\NOTComputerName\c$ without being prompted for credentials, and even the local admin credentials will not let me in.

I can NSLOOKUP NOTComputerName and get back the proper IP.

From other computers I can navigate to this UNC with no problems.

Has anyone ran into this before?

 

[Tweak155]

If you just Ping NOTComputerName does it retrieve the correct IP? I'm not as familiar with NSLOOKUP, but I know Ping will use hosts file in case you have an entry in there.

It just seems like it's not navigating to the correct IP or possibly it is a mismatched domain and you need to specify the domain name with the admin credentials.

 

[gsartin]

Yes I can ping NOTComputerName.domain.com, it performs a DNS lookup, and sends/receives packets with no problem. I have no hosts file entries and don't need them on the domain. Also, I can navigate to \\2.2.2.2\c$ with no issues. I just can't navigate to \\fqdn2\c$.

 

[gsartin]

Let me clarify, both of my sample DNS entries are for the same server. One IP is fixed, and one IP is floating and would be moved to second server during a fail over event.

 

[Tweak155]

What is the message you get after typing in the admin credentials?

 

[gsartin]

What is the message you get after typing in the admin credentials?

"The specified network password is not correct."

 

[gsartin]

I resolved my issue with the following:

Disable Loop-back Check so you can access \\alias.domain.name\localshare

1. Open regedit.exe
2. Go to HKEY_LOCAL_MACHINE / SYSTEM / CurrentControlSet / Control / Lsa
3. Create REG_DWORD with name DisableLoopbackCheck and value 1
:thumbsup: