Knowledge Base

RAS: "Error 1326" or "Access Denied" Connecting to Remote Share

Article ID: 130995

Article Last Modified on 12/6/2003


APPLIES TO


This article was previously published under Q130995

SYMPTOMS

When you try to connect over an existing Remote Access Service (RAS) link to a remote resource you have access rights to, one of the following messages appears after you enter the correct password (your RAS connection remains unaffected):

From File Manager:
Stop. Access is denied.
From MS-DOS Command Prompt:
System error 1326 has occurred.
Logon failure: unknown user name or bad password.
These symptoms occur after you call a RAS server from your RAS client and the RAS server authenticates you successfully.

CAUSE

Your local logon credentials differ from the remote domain credentials.

The RAS server does not log you on to the remote domain with your user account, password, and domain credentials you enter in the RAS Authentication dialog box. It only uses these credentials to verify that you have permission to physically access the network as a dial-in client. To validate your access to protected resources on the remote domain, the remote domain controller checks the credentials you entered when you first logged on locally, not the RAS Authentication dialog box credentials you entered just before calling the RAS server.

Therefore, if your local logon credentials differ from the remote domain credentials, you cannot access protected resources on the remote domain and one of the messages above appears.

RESOLUTION

Use one of these three solutions to gain access to your remote resources:

  • Log on to the remote domain after you establish the RAS connection.
  • Automatically log on remotely at Windows NT startup (before RAS link).
  • Supply your remote credentials each time you connect to a remote share.
These solutions are explained below. They assume that the administrator of the remote domain has previously granted you access rights to the share you are trying to connect to.

Log On to the Remote Domain After You Establish the RAS Connection

Log off your local domain and log on to the remote domain by pressing CTRL+ALT+DEL.

For this to work, the following actions must occur:

NOTE: If the symptoms still occur, and you are sure you are supplying the correct credentials, check with your network administrator to see whether you have access permissions to the remote share.

Automatically Log on Remotely at Windows NT Startup (Before RAS Link)

You can avoid logging off and on again after each RAS connection. To do this, you need to follow the requirements in the above section titled "Log On to the Remote Domain After You Establish the RAS Connection." Then do one of the following:

For additional information, please see the following article in the Microsoft Knowledge Base:

126701 TITLE : RAS: Use Cached Credentials to Log On to a Different Domain

Supply Your Remote Credentials Each Time You Connect to a Remote Share

If your computer is not part of the remote domain, or if you do not want to log on to the remote domain by pressing CTRL+ALT+DEL, use one of the following procedures to gain access to your remote resources. Depending on which of your remote credentials differ from your local credentials, one of the following solutions applies.

Additional query words: prodnt 3.10

Keywords: KB130995