Here is the culprit. Network security: Minimum session security for NTLM SSP based (including secure RPC) clients
The settings under that policy when cleared allowed the use of the alias. Now to see what I can do about it. Thanks for all your help Jeff -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Cothern Jeff D. Team EITC Sent: Monday, April 11, 2005 4:32 PM To: [email protected] Subject: RE: [ActiveDir] alias not working It's a cname Fs1 for Fileserver1.domain.com This server is a Netapps machine so not running windows on it. Our 2000 machine can user the short name just fine and get to the shares. Only the machines that have had security applied seem to have an issue using the short name. I even checked wins and we have a static wins name setup for the short one also. I think its something with wins though. On a 2000 machine I bring up a command prompt and do this Net view fileserver1 I get the proper response back When I do Net View fs1 I get the proper response back If I do the same thing on a 2003 or xp machine when I do the alias. I get system error 50 has occurred. The request is not supported. Thanks for any help you can give. Jeff -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Roger Seielstad Sent: Saturday, April 09, 2005 2:14 AM To: [email protected] Subject: RE: [ActiveDir] alias not working Actually, we do it with a number of our servers. Is the DNS record a CNAME or an A record? If it's a CNAME, is the target the FQDN of the box?? fs1 in cname fileserver1.domain.com Or is it fs1 in cname fileserver1 Unless it is the former, it won't work. Alternately (but less elegant IMO) you could just cut an A record: fs1 in a 192.168.0.1 -------- Roger Seielstad E-mail Geek > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > [EMAIL PROTECTED] > Sent: Friday, April 08, 2005 2:10 PM > To: [email protected] > Cc: [email protected]; [EMAIL PROTECTED] > Subject: Re: [ActiveDir] alias not working > > Hi Jeff > > This is because when I access a server it verifies that the > server that I am requesting matches the netbios name on the > server itself. Aliases, A records and WINS / LMHosts will > not fix this in any configuration we have tried. The access > denied is server name does not match. > > Regards; > > James R. Day > Active Directory Core Team > Office of the Chief Information Officer > National Park Service > (202) 354-1464 (direct) > (202) 371-1549 (fax) > [EMAIL PROTECTED] > > > |---------+----------------------------------> > | | "Cothern Jeff D. Team | > | | EITC" | > | | <[EMAIL PROTECTED]> | > | | Sent by: | > | | [EMAIL PROTECTED]| > | | tivedir.org | > | | | > | | | > | | 04/08/2005 04:33 PM AST| > | | Please respond to | > | | ActiveDir | > |---------+----------------------------------> > > >------------------------------------------------------------- > -----------------------------------------------------------------| > | > | > | To: <[email protected]> > | > | cc: (bcc: James Day/Contractor/NPS) > | > | Subject: [ActiveDir] alias not working > | > > >------------------------------------------------------------- > -----------------------------------------------------------------| > > > > > Ok for some reason 2003 and xp machines that are locked down > with policies are not working with an alias that was created > within DNS for a server. > > To shortin the length of a server name for share purposes we > created an alias. > > IE. Fileserver1 alias FS1. > > If you go onto the machine and type in \\fs1 you get an > access denied message. If you type \\Fileserver1 it takes > you right into the server. > Anyone have a clue on which policies may be affecting this. > > Jeff > > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
