| Previous | Next |
| ERROR_NETNAME_DELETED | ERROR_BAD_DEV_TYPE |
ERROR_NETWORK_ACCESS_DENIED
Network access checks can occur before an individual file is opened. In SMB, TREE_CONNECT establishes access to a share and later CREATE requests open objects below that share. MS-SMB2 also defines access-denied outcomes for share connection and for requests that violate share security or encryption requirements.
Separate share-level denial from file-system denial. If TREE_CONNECT fails, changing an NTFS ACL on one child file may not address the problem. If the tree is established and only a particular file open fails, inspect the requested access mask and the underlying object permissions instead.
Locate the denied boundary
- Capture whether authentication completed and whether TREE_CONNECT succeeded.
- Record the requested share and the identity represented by the SMB session.
- For SMB 3.x, include signing/encryption policy and whether the request was protected as required.
- Compare share permission failure with object-level access denial before changing ACLs.
MS-SMB2 TREE_CONNECT · MS-SMB2 tree-connect verification · Samba smb.conf manual
Looking for a different code? Search another status or error code.