{"id":872,"date":"2013-06-13T00:00:02","date_gmt":"2013-06-12T23:00:02","guid":{"rendered":"http:\/\/emtunc.org\/blog\/?p=872"},"modified":"2013-06-15T13:02:21","modified_gmt":"2013-06-15T12:02:21","slug":"windows-server-2012-file-share-access-denied-error","status":"publish","type":"post","link":"https:\/\/emtunc.org\/blog\/06\/2013\/windows-server-2012-file-share-access-denied-error\/","title":{"rendered":"Windows Server 2012 File Share &#8211; Access Denied Error"},"content":{"rendered":"<p>Whilst configuring a Windows Server 2012 VM as a file server, I came across the very annoying <em>Access denied<\/em> error message when attempting to access a file share from my computer.<\/p>\n<p>If you&#8217;re getting similar issues and have made sure your folder permissions are set correctly then see if the following helps you:<\/p>\n<p><!--more--><\/p>\n<ul>\n<li>If you are running Server 2012 as a VM on ESX, disable the HotAdd\/HotPlug feature for that VM. HotAdd\/HotPlug is enabled by default and makes Server 2012 think that the virtual drives are removal thus causing some confusion. See this <a title=\"Disabling the HotAdd\/HotPlug capability in ESXi 5.x and ESXi\/ESX 4.x virtual machines (1012225) \" href=\"http:\/\/kb.vmware.com\/kb\/1012225\" target=\"_blank\">KB article<\/a> from VMware.<\/li>\n<li>Have you checked the <em>Encrypt data access<\/em> box during file share creation? If so, you will not (be default) be able to access the shares from a client &lt; Windows 8 due to SMB3 incompatibilities. You can disable this check via a Powershell cmdlet. See <a title=\"SMB 3 Security Enhancements in Windows Server 2012\" href=\"http:\/\/blogs.technet.com\/b\/filecab\/archive\/2012\/05\/03\/smb-3-security-enhancements-in-windows-server-2012.aspx\" target=\"_blank\">this page<\/a> for more details:<\/li>\n<\/ul>\n<blockquote><p>By default, once SMB Encryption is turned on for a share or server, only SMB 3 clients will be allowed to access the affected shares. The reason for this restriction is to ensure that the administrator\u2019s intent of safeguarding the data is maintained for all accesses. However there might be situations (for example, a transition period where mixed client OS versions will be in use) where an admin may want to allow unencrypted access for clients not supporting SMB 3. To enable that scenario, run the following powershell command:<\/p>\n<p><i>Set-SmbServerConfiguration \u2013RejectUnencryptedAccess $false<\/i><\/p>\n<p>The Secure Negotiate capability described in section 3 does prevent a \u201cman in the middle\u201d from downgrading a connection from SMB 3 to SMB 2 (which would use unencrypted access); however it does not prevent downgrades to SMB 1 which would also result in unencrypted access.<\/p>\n<p>For this reason, in order to <i>guarantee<\/i> that SMB 3 capable clients will <i>always<\/i> use encryption to access encrypted shares, the SMB 1 server must be disabled.<\/p>\n<p>If the <i>\u2013RejectUnencryptedAccess<\/i> setting is left at its default setting of <i>$true<\/i> then there is no concern, because only encryption capable SMB 3 clients will be allowed to access the shares (SMB1 clients will also be rejected).<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"<p>Whilst configuring a Windows Server 2012 VM as a file server, I came across the very annoying Access denied error message when attempting to access a file share from my computer. If you&#8217;re getting similar issues and have made sure your folder permissions are set correctly then see if the following helps you:<\/p>\n","protected":false},"author":32,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"footnotes":""},"categories":[1],"tags":[114,113],"class_list":["post-872","post","type-post","status-publish","format-standard","hentry","category-tech","tag-smb","tag-windows-server-2012"],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p1trTO-e4","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/emtunc.org\/blog\/wp-json\/wp\/v2\/posts\/872","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/emtunc.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/emtunc.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/emtunc.org\/blog\/wp-json\/wp\/v2\/users\/32"}],"replies":[{"embeddable":true,"href":"https:\/\/emtunc.org\/blog\/wp-json\/wp\/v2\/comments?post=872"}],"version-history":[{"count":6,"href":"https:\/\/emtunc.org\/blog\/wp-json\/wp\/v2\/posts\/872\/revisions"}],"predecessor-version":[{"id":889,"href":"https:\/\/emtunc.org\/blog\/wp-json\/wp\/v2\/posts\/872\/revisions\/889"}],"wp:attachment":[{"href":"https:\/\/emtunc.org\/blog\/wp-json\/wp\/v2\/media?parent=872"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/emtunc.org\/blog\/wp-json\/wp\/v2\/categories?post=872"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/emtunc.org\/blog\/wp-json\/wp\/v2\/tags?post=872"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}