"The Account is Not Authorized to Login from This Station" accessing network shares

[Steve M]

I am having a strange network share problem with 3 servers. They are SQL
2000 Servers running Windows 2000 SP4 Server fully patched. When I try to
browse to file shares on other servers or workstations I get the error:

"The Account is Not Authorized to Login from This Station"

I can broswe from other machines to these 3 servers. Also, these 3 servers
CAN browse to each other's file shares. Previously I had a group policy on
all the servers that changed the "Digitally sign communications ...
(always)" to enabled. I found KB article 281648
(http://support.microsoft.com/?kbid=281648) that says it causes this problem
so I backed out the group policy but it didn't fix it. Other SQL servers
that had the group policy are not having this problem; only these 3 servers.
I checked the local group policy to make sure the digitally sign
communication settings, LAN Manager, and secure channel settings were set
back and they were. It is strange that they can browse to file shares on
each other but not on any other machines.

Any ideas?

Steve March, MCSE

 

[Steve M]

I was able to fix the problem. After rebooting the 3 server the problem was
fixed. So it required a reboot for the "digitally sign communication"
settings to take effect. The reason why only these 3 servers had the
problem is because only these servers were rebooted since I changed those
settings to "enabled". So backing out the settings and rebooting them again
fixed the problem.

So the bottom line is if you play with these lockdown "digital
signing/secure channel" settings the server side cannot be only "when
possible" and the client "always". Plus it requires a reboot for the
setting to take effect.