The Unmanageable File Server

I had an interesting little case to solve at home recently when my headless file server suddenly would not accept RDP connections any more. It still worked flawlessly as a file server, so I ignored the problem for a while.

The issue became urgent when I wanted to run the backup program installed on the machine (which I do manually every month or so). With the machine being headless after the monitor had broken down my only connection to its desktop was via RDP. But mstsc.exe refused to connect…

I tried various simple troubleshooting steps, like connecting event viewer remotely or directing the services MMC to the other machine, but neither worked. Funnily enough, the computer was reachable via SMB all the time. Very strange.

Finally, devoid of other options, I persuaded my wife to borrow me her LCD TV and connected that to the computer. As soon as I logged on, I saw this:

Windows 7 - choose a network location

After I clicked on “Home network” the problems were gone and the file server was reachable again. What a simple yet effective remedy!

What had caused this? I remembered that I had replaced the router/switch the server was connected to. Such a change is interpreted as a network location change by the OS, and modern versions of Windows ask politely if the current network is secure (home/work) or not (public). Until that question is answered, the firewall blocks (nearly) all connections…

Comments

Related Posts

Samba File Server With POSIX ACLs in a Docker Container

Samba File Server With POSIX ACLs in a Docker Container
This article explains how to set up a Samba file server as an Active Directory domain member in a Docker container. This newer configuration differs from my earlier setup in one essential point: it uses POSIX instead of Windows ACLs, simplifying the administration and making it possible to modify files via other protocols than SMB. This post is part of my series on home automation, networking & self-hosting that shows how to install, configure, and run a home server with dockerized or virtualized services.
Home Automation, Networking & Self-Hosting

Remote Management of Windows PCs in an Isolated Security Zone

Remote Management of Windows PCs in an Isolated Security Zone
With the advent of BYO it has become fashionable to regard PCs as untrusted devices that should be isolated in a dedicated security zone. Zoning Such an approach has a big advantage: by separating clients from servers it is possible to treat them differently and potentially apply more relaxed security policies - which is a basic requirement for BYO. In a truly BYO-only environment you block everything except Citrix ICA or some other remoting procotol of choice at the firewall and life is good. In real corporate networks things are a bit more complicated, however. Say you want to isolate your managed Windows PCs. In that case you might want to be able to manage them remotely from systems outside the client security zone (e.g. from management terminal servers). And suddenly you have a problem: Windows management protocols, especially RPC and DCOM, are not exactly firewall-friendly.
Security

Latest Posts

Fast & Silent 5 Watt PC: Minimizing Idle Power Usage

Fast & Silent 5 Watt PC: Minimizing Idle Power Usage
This micro-series explains how to turn the Lenovo ThinkCentre M90t Gen 6 into a smart workstation that consumes only 5 Watts when idle but reaches top Cinebench scores while staying almost imperceptibly silent. In the first post, I showed how to silence the machine by replacing and adding to Lenovo’s CPU cooler. In this second post, I’m listing the exact configuration that achieves the lofty goal of combining minimal idle power consumption with top Cinebench scores.
Hardware