Access is Denied:New DNS server with EMC San

I just added a new DNS+AD server to my environment and as soon as I did that, I had numerous users come up to me with issues connecting to our EMC SAN unit. We have a NX4 running with a Clarion system.

We are running a complete Windows environment with Server 2008 non-R1 AND R2 running as AD, DNS, and DHCP.

When the issue comes up, the user is prompted to enter their credentials when they try to access our local SAN unit. After entering those in, they'll get the same Windows prompt asking to re-enter their credentials, but it will also say Access is Denied. It is not exactly this screenshot, but it is VERY similar.

access denied
Is there some sort of trust issue between my new server and the SAN?

Does anyone have any idea on what's going on?
jumpassociatesAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
ChiefITConnect With a Mentor Commented:
There are differences in authentication between R2 and 08 server.

http://technet.microsoft.com/en-us/library/dd391932%28v=ws.10%29.aspx

Check the authentication part.
0
 
ChiefITCommented:
Typically, "Access Denied", means that it's not a block via say a firewall or trafficking data. Instead, the authentication database (Active Directory in this case) is not authenticating, like a bad username or password.

Can you logon to the SAN storage servers using the Local administrative passwords of the storage device. If so, you may have to re-join the domain.

Also, did adding this NEW server, as an AD server go well? Otherwise, you may have two domains with the same domain name. I know it sounds odd, but I have seen it happen. Did DCpromo go well, when adding the new DC, and can you check that using DCdiag utility.

I also notice that it's asking for a smart card. That mean you may be authenticating via PKI and CA server certificates. Is this storage server using PKI or Active Directory for access to the storage server.
0
 
jumpassociatesAuthor Commented:
Thanks for the response..

I checked the username and password, and the credentials are fine...It only happens with some of the users, but not all. Would re-adding the SAN to the domain fix this issue?

Adding the new server as AD and DNS went well (as far as I know). AD replicated over to this new server so I figured it was good. DNS works because the clients were able to ping this SAN using our internal alias (even after a dns flush).

The screenshot I embedded wasn't the actual screenshot, but very similar. I took it off the web, but the point I was trying to relay was that Windows was popping up with the authentication prompt and an Access is Denied msg. The smart card thing is unrelated...sorry!

Is there anything I can check to see what exactly is authenticating my users to the SAN? Maybe there is something in the SAN I have to configure to allow authentication from this new server?
0
 
ChiefITCommented:
Ok, so what' s different with this DC. You said after adding it, you started having problems.
0
 
jumpassociatesAuthor Commented:
that's the tricky thing....I don't know! heh

its a brand new 2008 R2 server that only has AD and DNS set up on it. The other servers are 2008, NON-R2.

I wonder if there is any type of trust relationship the SAN needs with this new server to pass on the credentials..but I don't know for sure.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.