question

bennypr0fane-3167 avatar image
0 Votes"
bennypr0fane-3167 asked bennypr0fane-3167 edited

Why are different users encountering different situations authenticating to a NAS in Win Explorer?

I'd like my users to be able to access their personal SMB shares on a Synology NAS on the local network, using Windows Explorer.
I have found that, on different workstations, as well as from different user accounts on the same workstation, the NAS seems to react differently.
When a share is accessed, the NAS would first ask for the user's credentials.
1.) In some cases, when clicking on the NAS under Network in Explorer, a pop-up dialog is shown, prompting for username and password input. Then, according to the given username, that user's home folder is displayed in Explorer - this is the desired scenario.
2.) In some other cases, clicking on the NAS under Network in Explorer, no login prompt is shwon, Instead, all available shares are shown, including the one containing all the users' home folders, which should only be available to the administrator. This should be the case only when Windows already authenticated to the NAS with admin credentials.

The way I think this works is: once authenticated to a network share, Windows stores that login in the Windows Credentials manager: https://support.microsoft.com/en-us/windows/accessing-credential-manager-1b5c916a-6a16-889f-8581-fc16e8165ac0
In cases where I encountered situation 2.), I checked the credentials manager and found that even though no credentials for the NAS were saved, (i.e. the section under Windows Credentials said "There are no Windwos credentials."), it produced this behavior as if the client was logged in with admin credentials.

Is it possible the client is logged in even though the login does not appear in credentials manager?
In any case, how can I make sure all users consistently encounter situation 1.) (login prompt when clicking the NAS, only proper home folder visible after login)?


windows-10-network
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Just checking in to see if the information provided was helpful.
Please let us know if you would like further assistance.

1 Vote 1 ·

Please try to mark the replies which help you. It will encourage the person who help you.

If there is anything else we can do for you, please feel free to post in the forum.

Appreciate your understanding. :)

0 Votes 0 ·
bennypr0fane-3167 avatar image
0 Votes"
bennypr0fane-3167 answered bennypr0fane-3167 edited

Thank you, unfortunately these commands aren't doing what I expected.

111432-screenshot2021-07-02182142.png



The output to the first command says: "Could not find network connection" this is the same if I use the NAS's IP address instead of the host name.
The output of the second command is the same as yours.

However, after running these commands, I can still access all the shares without the login prompt coming up.

For this reason, I logged out and logged back in with the same user.

  • Observed behavior is:
    Now the login prompt does come up, but only as I try to access one of the shares (1. click on NAS icon > shares are listed 2. click on the "userhomes" share > login prompt is shown).
    The problem with this is, users, cannot authenticate to their home share.

  • Expected behavior:
    It should come up as soon as I select the NAS (click on NAS icon > login prompt is shown immediately.







5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

CandyLuo-MSFT avatar image
0 Votes"
CandyLuo-MSFT answered

Hi ,

Is it possible the client is logged in even though the login does not appear in credentials manager?

If you pressed "Remember my credentials", then credentials will be saved in Windows Credentials.

109709-3.png

109731-4.png

If you didn't say remember, then it will last as long as the current Windows user is logged in.

109677-2.png

If you want to force the credentials to be forgotten, try to run below command:

 net use \\server\share /delete
    
 klist purge

As picture below:

109723-1.png

Then check if the pop-up dialog appears.

Best Regards,
Candy


If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



3.png (7.7 KiB)
4.png (44.4 KiB)
2.png (47.5 KiB)
1.png (78.7 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.