asked on
Windows 10 issue with mapped drive
Been running some test PCs with Windows 10 installed and noticed this issue.
We currently have logon scripts which map a user to their needed network drives.
In this case, the mapped drive references an old server name which is actually a CNAME to the current server.
In Windows 7, this is working fine and the drives are mapped.
In Windows 10, when a user logs in, there is no drive mapped or error displayed.
It is when I try mapping it manually that I get the error "The target account name is incorrect."
Doing a ping test, the server name resolves fine and I can ping the server.
If I map it using the current server name, it works.
Is there a setting in Windows 10 I need to change?
We currently have logon scripts which map a user to their needed network drives.
In this case, the mapped drive references an old server name which is actually a CNAME to the current server.
In Windows 7, this is working fine and the drives are mapped.
In Windows 10, when a user logs in, there is no drive mapped or error displayed.
It is when I try mapping it manually that I get the error "The target account name is incorrect."
Doing a ping test, the server name resolves fine and I can ping the server.
If I map it using the current server name, it works.
Is there a setting in Windows 10 I need to change?
Windows NetworkingWindows 10Windows OSDNS
Last Comment
SeeDk
Can you map it in Windows 7 using the new name. If you can - change you login script to use the new name. If not then modify the login script to change it based on the OS
ASKER
Yes, it can and I had thought of changing the script but wanted to see if there is a way to fix it on Windows 10 without touching that.
I don't know the reason for the CNAME existing and would have to check if there are any applications relying on this naming before making a change.
I don't know the reason for the CNAME existing and would have to check if there are any applications relying on this naming before making a change.
ASKER
Found this in Event Viewer logs on the PC when it tried connecting to the share the first time.
Doing it a second or third time does not log an error although the same pop up error message appears.
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server server2$. The target name used was cifs/server1. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (DOMAIN) is different from the client domain (DOMAIN), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
Doing it a second or third time does not log an error although the same pop up error message appears.
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server server2$. The target name used was cifs/server1. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (DOMAIN) is different from the client domain (DOMAIN), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
ASKER CERTIFIED SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
ASKER
Solution found outside of EE.