Network drives fail to connect error 1208 and System error 2148073478

We had a problem where a Windows 2012 R2 Domain Controller would not browse the shares of another Windows 2012 R2 WorkGroup Server. We kept getting error 1208 and then we tried to force a mapping to share and received System error 2148073478

This problem is caused by the “Secure Negotiate” feature that was added to SMB 3.0 for Windows Server 2012 and Windows 8. This feature depends upon the correct signing of error responses by all SMBv2 servers, including servers that support only protocol versions 2.0 and 2.1. Some third-party file servers and other Windows Systems not on a domain may not not return a signed error response. Therefore, the connection fails.

We had this issue with a Windows 2012 R2 Domain Controller trying to connect to a Windows 2012 workgroup server share.

The Domain Controller had the local network set to Public and not Private, We had to change this by running a few PoSh commands.

 

Get-NetConnectionProfile

This gives us the index numbers for each interface then we find the interface marked public and change it to Private by running the PoSh command

Set-NetConnectionProfile -InterfaceIndex 10 -NetworkCategory Private

Change the InterfaceIndex number to the number of your interface.

 

Next we need to low the security level for SMB so that we can allow the connection to complete.

To do this we Edit the registry and change the value of  RequireSecureNegotiate to zero

Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" RequireSecureNegotiate -Value 0 -Force

Once that has completed you will now be able to access your network shares on other NAS servers or Windows systems.

 

Hope this helps someone out there, Enjoy!

Cubert

Windows 7 – Add a non-indexed UNC path as a library

Add a non-indexed UNC as a library in Windows 7

There is an occasion when you may want to add a non indexed UNC path to a library inside of your Windows 7 system. Normally Windows bitches and complains when you try to hook up a UNC path that is not indexed but by tricking it we can make it happen. Here is how you do it.
===========================
1. Create a

Add a non-indexed UNC as a library in Windows 7

There is an occasion when you may want to add a non indexed UNC path to a library inside of your Windows 7 system. Normally Windows bitches and complains when you try to hook up a UNC path that is not indexed but by tricking it we can make it happen. Here is how you do it.

===========================
1. Create a folder on your hard drive for shares. i.e. c:\share
2. Create another folder in the above share. i.e. c:\share\music
2. Link the Library to this folder.
3. Now delete the music folder but leave the c:\share folder.
4. Use the mklink in an elevated command prompt to make a symbolic link. Name the link the same as the folder you created above. 
mklink /d c:\share\music \\server\music
5. Your done. Now you have non-indexed UNC path as a library in Windows 7.

 

This process works much better than the other option which is to make “Available Offline”. If your like me and have a very large storage server running a OS like Linux or BSD to house all your media then making it available offline is no good. It would require a copy of the entire share be placed on your local drive and that could cost you every piece of free space on my Windows 7 system and then some.


I hope this helps someone out there with large media shares get their library setup.

Enjoy

Cubert