Share randomly stopped connecting, can reach by IP only

Antwan2022

Cadet
Joined
Jan 1, 2022
Messages
4
Something strange happened today after weeks of perfect uptime on my proxmox server running truenas i lost access to the mapped drives and shares vie the host name. It still shows in networks as a computer but the mapped drives are all x ed out.
I can still access the drive via \\ip perfectly.

PLease help!
 

anodos

Sambassador
iXsystems
Joined
Mar 6, 2014
Messages
9,554
Something strange happened today after weeks of perfect uptime on my proxmox server running truenas i lost access to the mapped drives and shares vie the host name. It still shows in networks as a computer but the mapped drives are all x ed out.
I can still access the drive via \\ip perfectly.

PLease help!
Assuming this is Windows, this can happen for a variety of reasons:
1) if this is AD environment, lack of access by FQDN may indicate issues with kerberos (because Windows won't downgrade authentication method from Kerberos to NTLM for security reasons).
2) this may mean that your Windows client has cached the wrong credentials (possibly guest access is enabled on a share).
3) NetBIOS name server may be disabled under Network->Global Configuration
4) A deadtimer parameter killed the SMB session (and you can click on the share and establish a new session).
 

anodos

Sambassador
iXsystems
Joined
Mar 6, 2014
Messages
9,554
Those are three possibilities that I can think of off the top of my head. You can view authentication log via command midclt call smb.status AUTH_LOG | jq this may give a clue regarding option (2).
 

Antwan2022

Cadet
Joined
Jan 1, 2022
Messages
4
sorry for the late reply iv recently set up a new server and the same issue happened (well i neve managed access via network manager just ip) the new server is on truenass scale iv attached the log below.


"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 3530
}
},
{
"timestamp": "2022-01-16T08:57:44.110484-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50363",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 3617
}
},
{
"timestamp": "2022-01-16T08:57:44.123705-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50364",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 3283
}
},
{
"timestamp": "2022-01-16T08:57:44.137130-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50365",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 3310
}
},
{
"timestamp": "2022-01-16T08:57:44.157477-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50366",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 4469
}
},
{
"timestamp": "2022-01-16T08:57:44.179652-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50367",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 3311
}
},
{
"timestamp": "2022-01-16T08:57:44.196419-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50368",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 2935
}
},
{
"timestamp": "2022-01-16T08:57:44.212189-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50369",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 2989
}
},
{
"timestamp": "2022-01-16T08:57:44.230568-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50370",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 4208
}
},
{
"timestamp": "2022-01-16T08:57:44.278307-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50372",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 4650
}
},
{
"timestamp": "2022-01-16T08:57:44.296769-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50373",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 3473
}
},
{
"timestamp": "2022-01-16T08:57:44.317333-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50374",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 4079
}
},
{
"timestamp": "2022-01-16T08:57:44.332209-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50375",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 3148
}
},
{
"timestamp": "2022-01-16T08:57:44.350737-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50376",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 6180
}
},
{
"timestamp": "2022-01-16T08:57:44.371491-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50377",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 4259
}
},
{
"timestamp": "2022-01-16T08:57:44.388570-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50378",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 5251
}
},
{
"timestamp": "2022-01-16T08:57:44.401592-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50379",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 2792
}
},
{
"timestamp": "2022-01-16T08:57:44.419622-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50380",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 3830
}
},
{
"timestamp": "2022-01-16T08:57:44.433550-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50381",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 4167
}
},
{
"timestamp": "2022-01-16T08:57:44.453401-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50382",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 7876
}
},
{
"timestamp": "2022-01-16T08:57:44.476810-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50383",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 4557
}
},
{
"timestamp": "2022-01-16T08:57:44.493014-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50384",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 3608
}
},
{
"timestamp": "2022-01-16T08:57:44.515153-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50385",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 3799
}
},
{
"timestamp": "2022-01-16T08:57:44.532362-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50386",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 3341
}
},
{
"timestamp": "2022-01-16T08:57:44.549735-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50387",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 4441
}
},
{
"timestamp": "2022-01-16T08:57:50.829848-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_WRONG_PASSWORD",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50391",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "Ant",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "Ant",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 11323
}
},
{
"timestamp": "2022-01-16T08:57:50.860500-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
 

Antwan2022

Cadet
Joined
Jan 1, 2022
Messages
4
never mind i just removed all mapped drives and it all came back up just remapped everything today all seams ok
 
Top