I am setting up 2 Windows8.1 Enterprise workstations on a domain network, one is already joined to the domain, one is not yet joined (stand-alone). I need to browse the workstations' C: drive from another domain-joined workstation: \\ComputerName\ShareName
Both workstations have C:\ shared, with (local) Administrators having full control permission on the share. Both workstations are fresh install, I haven't touched filesystem permissions.
The domain joined workstation I can browse the C: drive (Windows Explorer) just as I would expect (using a Domain Admin account), but the stand-alone workstation won't let me browse it's C: drive files. When I try exploring \\StandAlone\CShare, I get prompted for credentials (as I would expect), I type in the username and password of the local administrator account, but I get the message: Network Error Windows cannot access \\StandAlone\CShare You do not have permission access \\StandAlone\CShare. Contact your network administrator to request access." (Yes, I contacted myself, and requested access, still not fixed).
I have been connecting to network shares since Win3.1 days (1993!). I even tried mapping a drive from the command line, which returns "The command completed successfully.". It lies.
I highly suspect NLA is being stupid, indeed the joined workstation has the "Domain" profile assigned to the NIC, while the stand-alone workstation has the "Public" profile assigned. (Apparently, I can no longer change the profile from Public to Private? Really?!) On the stand-alone workstation, I tried every combination possible under the "Network and Sharing Center > Change advanced sharing settings". I still get the same error.
-- EDIT ------------------------
Upon flailing for a solution, I tried adding the actual local-administrative account to the share permissions (not the disabled account "administrator", rather the administrative account created at first sign-in, and included automatically in the local "Administrators" group). Amazingly, I can now browse the files from another workstation!
That changes the question: what kind of incredibly stupid logic makes Win8.1 share permissions IGNORE members of the local Administrators group? Indeed, on the domain-joined workstation, the local Administrators group includes the member "DomainName\Domain Admins", which works correctly.
Why on a domain-joined workstation are the local group members correctly granted permission, but on the stand-alone workstation group members are ignored?