KB ID 0001241
Problem
I put a ‘net use’ command in a logon script for a client today, and the drive refused to appear. So I executed the offending line and saw the following error;
System error 1935 has occurred
The computer you are signing into is protected by an authentication firewall. The specified account is not allowed to authenticate the computer.
Solution
This error is seen because the user, (or group the user is a member of), has been granted the correct rights to access the share. BUT the share is in another domain, and even though that domain trusts the one the user is coming from, the trust was set up with ‘selective authentication’.
Go to the domain that’s providing the share, log into a domain controller > Open ‘Active Directory Users and Computers’ > View > Advanced Features > Locate the COMPUTER you are trying to authenticate TO > Properties > Security > Add in the user (or group) that requires access > Grant the “Allowed to authenticate” right > Apply > OK.
Related Articles, References, Credits, or External Links
NA
19/11/2018
you are stealing this from Tom, aren’t you?
{Link Removed}
20/11/2018
That article was published nearly a year after this one, If you look at, the explanation and the steps, the wording and emboldening of text, and the 5Px Red stroke on the diagram, they match all the other articles on this site. I did do a double take myself when saw that, but no I don’t plagiarise other web articles, or take credit for someone else’s hard work.
Best Wishes
Pete
20/11/2018
Also – I’ve done further investigation on this – I went back to the day this was posted and checked my work diary, the domain name above ccf.co.uk, I actually changed that in photoshop, the real clients internal domain name was toccf.co.uk. So NO IVE NOT STOLEN IT. That site have just stolen it from me.
Pete
09/11/2019
Thank you brother, you improved my day with this tip !!! It wasn’t going until then.