Domain Controller Denying Access to our Macs

Posted on 2006-03-27
Last Modified: 2007-12-19
I just upgraded a Windows 2003 (R2) server to a domain controller. Everything is working fine except our two Macintosh machines (OS 10.3) cannot access their file share anymore. PC's can access this file share just fine. The same users that work on the Macs can use a PC to access the folder, and that also works. The console error I get on the MAC is

"mount_smbfs: tree connect phase failed: syserr = Permission denied
mount_smbfs: main(lookup): bad keychain entry"

Again, this was working just fine before we promoted this server to a domain controller.
Any ideas anyone? Any help would be appreciated!
Question by:mckeough
    LVL 9

    Expert Comment

    THis may or may not help you, but looks like you.
    click on the the first section link "Active Directory Introduction"
    Hopefully not a waste of your time, but a great resource for Mac Authentication on AD networks.

    Author Comment

    Sorry, that doesn't help. We need to figure out why we're being denied permission even though we just created another MAC share, made sure the Macs were bound to the domain, etc...
    LVL 9

    Accepted Solution

    My apologies for not catching the jest of the situation. I thought you added a Domain Controller vs. you were on a workgroup prior. You just meant you have an existing non-DC you upgraded to be a DC......... that mac's can't get to shares. Sorry.

    When I have had this ocurr with other servers all of a sudden loosing permissions to a Share it has been a broken secure link between them and the domain.....removing them from the domain and then re-adding fixed it. This may not even be the issue, but if that Secure Channel is gone that is the only way to correct. Just something to try that can't hurt anything but a loss of time to try it.


    Author Comment

    Thanks! That worked!

    Featured Post

    How to improve team productivity

    Quip adds documents, spreadsheets, and tasklists to your Slack experience
    - Elevate ideas to Quip docs
    - Share Quip docs in Slack
    - Get notified of changes to your docs
    - Available on iOS/Android/Desktop/Web
    - Online/Offline

    Join & Write a Comment

    It is a known fact that servers reach the end of their lives. Some get there quicker than others, based on age, manufacturer, usage and several other factors. However, if your organization has spent time deploying Microsoft's Active Directory server…
    This may not be a text book method to resolve VSS backup issues but it seemed to have worked on few of the Windows 2003 servers we had issues while performing a Volume Shadow Copy backup. If you have issues while performing a shadow copy backup usin…
    It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
    This video is in connection to the article "The case of a missing mobile phone (". It will help one to understand clearly the steps to track a lost android phone.

    734 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now