John Clark
Extraordinary Member
- Joined
- Sep 8, 2016
- Messages
- 101
- Thread Author
-
- #1
I've been having a problem getting my computers to fully connect to each other on the network. My wife has a HP laptop with WIN 10 Home edition. My machine is a desktop with WIN 7 Pro. The desktop can see the laptop but cannot log on or access the laptop, while the laptop can log onto DT and access all shared directories. The info in the Credential managers are correct for both machines.
At one time the machines could access each other but with updates from Microsoft the connections were broken.
Attached are 2 files containing system and network info for both machines. I would like to find out how to solve this problem.
At one time the machines could access each other but with updates from Microsoft the connections were broken.
Attached are 2 files containing system and network info for both machines. I would like to find out how to solve this problem.
Attachments
Solution
Well the basic process of accessing an SMB resource via NTLMSSP is the following
Client sends a negotiate request
Server sends a negotiate response (to agree on smb version, NTLM mechanism and authentication provider )
Client uses the agreed upon smb version NTLM etc
Server sends a challenge to validate the account is correct, password
The challenge has a server challenge value
The client using the credentials creates a hash from that 16 bit value and sends it in the response
The server also hashes the 16 bit challenge and compares it with what the client is sending
So basically these hashed values are not match
The logical conclusion is the credentials are not correct or the hashing mechanisms are not the same (although for...
Client sends a negotiate request
Server sends a negotiate response (to agree on smb version, NTLM mechanism and authentication provider )
Client uses the agreed upon smb version NTLM etc
Server sends a challenge to validate the account is correct, password
The challenge has a server challenge value
The client using the credentials creates a hash from that 16 bit value and sends it in the response
The server also hashes the 16 bit challenge and compares it with what the client is sending
So basically these hashed values are not match
The logical conclusion is the credentials are not correct or the hashing mechanisms are not the same (although for...
John Clark
Extraordinary Member
- Joined
- Sep 8, 2016
- Messages
- 101
- Thread Author
-
- #21
They're within 2 seconds of each other.
John Clark
Extraordinary Member
- Joined
- Sep 8, 2016
- Messages
- 101
- Thread Author
-
- #22
They're within 2 seconds of each other.
John Clark
Extraordinary Member
- Joined
- Sep 8, 2016
- Messages
- 101
- Thread Author
-
- #23
The machines are within 2 seconds of each other.
Policy does not exist.
Policy does not exist.
John Clark
Extraordinary Member
- Joined
- Sep 8, 2016
- Messages
- 101
- Thread Author
-
- #25
Sorry about the multiple post, did not realize that we moved to second page.
Made addition to registry and rebooted. Was previous policy to be added?
If so it didn't show up.
Made addition to registry and rebooted. Was previous policy to be added?
If so it didn't show up.
Last edited:
John Clark
Extraordinary Member
- Joined
- Sep 8, 2016
- Messages
- 101
- Thread Author
-
- #27
Where do we go from here or are we at a dead end?
John Clark
Extraordinary Member
- Joined
- Sep 8, 2016
- Messages
- 101
- Thread Author
-
- #29
I made the key addition and rebooted.
John Clark
Extraordinary Member
- Joined
- Sep 8, 2016
- Messages
- 101
- Thread Author
-
- #31
Change made and rebooted. Still no access to LT.
Don't know if this will add to the confusion but printer sharing is turned on and the LT can print to laser printer connected to the desktop. Also I have a program on both machines that tallys up the bandwidth used and shows usage for each of us and total on each machine.
Don't know if this will add to the confusion but printer sharing is turned on and the LT can print to laser printer connected to the desktop. Also I have a program on both machines that tallys up the bandwidth used and shows usage for each of us and total on each machine.
Last edited:
John Clark
Extraordinary Member
- Joined
- Sep 8, 2016
- Messages
- 101
- Thread Author
-
- #32
I assume that we're at a dead end here? No solution to the problem?
- Joined
- Jul 4, 2015
- Messages
- 8,998
Well the basic process of accessing an SMB resource via NTLMSSP is the following
Client sends a negotiate request
Server sends a negotiate response (to agree on smb version, NTLM mechanism and authentication provider )
Client uses the agreed upon smb version NTLM etc
Server sends a challenge to validate the account is correct, password
The challenge has a server challenge value
The client using the credentials creates a hash from that 16 bit value and sends it in the response
The server also hashes the 16 bit challenge and compares it with what the client is sending
So basically these hashed values are not match
The logical conclusion is the credentials are not correct or the hashing mechanisms are not the same (although for this usually the connection would fail on the initial negotiate request/response
Since they are local creds the machine name, username and password all need to match that being used on the remote system and that you have access to the smb share you're trying to connect to.
Client sends a negotiate request
Server sends a negotiate response (to agree on smb version, NTLM mechanism and authentication provider )
Client uses the agreed upon smb version NTLM etc
Server sends a challenge to validate the account is correct, password
The challenge has a server challenge value
The client using the credentials creates a hash from that 16 bit value and sends it in the response
The server also hashes the 16 bit challenge and compares it with what the client is sending
So basically these hashed values are not match
The logical conclusion is the credentials are not correct or the hashing mechanisms are not the same (although for this usually the connection would fail on the initial negotiate request/response
Since they are local creds the machine name, username and password all need to match that being used on the remote system and that you have access to the smb share you're trying to connect to.
Similar threads
- Replies
- 4
- Views
- 3K
- Replies
- 7
- Views
- 2K
- Replies
- 5
- Views
- 4K
- Replies
- 5
- Views
- 3K
- Solved
- Replies
- 1
- Views
- 3K