Windows 10: Safety of Login credentials for SMB...

How safe is it to enter login credentials in an app to allow it access to network drives?



I use multiple apps on Android & iOS to connect to my Windows laptop over SMB. This requires me to provide the app with my Windows Login Credentials, which is basically my Microsoft account username & password.


How safe is this process? Am I risking my account by providing this info to the app? Can the app or its developer misuse this information?

:)

 

SMB share credentials

Hi,

I have a synology unit that is added to the microsoft AD as are all the PCs that access that unit. all the users are members of an AD group that has read/write permissions on a particular folder. When a user tries to access that folder, they get a message "windows
cannot access..... you do not have permission....."

When i add that user's local synology account to the folder, they can access the folder. could it be that the user's computer is trying to access the folder using their local synology account credentials and not the AD credentials? is there a way to check
what credentials windows is sending to access the synology SMB share?

that server doesn't appear in Windows Credentials, but it's not asking for credentials at all, so something is going on

Thanks,

Albert

 

Intel AMT Security Issue Lets Attackers Bypass Login Credentials

Next up: security vulnerability found in every router ever with default login credentials...

 

Remote Desktop won't accept login credentials

Hi Robert,



Thank you for writing to Microsoft Community forum.

• Are you using a Microsoft account to login?
  
• Was the user name changed at any point of time?
  

Meanwhile, you may try the steps listed below and check if it works:

• Open Command prompt as an administrator on your local machine and type:
  gpedit.msc
  
• Navigate to the following location:
  
  Local Computer Policy\Computer Configuration\Administrative Templates\System\Credentials Delegation
  
• Click on ‘Allow Delegating Saved Credentials with NTLM-only Server Authentication’
  
• Enable the policy and click on ‘Show’ button in the options window below and enter the value
  ‘TERMSRV/*’ (without quotes) into the list. Apply the changes.
  
• Do the same thing for the following policies:
  
  Allow Delegating Saved Credentials
  
  Allow Delegating Default Credentials with NTLM-only Server Authentication
  
  Allow Delegating Default Credentials
  
• Make sure that ‘Deny Delegating Saved Credentials’ is not enabled or does not contain ‘TERMSRV/*’ in the list
  
• Close all windows, open a command prompt, and use
  ‘gpupdate /force’ command to apply the policy directly.
  

Once the update is complete, reboot the machine and see if you can remote login.



Regards,