Return
-
Title
CIFS/NFS container gives error message "Access Denied" -
Description
When accessing a DR container NFS/CIFS share, the error message can be seen in the below situations;
1. When manually accessing the share using Windows Explorer and getting an error message "Access Denied"
2. When a backup job fails with the error message "Access Denied".
This most commonly occurs when upgrading the DR OS version.
-
Cause
This can be caused by corrupted login credentials. -
Resolution
Actions:
1. Verify container connection is shared in webGUI and check that access is given to relevant clients in the container settings (Go to "Containers" | Click the "Edit" icon").2. Verify DR user access (using Active Directory Users or local users).Resolution:
On the DR:
1. Make sure you have administrative access to the host OS. If the DR is not in an active domain log on to the DR CLI as administrator and use the command:authenticate --guestmode --enableOn the host:
2. Start an administrative CMD window (run as administrator).3. Disconnect at least the DR connection using the command;net use * /del (where * is either the DR connection or wildcard for all connections)4. Start computer management | "Actions menu" | "Connect to another computer" | connect to the DR using Administrator credentials | "Users and groups"5. Verify user access compared to the DR CLI user list. Add and remove users as needed. (Remove SID (unknown) users)6. If inheritance is disabled, enable it by clicking the button on the bottom left and then approve the changes.7. Click on "System Tools" | "Shared Folders" | "Shares" | right-click on the container | select properties | Security8. Verify that you are still able to see the correct user accesses.9. If not, click on "Advanced".10. Add the DR administrator user (or the user customer has set up for CIFS) and give full control11. Verify that the access is now established in Windows Explorer. (Access the share and create a file or folder | open | delete it.)If the DR is not supposed to be in the Active Directory Domain run this command on the DR:authenticate --guestmode --disable