Windows 10: Check what credentials is windows sending when accessing an SMB share?

Hi,


I have a synology unit that is added to the microsoft AD as are all the PCs that access that unit. all the users are members of an AD group that has read/write permissions on a particular folder. When a user tries to access that folder, they get a message "windows cannot access..... you do not have permission....."

When i add that user's local synology account to the folder, they can access the folder. could it be that the user's computer is trying to access the folder using their local synology account credentials and not the AD credentials? is there a way to check what credentials windows is sending to access the synology SMB share?



Thanks,

Albert

:)

 

Win 10 PC accessing a Win 10 Everyone share prompted for credentials


I have a new Windows 10 Home computer and I've selected a folder and shared it. I've added Everyone to the Share Permissions list with Full Control.






I've selected "Turn off password protected sharing" in the Advance Sharing Center.






When I try to access the share with a Windows 7 laptop in the home it connects right away without a prompt for credentials. When I try to access the share from another Windows 10 device (Surface) there is a prompt for credentials and I am unable to access the shared folder. There are no common account names between machines on my home network.

On the Windows 10 machine which is trying to connect I have run Net use * /DELETE and removed all Windows Credentials using the Credentials Manager then rebooted both machines a few times. Still though the Windows 7 machine can access the share with no credentials and the Windows 10 machine can't access it at all.

My goal is to get the share working for the Windows 10 machine as it works for the Windows 7. Full access, no prompt for credentials. I've workaround steps that will provide access so that type of information isn't needed.

Thank you for taking the time to read my post and any help would be most appreciated.

 

Scheduled tasks run with elevated privileges can't access stored Windows credentials

It seems that after Creators update scheduled tasks run with elevated privileges ('run with highest privileges' option) can't access stored Windows credentials. Is that a bug or an intentional change and is there a recommended workaround?

Here's one way to reproduce the behaviour:

• Start Credential Manger and add some Windows share credentials.
• In a console window type 'cmdkey /list', which should list the added credentials
• Create a task in a task manager:
  • Trigger: on user logon
  • Action: run cmd.exe
  • Tick the 'run with highest privileges' option
• Reboot the machine and log in
• In the console window (let's call it 'console 1') opened from the scheduled task type 'cmdkey /list'. This most likely won't display the credentials added in step 1 and properly listed in step 2. ->
  This looks like a bug
• Now, without closing 'console 1' open another console window as an administrator (let's call it 'console 2') and type 'cmdkey /list'. This will properly list credentials added in step 1.
• Switch to 'console 1' and type 'cmdkey /list' again. This time the credentials are listed properly, unlike in step 5. It looks like an access to Windows credentials was somehow 'unlocked' by step 6.

 

Win 10 PC accessing a Win 10 Everyone share prompted for credentials

Here is the solution for this issue :

1 Right click on the folder that you want to share
2. Go to Properties
3. Go to Security Tab then click Edit on group and usernames
4. Click Add and on the user and group window click advance
5. Click Find Now and look for Everyone on the Search results, Click OK to close the window and OK again
6. Give the control you need for Everyone and click "OK"

That should make that folder accessible without prompting for windows credentials