Windows 10: Is failed login and access denied with SMB an expected behaviour?

We are using an IDS solution which frequently triggers multiple access denied and unsuccessful login alerts over the port 445. We took a network capture and identified the multiple failed login and access denied instances were present in the logs.However, there were no failed logins identified in the windows event logs and there were no windows event logs for access denied. We have seen some instances of interactive login attempt with credential like Hostname\user. However, this was not done by the user. Is this an expected behaviour. How can we prevent this automated login attempts. Many of t

:)

 

LAPTOP is not accessible ..... Access is denied.

SMB 1.0 is not required for sharing between two W10 machines, only for sharing with older systems such as XP. It's unnecessary here, but having it should not cause issues either. Share permissions set to 'Everyone - Full control' is one thing, but the ntfs permissions on the folder being shared also need to be set to allow access. I always turn off Password Protected Sharing on the PC doing the sharing, leaving it on (the default) often causes 'access denied' on trying to connect to the share. Turn On or Off Password Protected Sharing in Windows 10

 

Safety of Login credentials for SMB...

Ok so similar but slightly different question:

Background:

• Storage hosted by my Linksys WR32X Router (see screenshot) with authentication credentials
• SMB v1, v2, and v3 are all enabled on my Win10 PC via the "Enable Features" window (and I've restarted my PC)
• My Windows 10 account uses my MS Live email address as a username and I have 2-step authentication set up as well

A Timeline:

• The NAS successfully shows up and is accessible from the Network page in Win Explorer
• I've successfully mapped the storage to a Network Drive in Windows using the authentication credentials I set in my router's settings page (again see screenshot)
• When I try to access the SMB share via a separate device on my network (my FireTV device running Kodi 17--which supports up to SMB v3), I get caught in an endless loop of it asking for a username and password.
  • I've tried using the credentials I set in my router settings, which worked when I mapped the share to a network drive in windows, and it didn't work in Kodi
  • I've tried un-mapping and re-mapping the share to a network drive using my windows 10 account username and password instead of the credentials set in my router settings, which did not work for either mapping the drive in windows or for accessing it in Kodi
  • I also tried generating an app-specific password via my Microsoft account settings in case the 2-step authentication set on my account was causing the issue (much like you have to do to add your account to Outlook Desktop App when 2-step is set up)

I just want to access my SMB share from my FireTV device (or any network device for that matter) without having to create a new local user. I saw some responses saying that I need to set up a new local account and use it's credentials to map the drive and
then it should work, but is this REALLY necessary? It seems like a redundant workaround...

So, what if I don't want to create a new local user? I like having jut one account on my Win10 PC and that uses my
MS email address as the Win10 Account username.

Any suggestions? What am I missing here? Thanks in advance MS community!

 

Failed to login into dlink dnr-202l using microsoft edge

Hi Kalpana,

Thank you for your reply. I did what you suggested; but the same issue showed where failed to login with user ID and password; however, the same user ID and password work when using Internet Explorer.

First steps:

• Launch Microsoft Edge
• Click more options (...)
• Select "Settings"
• Click button "Choose what to clear" under "Clear browsing data"
• "Browsing history, Cookies and saved website data, Cached data and files" are selected.
• Click "Clear" button
• Open new tab by clicking "+" sign
• Enter IP address to open device (DNR-202L) login screen
• In the login dialog screen, enter the user ID and password and click "OK" button
• Dialog login screen shows again. Do this step 3 times and get message

Access Error: 401 -- Unauthorized

Access Denied, Authorization enabled.

Second steps:

• Launch Microsoft Edge in private mode
• Enter IP address to open device (DNR-202L) login screen
• In the login dialog screen, enter the user ID and password and click "OK" button
• Dialog login screen shows again. Do this step 3 times and get message

Access Error: 401 -- Unauthorized

Access Denied, Authorization enabled.

Please let me know, if there is anything I can provide to solve this issue.

Regards,

Glasgow