Link to home
Create AccountLog in
Avatar of SeeDk
SeeDk

asked on

Windows 10 issue with mapped drive

Been running some test PCs with Windows 10 installed and noticed this issue.
We currently have logon scripts which map a user to their needed network drives.

In this case, the mapped drive references an old server name which is actually a CNAME to the current server.
In Windows 7, this is working fine and the drives are mapped.

In Windows 10, when a user logs in, there is no drive mapped or error displayed.

It is when I try mapping it manually that I get the error "The target account name is incorrect."
Doing a ping test, the server name resolves fine and I can ping the server.
If I map it using the current server name, it works.

Is there a setting in Windows 10 I need to change?
Avatar of Don Thomson
Don Thomson
Flag of Canada image

Can you map it in Windows 7 using the new name. If you can - change you login script to use the new name.  If not then modify the login script to change it based on the OS
Avatar of SeeDk
SeeDk

ASKER

Yes, it can and I had thought of changing the script but wanted to see if there is a way to fix it on Windows 10 without touching that.
I don't know the reason for the CNAME existing and would have to check if there are any applications relying on this naming before making a change.
Avatar of SeeDk

ASKER

Found this in Event Viewer logs on the PC when it tried connecting to the share the first time.
Doing it a second or third time does not log an error although the same pop up error message appears.

The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server server2$. The target name used was cifs/server1. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (DOMAIN) is different from the client domain (DOMAIN), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
ASKER CERTIFIED SOLUTION
Avatar of SeeDk
SeeDk

Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
Avatar of SeeDk

ASKER

Solution found outside of EE.