I am currently using Yubikey smartcards to authenticate users within a Domain (Domain B). Login and network shares are working perfectly.

However, when accessing Domain B's network share from another device on Domain (Domain A) using a smartcard to authenticate users, it does not work.

The event log in Windows Server for Domain B shows that the username and password from Domain A are supplied instead.

Example One - PC (Logged in as DomainB\User via Smartcard)

  • Connection to network share automatically completes

  • Access to \DomainB\NetworkShare works fine

Example Two - PC (Logged in as DomainA\User)

  • Connection to network share dialog asks for Smartcard

  • Access to \DomainB\NetworkShare fails

  • Upon inspection in DomainB event logs, username and password are DomainA\User

I'm aiming to be able to allow users connected to DomainA to insert their smartcards at the dialog prompt when connecting to the network share, enter their pin, then gain access to DomainB\NetworkShare. Logging in as DomainB\User rather than DomainA\User.

I have control over DomainB and not DomainA.

  • How is security set up on the share ... "Domain Users" or "Authenticated Users" because "Domain Users" will not work if DomainB event logs show you access from "DomainA\User". – toofat May 2 at 12:55
  • @toofat To test, I have set up two shares. One with 'Domain Users' access and another with 'Authenticated Users' access. When accessing either share, both present the File Explorer login dialog. Inserting the smartcard and entering the pin still fails. On Domain B's event log, the username is still being sent from DomainA, ie the logged in user. Rather than using the Smartcard details to login. – captbb May 2 at 16:00

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.