Solved

Access network drive via VPN.  Get System Error 5 has occurred.

Posted on 2009-07-16
8
761 Views
Last Modified: 2012-05-07
I have problem with remote users, when they try and access network shares.  We are using Juniper Netscreen VPN, and when try to connect to share, say resourse not available.  

So id you do a Net View \\ShareName, it gives "System Error 5 has occurred. Access Denied".

Not sure why this has started happening, as been working for years.  I have checked permissons and all looks ok, and no AD replication issues.  Not sure whats causing the problem.

I can ping all the servers that have the shares.   Any Suggestions on how to fix this would be very appreciated.
0
Comment
Question by:daviesgroup
8 Comments
 
LVL 10

Expert Comment

by:mcrossland
ID: 24871238
Can you ping the server that has the share on it from a vpn client?
What is the share sitting on?  Windows server, network storage device, other?
0
 
LVL 10

Expert Comment

by:mcrossland
ID: 24871283
From Microsoft's website:
The following reasons may cause to the error message:
 
    1. Time Synchronization problem.
 
    2. Missing permission to access the remote computer (Share, NTFS, GPO).
 
    3. Firewall and/or third party product may eliminate connection to the remote computer.
 
    4. The computer account isn't disable (Or have expired computer account password)
 
             or doesnt exiting in the domain.
 
    5. Active Directory replication problem may occur.
 
0
 
LVL 1

Expert Comment

by:rickrythe
ID: 24871332
Have their password expired? Try changing their passwords, I have seen before when someone was trying to access a network drive and they were denied because of the password expiriing. Needed to update password.
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 38

Expert Comment

by:ChiefIT
ID: 24871498
Use:

\\Sharename.domain.name\share

When mapping the drive
0
 

Author Comment

by:daviesgroup
ID: 24872008
I can ping the servers with the shares on them, they are just windows 2003 server shares.   I have tried resetting the passwords, but still no joy.
0
 

Expert Comment

by:DeNzMoR
ID: 24873358
go to start / run and type
rundll32.exe keymgr.dll,KRShowKeyMgr
and try to delete all ur password in it.
0
 
LVL 38

Accepted Solution

by:
ChiefIT earned 500 total points
ID: 24883414
The problem with trying to access a share through a VPN tunnel is that Netbios is NOT a routeable protocol. However, DNS is. This is why I suggested you use the DNS UNC path rather than the Netbios path.

You may be able to ping the VPN computers using the IP or DNS, but you probably have problems with pinging it by name, unless you have a WINS server between the sites.

Pinging and UNC paths are multi communications protocol utilities.

Pinging by IP is different than pinging by Netbios name and is different than pinging by DNS name:
Examples:
Ping server1
Ping server1.domain.name
Ping xxx.xxx.xxx.xxx
are three different ways to ping.

UNC path:
\\server1\share   Netbios path
\\server1.domain.name\share  DNS path
\\xxx.xxx.xxx.xxx\share  IP method to map to a share

Now, your error says error 5 access denied. That is a direct violation of the ACL (Access Control List). This means your Kerberos ticket doesn't match up to the ACL for access to the shares. Another guess that I have is, you mapped these drives a while ago and your passwords may have changed. You saved the credentials to the mapped drive and told it to logon to the mapped drive every time you log onto the computer. If your passwords have changed, those managed credentials will no longer work and you will get access denied error 5. To fix this, go to:

Control Pannel>>Users>>advanced>>managed Passwords>> and remove mapped network drive passwords. Then, remap the drive.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Office 365 vs. In-House 4 99
RV042 site to site vpn can ping but not access server via rdp 6 28
AWS Design\Cisco Meraki 4 23
Domain Controller FSMO 7 39
If you have done a reformat of your hard drive and proceeded to do a successful Windows XP installation, you may notice that a choice between two operating systems when you start up the machine. Here is how to get rid of this: Click Start Clic…
I've written this article to illustrate how we can implement a Dynamic Multipoint VPN (DMVPN) with both hub and spokes having a dynamically assigned non-broadcast multiple-access (NBMA) network IP (public IP). Here is the basic setup of DMVPN Pha…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question