Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Question
Sunday, July 3, 2016 1:00 PM
I upgraded 2 of my Windows 7 machines to Windows 10. I later discovered that these upgraded Windows 10 machines can no longer access Windows XP machines over the network, except through Remote Desktop.
From Windows 10 to Windows XP, for example, I do:
\WinXPPC1\c$ ............... "access is denied".
eventvwr.msc, then connect to a Windows XP machine's event viewer....."access is denied".
services.msc, then connect to a Windows XP machine's services......... "access is denied"
psexec \winxppc1 cmd ..... "unknown user name or bad password"
psinfo -s \winxppc1 ....."unknown user name or bad password".
When I checked the security event log on Windows XP machines, it says 'unknown user name or bad password' whenever a Windows 10 machine tries to connect to it.
Other Windows 7 or XP machines have no problem remote accessing XP machines across the network, so nothing wrong with connectivity or permissions or credentials.
All machines are in workgroup.
The Windows 10 machines can remotely assess other Windows 10 or Windows 2012 or Windows 2012 R2 or Windows 2008 R2 machines without any problem.
Even though Windows XP is no longer supported, operationally we still need to work with them. Therefore a solution is required else we cannot upgrade our administrator's workstation to Windows 10.
Any idea?
Valuable skills are not learned, learned skills aren't valuable.
All replies (11)
Sunday, July 3, 2016 1:33 PM
Not an answer but this is one of the endless bugs in Win 10. MS probably calls it a "security issue" and refuse to connect to XP in order to force an update.
Microsoft's best OS is Windows 7 without question.
It's stable, mature and have everything both users and IT techs need.
With the release of Windows 8/10 almost all useful tools were removed or was deeply hidden because the developers couldn't comprehend what they did.
Windows 10 is a hasty and sloppy development resulting in an extensive number of bugs in an OS that should never have been released.
Also, new updates are not tested by MS but immediately released to the public to be presumably checked and reported back ...
That is why you often need to uninstall a newly released update to get the OS working better at least.
If you have the opportunity, I'd recommend you to revert to Windows 7. Be stable, not troubleshooting!
Best regards, George
Sunday, July 3, 2016 1:55 PM | 1 vote
Windows 10 at sometimes requires to specify the machine name you are connecting to. So try the connection as TARGETMACHINENAME\USERNAME as the username, so if the XP machine is called WINXP then WINXP\Username.
Sunday, July 3, 2016 2:16 PM
Windows 10 at sometimes requires to specify the machine name you are connecting to. So try the connection as TARGETMACHINENAME\USERNAME as the username, so if the XP machine is called WINXP then WINXP\Username.
That won't work. I have of course tried that before.
Valuable skills are not learned, learned skills aren't valuable.
Sunday, July 3, 2016 10:05 PM
What version of Windows 10 (i.e. 10568.420 etc) and how are you logging in? (i.e. MS account, local account \ domain account). What anti-virus \ security software is running on the Windows 10 machines and the XP machines)
C:\Users\User\Downloads\PSTools>ver
Microsoft Windows [Version 10.0.10586]
C:\Users\User\Downloads\PSTools>psexec /u Happy \\192.168.1.10 cmd ver
PsExec v2.2 - Execute processes remotely
Copyright (C) 2001-2016 Mark Russinovich
Sysinternals - www.sysinternals.com
Password:
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.
C:\WINDOWS\system32>
I can connect from Windows 10 10586.420 to Windows XP ok the c$ share and run psexec.
Monday, July 4, 2016 2:00 AM
Windows 10 version 10.0.10586
All machines in workgroup, no domain. No Internet connection, so only local accounts
Anti-virus - McAfee VirusScan Enterprise 8.8i
Valuable skills are not learned, learned skills aren't valuable.
Monday, July 4, 2016 6:51 PM
Well to me would either the credentials being passed are not what you think or not being passed. Either hat or somehow McAfee is getting in the way.
Testing some more have noticed I need to put the IP of the XP machine as the Domain in the Username prompt (the XP machines name does not forward lookup). So give that a try. Also check credential manager does not have anything saved for the XP machines, if so delete.
I have added the IP of my XP machine to Credential Manager and a admin username password and can connect computer management, so clear out any old entries in the credential manger then add an entry for the IP of the XP machine see if that helps.
Tuesday, July 5, 2016 6:14 AM
I had tried that - IP address follow by username.
There is nothing saved in the credential manager.
accessing c$ remotely of XP machine, using IP\username ..... "The specified network password is not correct"
psexec \winXP -u IP\username cmd.....The user name or password is incorrect.
It is as if there is a mechanism in between that either encrypt the password wrongly or decrypt it wrongly.
Valuable skills are not learned, learned skills aren't valuable.
Wednesday, July 6, 2016 2:07 PM
Hi,
Please disable SMB 3.0 on your Windows 10 computers and also the security authentication to see if it can fix your issue:
Powershell command to run as admin;
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" RequireSecureNegotiate -Value 0 –Force
Then, disable SMB 3.0 on your Windows 10:
https://support.microsoft.com/en-us/kb/2696547
Let me know if your issue can be fixed.
Please mark the reply as an answer if you find it is helpful.
If you have feedback for TechNet Support, contact [email protected]
Friday, July 8, 2016 7:49 AM
Kate,
I tried your suggestion but didn't help.
Valuable skills are not learned, learned skills aren't valuable.
Monday, July 18, 2016 8:51 AM
Hi,
What account does you use to access the XP share, domain, local or others?
Have you tried to re-add the permission on your shared folder for the Windows 10 users?
Have you tried to disable firewall on Windows 10 for testing?
We can also try following commands to make sure the right folder path is recognized:
ipconfig /flushdns
Then, clear credential on Windows 10:
net use \fileservername /del
Be sure you replace fileservername with the actual computer or server name you’re trying to access.
At last, we may need to capture the network trace to analyze this issue by using Message analyzer downloading from Microsoft site.
https://www.microsoft.com/en-sg/download/details.aspx?id=44226
Please mark the reply as an answer if you find it is helpful.
If you have feedback for TechNet Support, contact [email protected]
Friday, July 22, 2016 8:05 AM
All Windows machines are in workgroup, no domain involved.
I only use local administrative account. This account is present on every Windows machine.
I only access the admin shares (c$, d$, e$, etc), no custom share used. Nothing in Credential Manager.
No DNS being used, all network accesses use only IP addresses or hosts file entries.
Windows firewall is OFF on every Windows machine.
Again these are clear:
1. All Windows other than Windows 10, can administer remotely (remote desktop not counted) other Windows machines (XP, 7, 2008, 2003, 2012).
2. Windows 10 machines can only administer remotely Windows 7, 10, 2008 and 2012 machines, cannot remotely administer Windows XP machines (haven't test that for Windows 2003). There is no Windows 8.x in our networks.
This is my first time using Message Analyzer, so not sure which is the best to get the result.
I can see NTLMv1 extended security from source to destination, then status logon failure returned from destination to source.
Also, I notice the username sent across is always sourcecomputername\username, it ignored destnationcomputername\username and destinationIP\username. That may be the reason why it always says username or password incorrect.
I changed the actual username and IP addresses in the trace result so as not to post sensitive information:
MessageNumber DiagnosisTypes Timestamp TimeElapsed Source Destination Module Summary 2352 None 2016-07-22T15:11:39.9542863 0.0002776 192.168.22.111 192.168.22.119 SMB ComNegotiate, Status: STATUS_SUCCESS, Selected Dialect: NT LM 0.12, Requested Dialects: [PC NETWORK PROGRAM 1.0, LANMAN1.0, Windows for Workgroups 3.1a, LM1.2X002, LANMAN2.1, NT LM 0.12, SMB 2.002, SMB 2.???]
2357 None 2016-07-22T15:11:39.9652111 0.0002402 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_MORE_PROCESSING_REQUIRED, NTLM, Uid: 0x5802
2357 None 2016-07-22T15:11:39.9652111 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndxRequest, NTLM, Tid: 0xFFFF, Mid: 0x0010
2358 None 2016-07-22T15:11:39.9654513 192.168.22.119 192.168.22.111 SMB ComSessionSetupAndxResponse, Status: STATUS_MORE_PROCESSING_REQUIRED, NTLM, Tid: 0xFFFF, Mid: 0x0010, Uid: 0x5802
2362 Application 2016-07-22T15:11:40.0015352 0.0011230 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_LOGON_FAILURE, NTLM v1 with extended session security, User: CSCWKS006\username1
2362 None 2016-07-22T15:11:40.0015352 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndxRequest, NTLM v1 with extended session security, User: CSCWKS006\username1, Tid: 0xFFFF, Mid: 0x0020
2363 Application 2016-07-22T15:11:40.0026582 192.168.22.119 192.168.22.111 SMB ErrorResponse, Status: STATUS_LOGON_FAILURE, Tid: 0xFFFF, Mid: 0x0020
2364 None 2016-07-22T15:11:40.0032074 0.0001739 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_MORE_PROCESSING_REQUIRED, NTLM, Uid: 0x5803
2367 Application 2016-07-22T15:11:40.0493113 0.0006546 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_LOGON_FAILURE, NTLM v1 with extended session security, User: CSCWKS006\username1
2369 None 2016-07-22T15:11:40.0606881 0.0001687 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_MORE_PROCESSING_REQUIRED, NTLM, Uid: 0x6000
2373 Application 2016-07-22T15:11:40.0955818 0.0007299 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_LOGON_FAILURE, NTLM v1 with extended session security, User: CSCWKS006\username1
2375 None 2016-07-22T15:11:40.0968455 0.0001605 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_MORE_PROCESSING_REQUIRED, NTLM, Uid: 0x6001
2380 Application 2016-07-22T15:11:40.1427776 0.0006104 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_LOGON_FAILURE, NTLM v1 with extended session security, User: CSCWKS006\username1
2382 None 2016-07-22T15:11:40.1440772 0.0001567 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_MORE_PROCESSING_REQUIRED, NTLM, Uid: 0x6002
2386 Application 2016-07-22T15:11:40.1849647 0.0006926 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_LOGON_FAILURE, NTLM v1 with extended session security, User: CSCWKS006\username1
2388 None 2016-07-22T15:11:40.1866575 0.0001608 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_MORE_PROCESSING_REQUIRED, NTLM, Uid: 0x6003
2391 Application 2016-07-22T15:11:40.2201164 0.0006338 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_LOGON_FAILURE, NTLM v1 with extended session security, User: CSCWKS006\username1
2406 Application 2016-07-22T15:11:40.3784385 192.168.22.111 192.168.22.119 TCP Flags: ......S., SrcPort: 52984, DstPort: HTTP(80), Length: 0, Seq Range: 60743358 - 60743359, Ack: 0, Win: 8192(negotiating scale factor: 2)
2407 Application 2016-07-22T15:11:40.3785617 192.168.22.119 192.168.22.111 TCP Flags: ...A.R.., SrcPort: HTTP(80), DstPort: 52984, Length: 0, Seq Range: 0 - 0, Ack: 60743359, Win: 0
2505 Application 2016-07-22T15:11:40.8915600 192.168.22.111 192.168.22.119 TCP Flags: ......S., SrcPort: 52984, DstPort: HTTP(80), Length: 0, Seq Range: 60743358 - 60743359, Ack: 0, Win: 8192(negotiating scale factor: 2)
2506 None 2016-07-22T15:11:40.8916394 192.168.22.119 192.168.22.111 TCP Flags: ...A.R.., SrcPort: HTTP(80), DstPort: 52984, Length: 0, Seq Range: 0 - 0, Ack: 60743359, Win: 0
2545 Application 2016-07-22T15:11:41.3916549 192.168.22.111 192.168.22.119 TCP Flags: ......S., SrcPort: 52984, DstPort: HTTP(80), Length: 0, Seq Range: 60743358 - 60743359, Ack: 0, Win: 8192
2546 None 2016-07-22T15:11:41.3917497 192.168.22.119 192.168.22.111 TCP Flags: ...A.R.., SrcPort: HTTP(80), DstPort: 52984, Length: 0, Seq Range: 0 - 0, Ack: 60743359, Win: 0
2548 None 2016-07-22T15:11:41.4030139 0.0002159 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_MORE_PROCESSING_REQUIRED, NTLM, Uid: 0x6800
2551 Application 2016-07-22T15:11:41.4387159 0.0008671 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_LOGON_FAILURE, NTLM v1 with extended session security, User: CSCWKS006\username1
2553 None 2016-07-22T15:11:41.4519603 0.0001773 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_MORE_PROCESSING_REQUIRED, NTLM, Uid: 0x6801
2557 Application 2016-07-22T15:11:41.4859435 0.0006173 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_LOGON_FAILURE, NTLM v1 with extended session security, User: CSCWKS006\username1
2559 None 2016-07-22T15:11:41.4870782 0.0001601 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_MORE_PROCESSING_REQUIRED, NTLM, Uid: 0x6802
2568 Application 2016-07-22T15:11:41.5326557 0.0006372 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_LOGON_FAILURE, NTLM v1 with extended session security, User: CSCWKS006\username1
2570 None 2016-07-22T15:11:41.5339879 0.0001611 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_MORE_PROCESSING_REQUIRED, NTLM, Uid: 0x6803
2575 Application 2016-07-22T15:11:41.5795641 0.0006015 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_LOGON_FAILURE, NTLM v1 with extended session security, User: CSCWKS006\username1
2577 None 2016-07-22T15:11:41.5813982 0.0001615 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_MORE_PROCESSING_REQUIRED, NTLM, Uid: 0x7000
2584 Application 2016-07-22T15:11:41.6177948 0.0006040 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_LOGON_FAILURE, NTLM v1 with extended session security, User: CSCWKS006\username1
2589 None 2016-07-22T15:11:41.6297082 0.0001604 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_MORE_PROCESSING_REQUIRED, NTLM, Uid: 0x7001
2594 Application 2016-07-22T15:11:41.6576660 0.0006081 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_LOGON_FAILURE, NTLM v1 with extended session security, User: CSCWKS006\username1
2596 None 2016-07-22T15:11:41.6588014 0.0001581 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_MORE_PROCESSING_REQUIRED, NTLM, Uid: 0x7002
2603 Application 2016-07-22T15:11:41.7047188 0.0006293 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_LOGON_FAILURE, NTLM v1 with extended session security, User: CSCWKS006\username1
2608 None 2016-07-22T15:11:41.7162112 0.0001646 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_MORE_PROCESSING_REQUIRED, NTLM, Uid: 0x7003
2611 Application 2016-07-22T15:11:41.7514040 0.0005985 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_LOGON_FAILURE, NTLM v1 with extended session security, User: CSCWKS006\username1
3368 None 2016-07-22T15:11:50.9417365 0.0002584 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_MORE_PROCESSING_REQUIRED, NTLM, Uid: 0x7800
3374 Application 2016-07-22T15:11:50.9660689 0.0008521 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_LOGON_FAILURE, NTLM v1 with extended session security, User: CSCWKS006\username1
4575 None 2016-07-22T15:12:03.7042267 192.168.22.111 192.168.22.119 TCP Flags: ...A.R.., SrcPort: 52982, DstPort: SMB(445), Length: 0, Seq Range: 1935256594 - 1935256594, Ack: 2086043844, Win: 0(scale factor: 2)
4794 None 2016-07-22T15:12:06.1115832 192.168.22.111 192.168.22.119 TCP Flags: ......S., SrcPort: 52993, DstPort: SMB(445), Length: 0, Seq Range: 2977791537 - 2977791538, Ack: 0, Win: 8192(negotiating scale factor: 2)
4795 None 2016-07-22T15:12:06.1116921 192.168.22.119 192.168.22.111 TCP Flags: ...A..S., SrcPort: SMB(445), DstPort: 52993, Length: 0, Seq Range: 3820758899 - 3820758900, Ack: 2977791538, Win: 65535(negotiating scale factor: 0)
4796 None 2016-07-22T15:12:06.1117526 192.168.22.111 192.168.22.119 TCP Flags: ...A...., SrcPort: 52993, DstPort: SMB(445), Length: 0, Seq Range: 2977791538 - 2977791538, Ack: 3820758900, Win: 65700(scale factor: 2)
4808 None 2016-07-22T15:12:06.2042662 0.0002875 192.168.22.111 192.168.22.119 SMB ComNegotiate, Status: STATUS_SUCCESS, Selected Dialect: NT LM 0.12, Requested Dialects: [PC NETWORK PROGRAM 1.0, LANMAN1.0, Windows for Workgroups 3.1a, LM1.2X002, LANMAN2.1, NT LM 0.12, SMB 2.002, SMB 2.???] 4810
None 2016-07-22T15:12:06.2054177 0.0002785 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_MORE_PROCESSING_REQUIRED, NTLM, Uid: 0x6801 4815 Application 2016-07-22T15:12:06.2516677 0.0008736 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_LOGON_FAILURE, NTLM v1 with extended session security, User: epd-sc-otp\username1 5923
None 2016-07-22T15:12:19.7979524 192.168.22.111 192.168.22.119 TCP Flags: ...A.R.., SrcPort: 52993, DstPort: SMB(445), Length: 0, Seq Range: 2977792315 - 2977792315, Ack: 3820759325, Win: 0(scale factor: 2) 6082
None 2016-07-22T15:12:21.3923903 192.168.22.111 192.168.22.119 TCP Flags: ......S., SrcPort: 52995, DstPort: SMB(445), Length: 0, Seq Range: 2118029606 - 2118029607, Ack: 0, Win: 8192(negotiating scale factor: 2) 6083 None 2016-07-22T15:12:21.3925049 192.168.22.119 192.168.22.111 TCP Flags: ...A..S., SrcPort: SMB(445), DstPort: 52995, Length: 0, Seq Range: 4224344715 - 4224344716, Ack: 2118029607, Win: 65535(negotiating scale factor: 0) 6084
None 2016-07-22T15:12:21.3925675 192.168.22.111 192.168.22.119 TCP Flags: ...A...., SrcPort: 52995, DstPort: SMB(445), Length: 0, Seq Range: 2118029607 - 2118029607, Ack: 4224344716, Win: 65700(scale factor: 2) 6085 None 2016-07-22T15:12:21.4062390 0.0002341 192.168.22.111 192.168.22.119 SMB ComNegotiate, Status: STATUS_SUCCESS, Selected Dialect: NT LM 0.12, Requested Dialects: [PC NETWORK PROGRAM 1.0, LANMAN1.0, Windows for Workgroups 3.1a, LM1.2X002, LANMAN2.1, NT LM 0.12, SMB 2.002, SMB 2.???] 6087
None 2016-07-22T15:12:21.4072249 0.0002388 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_MORE_PROCESSING_REQUIRED, NTLM, Uid: 0x3801 6090 Application 2016-07-22T15:12:21.4311867 0.0008705 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_LOGON_FAILURE, NTLM v1 with extended session security, User: 192.168.22.119\username1 7463
None 2016-07-22T15:12:32.1417387 192.168.22.111 192.168.22.119 TCP Flags: ...A.R.., SrcPort: 52995, DstPort: SMB(445), Length: 0, Seq Range: 2118030390 - 2118030390, Ack: 4224345141, Win: 0(scale factor: 2) 9302
None 2016-07-22T15:12:44.9884160 192.168.22.111 192.168.22.119 TCP Flags: ......S., SrcPort: 53001, DstPort: SMB(445), Length: 0, Seq Range: 1810756355 - 1810756356, Ack: 0, Win: 8192(negotiating scale factor: 2) 9303
None 2016-07-22T15:12:44.9885323 192.168.22.119 192.168.22.111 TCP Flags: ...A..S., SrcPort: SMB(445), DstPort: 53001, Length: 0, Seq Range: 1978892373 - 1978892374, Ack: 1810756356, Win: 65535(negotiating scale factor: 0) 9304
None 2016-07-22T15:12:44.9885877 192.168.22.111 192.168.22.119 TCP Flags: ...A...., SrcPort: 53001, DstPort: SMB(445), Length: 0, Seq Range: 1810756356 - 1810756356, Ack: 1978892374, Win: 65700(scale factor: 2) 9305
None 2016-07-22T15:12:44.9886463 0.0002032 192.168.22.111 192.168.22.119 SMB ComNegotiate, Status: STATUS_SUCCESS, Selected Dialect: NT LM 0.12, Requested Dialects: [PC NETWORK PROGRAM 1.0, LANMAN1.0, Windows for Workgroups 3.1a, LM1.2X002, LANMAN2.1, NT LM 0.12, SMB 2.002, SMB 2.???] 9307
None 2016-07-22T15:12:44.9893118 0.0002152 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_MORE_PROCESSING_REQUIRED, NTLM, Uid: 0x7801
9309 Application 2016-07-22T15:12:44.9898035 0.0008432 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_LOGON_FAILURE, NTLM v1 with extended session security, User: CSCWKS006\username1
9311 None 2016-07-22T15:12:44.9913571 0.0001663 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_MORE_PROCESSING_REQUIRED, NTLM, Uid: 0x7802
9313 Application 2016-07-22T15:12:44.9917619 0.0006413 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_LOGON_FAILURE, NTLM v1 with extended session security, User: CSCWKS006\username1
9321 None 2016-07-22T15:12:45.0608147 0.0001704 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_MORE_PROCESSING_REQUIRED, NTLM, Uid: 0x7803
9323 Application 2016-07-22T15:12:45.0613475 0.0006498 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_LOGON_FAILURE, NTLM v1 with extended session security, User: CSCWKS006\username1
9325 None 2016-07-22T15:12:45.0625325 0.0001584 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_MORE_PROCESSING_REQUIRED, NTLM, Uid: 0x8000
9327 Application 2016-07-22T15:12:45.0629362 0.0006201 192.168.22.111 192.168.22.119 SMB ComSessionSetupAndx, Status: STATUS_LOGON_FAILURE, NTLM v1 with extended session security, User: CSCWKS006\username1
10137 None 2016-07-22T15:12:55.7388771 192.168.22.111 192.168.22.119 TCP Flags: ...A.R.., SrcPort: 53001, DstPort: SMB(445), Length: 0, Seq Range: 1810758979 - 1810758979, Ack: 1978893807, Win: 0(scale factor: 2)
Valuable skills are not learned, learned skills aren't valuable.