Hi All, ive got an odd problem. I've got a large windows domain(srv2008r2) w/win7 x64 workstations. I have a2 srv2008r2 servers setup in the dmz...I'm trying to access from my win7 box. i can access the shares on one and not the other. I've checked pretty much all secpol and user accts permissions. I have a local acct setup on the dmz server with the same pw as my domain pw. i cannot map, by gui or cmd nor can i browse by unc as i can the other server. What am i missing? Thanks. edit: in attempting to map this drive (or browse to it), i get eventid 4625. Subject etc all show my username correctly but under logon type its showing null SID and Guest account?? why would it prompt me for credentials and then attempt with guest?

Jeremy, thank you. i actually forgot to check back in here yesterday after getting this working and having tried your suggestions. I had to create the key LocalAccountTokenFilterPolicy and set it to 1 (DWORD) (HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system) I was immediately able to access the shares on the server in the DMZ(workgroup) from my win7 domain joined pc. Hopefully this will help anyone else experiencing similar issues. Thanks again.

Hi, Thanks for the sharing and glad to hear that the issue has been resolved. Cheers! Jeremy Wu TechNet Community Support

Hi, Please try the following and see how it works: 1. Open Group Policy Editor and navigate to Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options. 2. Configure the following: Network Security: Do not store LAN Manager hash value on next password change - SET TO DISABLE Network Security: LAN Manager authentication level - SET TO SEND LM & NTLM - USE NTLM v2 IF NEGOTIATED 3. Refresh group policy by restarting the computer or typing gpupdate /force in the run dialog box. 4. Reset the password on the user account. The password needs to be reset so that it stores the older LAN Manager hash value. Hope this helps. Jeremy Wu TechNet Community Support