Tuesday, September 11, 2012

The account is not authorized to log in from this station

A user was having problem accessing a file share at a remote site using his Windows 7 computer.  He has no problem accessing file share located in our office.  He was getting the following error.

The account is not authorized to log in from this station

The account is not authorized to log in from this station

The Administrator at the remote site has verified that the permissions has been setup correctly.  In fact, the user is able to access the remote file share using another computer.  This ruled out NTFS and Share permissions issue.  So there must be something on his Windows 7 that caused the problem.

After some troubleshooting, the “culprit” was nailed down.  The RequireSecuritySignature located in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Parameters registry subkey was enabled (set to 1).

RequireSecuritySignature Enabled

This means that the client (the Windows 7 computer) is expecting communication with the server must be always digitally signed.  Since I have no access to the remote server so I have no idea is the server capable of such request.  I set the RequireSecuritySignature to 0, rebooted the Windows 7 computer and the problem is gone.

2 comments:

Richard Cook said...

You have NO idea how long I looked for this answer. I have messed with smb.conf up and down, searched literally dozens of forums, tried every last hack, and even prayed to God. Thank you!

patrick Duffin said...

Amazing. Thank you. Fixed my issue.

Is this a setting that would be changed from a group policy? What would cause this flag to change from 0 to 1 in the first place?