NLB: Access denied. Error connecting to server

Добрый день! Уважаемые читатели и гости IT блога Pyatilistnik.org. В минувший раз я вам подробно описал, как я смог сохранить свои данные на IPad при неудачной попытке обновить его и ошибках 4013, 2009 и 5. Сегодня я хочу вам показать интересную ошибку которую вы можете встретить на NLB участнике при попытке обратиться к его партнеру, ошибка звучит так «Access denied. Error connecting to server». Давайте смотреть в чем дело и как поправить.
Описание ошибки доступа на NLB
И так у меня есть кластер NLB на базе Windows Server 2016. Мне потребовалось провести обслуживание данных хостов, я по очереди перевел их в состояние «Suspend» и перезагрузил. После перезагрузки первого он получил статус «Enable» и вступил в работу, далее я провел то же самое и со вторым участником. Зайдя на первой ноде NLB кластера в оснастку «Network Load Balancing Cluster» я обнаружил ошибку:
Access denied. Error connecting to «FQDN имя сервера» при загрузке информации о конфигурации с 2 хоста

Сразу хочу отметить, что я запускал оснастку Network Load Balancing Cluster от имени доменной учетной записи администратора домена, у которого есть все права на оба сервера NLB
Get-NlbClusterNode
То у меня выскочила ошибка:
Get-NlbClusterNode : Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
At line:1 char:1
+ Get-NlbClusterNode
+ ~~~~~~~~~~~~~~~~~~
+ CategoryInfo : PermissionDenied: (Microsoft.Netwo. tNlbClusterNode:GetNlbClusterNode) [Get-NlbClusterN
ode], UnauthorizedAccessException
+ FullyQualifiedErrorId : Access denied.,Microsoft.NetworkLoadBalancingClusters.PowerShell.GetNlbClusterNode

Как устранить ошибку Access denied на NLB
- 1️⃣Первое, что вы должны сделать, это посмотреть журналы безопасности на обоих нодах NLB. На сервере, где я получал ошибку доступа, я в журнале безопасности (security) нашел событие ID4648:
A logon was attempted using explicit credentials.
Subject:
Security ID: PYATILISTNIK\sema
Account Name: sema
Account Domain: PYATILISTNIK
Logon ID: 0xCE7A8A
Logon GUID:
Account Whose Credentials Were Used:
Account Name: test_nlb
Account Domain: PYATILISTNIK
Logon GUID:
Target Server:
Target Server Name: app2.PYATILISTNIK.org
Additional Information: app2.PYATILISTNIK.org
Process Information:
Process ID: 0x308
Process Name: C:\Windows\System32\svchost.exe
Network Information:
Network Address: 10.xx.xxx.28
Port: 135
This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command.
Еще очень важное поле, это используемые учетные данные, у меня тут откуда-то используется непонятная учетная запись test_nlb, которой уже даже в домене я не нашел. ЭТО уже есть понимание, что я оказывается делаю попытку подключения не от учетной записи администратора домена, а из под некой тестовой.
Перейдем на сервер, к которому не удается получить доступ и посмотрим логи журнала безопасности там, единственное сделайте фильтр по «audit failure«

An account failed to log on.
Subject:
Security ID: NULL SID
Account Name: —
Account Domain: —
Logon ID: 0x0
Logon Type: 3
Account For Which Logon Failed:
Security ID: NULL SID
Account Name: test_nlb
Account Domain: PYATILISTNIK
Failure Information:
Failure Reason: Unknown user name or bad password.
Status: 0xC000006D
Sub Status: 0xC0000064
Detailed Authentication Information:
Logon Process: NtLmSsp
Authentication Package: NTLM
Transited Services: —
Package Name (NTLM only): —
Key Length: 0
Из полезного тут:
- Logon Type: 3 — Тип входа сетевой (Пользователь или компьютер вошли в систему на данном компьютере через сеть.)
- Account Name: test_nlb — Учетная запись от которой была попытка входа
- Status: 0xC000006D — Статус, что не так (Причиной является неправильное имя пользователя или сведения о проверке подлинности.) Учетку я не нашел в домене, вот и причина.
- Authentication Package: NTLM

Еще зайдя в группу локальных администраторов, я обнаружил две учетные записи в виде SID, что говорит нам, о том, что их уже нет в Active Directory или текущий сервер их не может прочитать.

- 2️⃣Найдя виновника, вам нужно указать актуальные данные для доступа к другому участнику NLB, это должна быть учетная запись обладающая административными правами на всех участниках NLB кластера. Запустите оснастку «Network Load Balancing Cluster» и найдите меню «Options — Credentials«.

Указываем тут учетную запись имеющую доступ.
С высокой долей вероятности вам придется перезагрузить данную ноду NLB
Независимо от инструмента, который вы будете использовать для управления кластером, вам необходимо запускать его в контексте безопасности учетной записи с правами администратора на каждый узел кластера. Это можно сделать, войдя в систему с этой учетной записью, запустив утилиту вторичного входа в систему (RunAs) или, в случае диспетчера NLB, установив учетные данные по умолчанию (из пункта меню «Параметры — Учетные данные»). NLB Manager попытается подключиться к удаленным узлам, используя эти учетные данные.

Так же вы можете добавить нужный хост через контекстное меню, выбрав пункт «Add Host to Cluster«

После чего укажите его DNS-имя и попытайтесь подключиться, у вас будет так же запрошены учетные данные для этого.

- 3️⃣Попробуйте отключить на недоступном Windows Server функцию UAC. Для этого вызовите в пуске » UserAccountControlSettings.exe»

- 4️⃣На время выключите антивирусные решения и брандмауэр, если соединения до сих пор нет.
- 5️⃣Убедитесь, что есть сетевая связанность. например через утилиту PING и то, что DNS имя разрешается.
Как посмотреть статус NLB службы
NLB — это драйвер, поэтому вы не увидите его с помощью оснастки службы mmc. Вы можете использовать командную строку «sc query wlbs» для проверки состояния драйвера. Я
считаю, что служба должна иметь возможность зависеть от драйвера. Вы можете попробовать
sc query wlbs

Куст реестра NLB
Когда вы включаете NLB на сервере, записи реестра по умолчанию создаются в разделе:
HKLM\System\CurrentControlSet\Services\WLBS

На этом у меня все, с вами был Иван Сёмин, автор и создатель IT портала Pyatilistnik.org.
Дополнительные ссылки
- https://learn.microsoft.com/ru-ru/windows/security/threat-protection/auditing/event-4625
- https://www.serverbrain.org/administration-practice-2003/nlb-cluster-management.html
- https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/network-load-balancing-concept-notes
Популярные Похожие записи:
- Ошибка 0xC000018C An Error occured during Logon
Ошибка запуска службы «error 1069 the service did not start»
Не удалось назначить SPN учетной записи, ошибка 0x21c7/8647- Ошибка при установке контроллера домена: Verification of prerequisites for Domain Controller promotion failed
Ошибка The security identifier could not be resolved
Smata.Ru сервер лицензий недоступен
Fix “Access Denied, You Don’t Have Permission To Access on This Server” on Windows 10
The “ Access Denied ” error appears when your browser uses different proxy settings or VPN instead of what’s really set on your Windows 10 PC. Thus, when a website detects that there is something wrong with your browser cookies or your network, it blocks you and this is why you can’t open it.
Windows 10 users – we’ve all been there. You’re working on your computer and suddenly you get an error message that says “Access Denied, You don’t have permission to access this server”. There could be a number of reasons this is happening including the server was taken down, the URL has changed, or the host may have disabled access from a VPN.
No matter what the reason is, it can be frustrating not being able to access certain websites when you need them most. Here are some tips on how to fix this issue so you can get back to work with ease.
Table of Contents
- Solved: Access Denied, You Don’t Have Permission To Access on This Server
- Method 1. Forget the Website in Firefox
- Method 2. Delete the Site Data of a Specific Website in Chrome
- Method 3. Turn Off Your VPN Extension
- Method 4. Disable Proxy Server in Windows 10
- Method 5. Download a Premium VPN
- Method 6. Clear Your Browser Data
- Method 7. Reset the Browser
- Final Thoughts
Solved: Access Denied, You Don’t Have Permission To Access on This Server
There are a number of things you can try to recover from this pesky error. The solution that’ll work for you is mainly dependent on what caused the error in the first place. For example, when using the Firefox browser, a website might block you when you have a VPN activated. This happens because the site thinks something is wrong with your proxy or browser cookies.
So, what can you do to restore a website affected by the “Access Denied” error? Let’s review our options, and then jump right into troubleshooting. You can try:
- Clearing your browser cookies and history
- Turning off VPN and VPN extensions
- Disabling your proxy
- Switching to a premium VPN service
- Resetting your browser data
The step-by-step guides below will help you get past whatever might stand between you and your favorite website!
Method 1. Forget the Website in Firefox
It appears that this error is the most common in Mozilla Firefox. If you’re using this browser, there’s a handy button to forget a single website, which may help solve your issues without having to clear other data.

- Open Mozilla Firefox, and then use the Ctrl + H keyboard shortcut to open the History tab.
- Find the website causing the “Access Denied” error from your browsing history. Select it by clicking on it once, and then choose to Forget About This Site from the context menu.
- Refresh the website, or navigate to it again and see if you’re still getting the error message.
Method 2. Delete the Site Data of a Specific Website in Chrome
Google Chrome has a similar option to Firefox, which allows you to clear cookies from just a single website. If you’re not having other issues, it might be best to perform this method before deleting all of your browsing data in one sweep.
- In Google Chrome, click on the More icon (displayed by three dots arranged vertically) and choose Settings .

- Click on Privacy and security from the menu on the left, and then click on Site settings .

- Click on Cookies and site data , and then select the See all cookies and site data option. You’ll see a list of all of your cookies appear shortly after.

- Search for the domain of the problematic website. Click on the Delete button next to the shown cookies.

- Restart your browser and see if the error still happens when you try to access the website.
Method 3. Turn Off Your VPN Extension
VPNs can cause some unexpected issues despite being extremely useful in other areas. Things can happen whether you’re using a VPN on your computer itself, or a VPN extension in your browser. To ensure your VPN isn’t causing the “Access Denied” error, temporarily disable it.
Disable VPN Extensions in Google Chrome

- In Google Chrome, click on the More icon (displayed by three dots arranged vertically) and choose More tools → Extensions .
- Alternatively, you can get to the Extensions page by typing chrome://extensions into your address bar.
- Find your VPN extension. In the bottom-right corner of the extension box, you’ll see a toggle. Make sure that the VPN is toggled off.
- To entirely uninstall your VPN extension, you can also click on the Remove button. Keep in mind that you’ll have to re-install the extension to use it again.
Disable VPN Extensions in Firefox

- In Mozilla Firefox, click on the menu button, and then select Add-ons and Themes from the context-menu.
- Switch to the Extensions tab. Locate your VPN extension, and then use the toggle to turn it off temporarily.
- To uninstall a VPN extension you don’t want to keep on your device, click the More actions button and select Remove from the context-menu.
Disable VPN Extensions in Microsoft Edge

- In Microsoft Edge, type the following link into your address bar: edge://extensions/
- Find any VPN extension you want to turn off, and then click on the toggle so it’s greyed out and disabled.
- You can uninstall a VPN extension from Edge by clicking on the Remove link underneath the extension’s name and details.
Disable VPN Extensions in Opera

- In Opera, click on the Main menu near the top-left corner, and then navigate to Extensions → Extensions .
- Find your VPN extension and disable it with the toggle button. Alternatively, click the X button near the top-right corner to uninstall it.
Method 4. Disable Proxy Server in Windows 10
You might be using a proxy server for your LAN. In this case, we recommend turning the feature off to test whether or not the issue was caused by the configuration.
- Open the search bar in your taskbar by clicking on the magnifying glass icon. You can also bring it up with the Windows + S keyboard shortcut.
- Type in Internet Options and click on the first search result. Switch to the Connections tab once the pop-up window shows up, and then click on LAN Settings .
- Once in the Local Area Network (LAN) Settings window, deselect the Use a proxy server for your LAN option if it’s currently turned on. If the option is not ticked, your issue is not related to the proxy server.
- Check if the website will load after disabling this option. If the error was caused by network traffic filtered by a proxy, you might be able to get on now.
Method 5. Download a Premium VPN
Users with a freeware VPN may experience poor connection and limited features. However, premium VPN services get around these problems with ease. While it will cost you some money to get started, it’s definitely worth switching to a well-endorsed VPN for your own comfort and safety.
It might be hard to find the perfect, most suitable VPN for you and your personal browsing needs. Here are some of the top-selling services we recommend using:
After making your purchase and installing the VPN, try and access the website you’re getting the “Access Denied” error on. The best VPNs are definitely worth the investment. Premium services come with a lot of benefits, like unlimited bandwidth and more robust security features that will keep you safe when browsing on public WiFi hotspots or video chatting!
Method 6. Clear Your Browser Data
Try to clear your browser data before moving on to more drastic steps. Clearing browser data will allow you to keep custom settings intact, but will remove your cookies and history.
Clear Browser Data in Google Chrome
- Open Google Chrome, then click on the More icon, displayed by three dots arranged vertically. Hover over More Tools , and then select Clear browsing data .

- Make sure the Time range is set to All time . Tick the following options: Browsing history , Cookies, and other site data , and Cached images and files .

- Click on the Clear data button.
- After the process is over, restart Google Chrome and see if the error is still appearing when you try to access the website.
Clear Browser Data in Mozilla Firefox
- Open Firefox. In the upper right-hand corner of the browser, click the menu and click the Options setting. Alternatively, you can type about: preferences into the address bar and hit Enter.

- Switch to the Privacy & Security tab. Scroll down until you reach the cookies and site data section. Here, click on the Clear Data… button.

- Select Cookies and Site Data . You can also delete the cache if you want to make some space on your computer, but this option is not necessary for troubleshooting.

- Click on the Clear button. Once the clearing is complete, try to access the problematic website again. The error might’ve been solved by this process.
Clear Browser Data in Microsoft Edge
- Launch Microsoft Edge. Click on the menu icon in the top-right, and then click on Settings . You can also type edge://settings into the address bar, and press the Enter key.

- Switch to the Cookies and site permissions tab. Here, click on the Manage and delete cookies and site data button on the top of the page.

- Click on the See all cookies and site data button. You’ll once again be redirected to a new page.

- Click on the Remove all button. A pop-up message will show up on the screen. Read the warning, and then proceed by clicking on the Clear button.

- Check if you’re able to access the website giving you the “Access Denied” error previously.
Method 7. Reset the Browser
If nothing else has worked, try to reset your browser to its default settings.
How to Reset Google Chrome
- Open Google Chrome, then click on the More icon, displayed by three dots arranged vertically. Click on Settings .

- Scroll down to the bottom of the page, and expand the Advanced settings. Scroll down to the bottom again, and then click Restore settings to their original defaults .

- Read the warning, and then click the Reset settings button if you agree to have your browser restored to the default configuration.
How to Reset Mozilla Firefox
- Open the Firefox menu with the icon in the upper right corner, and then click on Help . Next, click on More Troubleshoot Information . Alternatively, you can type about: support into the address bar and press Enter to be redirected.

- Click on the Refresh Firefox button.

- Read the pop-up warning, and then press Refresh Firefox again if you wish to proceed. After the process has concluded, try and see if you’re able to access the website.

How to Reset Microsoft Edge

- Press the three dots in the top-right corner to open the menu, and then click on Settings from the available options.
- Switch to the Reset Settings tab. Here, click on the button that says Restore settings to their default values . In the pop-up window, confirm your choice after reading the information.
- Allow some time for Edge to reset. When it’s done, navigate to the website with the “Access Denied” error to see if it’s been resolved.
Final Thoughts
As we’ve discussed, there are a number of reasons you might be receiving an Access Denied error. Thankfully, you can remedy most of them with minimal effort on your part. In the event that they cannot, our experts will help to find a solution for you — so don’t hesitate to reach out! We hope these tips have been helpful and would love to hear from you if something here has helped solve your problem.
Have any other trouble accessing websites? Let us know! Our Help Center and Blog offer plenty of tips and tricks like the ones above, which will help make sure you never have an issue again when trying to access certain sites online.
If you want more information about this issue or other computer problems, sign up for our newsletter. Get promotions, deals and discounts from us right in your inbox. Subscribe with your email address below.
You Receive an «Access Is Denied» Error Message When You Use a Windows 95-Based Client to Print to a Network Printer
If you use a client computer that is running either Microsoft Windows 95, Microsoft Windows 98, or Microsoft Windows 98 Second Edition to print to a network printer that is installed as part of a Microsoft cluster or standalone server, you may receive the following error message:
The test page fails to print. Would you like to view the print trouble shooter for assistance. Access is denied.
Cause
This problem may occur if the McAfee Anti-Virus monitoring software is set to perform a real-time scan of files on either the client that is running Windows 95, Windows 98, or Windows 98 Second Edition or on the server that is running Windows NT Server 4.0.
McAfee Anti-Virus scans the spooled files while the print job is being processed. Windows cannot close the files because McAfee Anti-Virus has the files open. These files are left in the Systemroot\System32\Spool\Printers folder. The spooled .shd and .spl files remain in the folder after the print job is displayed as completed.
Resolution
To resolve this problem, use either of the methods that are described in this section.
You Receive the Error Message on the Print Server
If you receive the error message on the print server that is running Windows NT Server 4.0:
- Delete the corrupted files in the Spool folder:
- Click Start, point to Settings, and then click Control Panel.
- Double-click Services, click Spooler, and then click Stop.
- When you receive the following message, click Yes: Are you sure you want to stop the spooler service?
- Click Start, point to Programs, and then click Windows NT Explorer.
- Expand the Winnt folder, expand the System32 folder, and then expand the Spool folder.
- Click the Printers folder, click all of the files that are listed in the right pane, and then click Delete.
- When you receive the following message, click Yes: Are you sure you want to send these x items to the Recycle Bin?
- Repeat steps A and B to restart the Spooler service, and then click Start.
- Click Start, point to Settings, and then click Printers.
- Right-click the printer that is having the problem, and then click Properties.
- Click the Scheduling tab, and then click Spool print documents so program finishes printing faster.
- Click Start printing after last page is spooled, and then click OK.
- Click Start, point to Settings, and then click Printers.
- Right-click the printer that is having the problem, and then click Properties.
- Click the Scheduling tab, click Print directly to printer, and then click OK.
You Receive the Error Message on the Client
If you receive the error message on the client that is running either Windows 95, Windows 98, or Windows 98 Second Edition:
- Delete the corrupted files in the Spool folder:
- Click Start, point to Programs, and then click Windows Explorer.
- Expand the Windows folder, expand the Spool folder, and then click the Printers folder.
- Click all of the files that are listed in the right pane, and then click Delete.
- When you receive the following message, click Yes: Are you sure you want to send these x items to the Recycle Bin?
- Click Start, point to Settings, and then click Printers.
- Right-click the printer that is having the problem, and then click Properties.
- Click the Details tab, click Spool Settings, and then click Spool print documents so program finishes printing faster.
- Click Start printing after last page is spooled, and then click OK.
- Click Start, point to Settings, and then click Printers.
- Right-click the printer that is having the problem, and then click Properties.
- Click the Details tab, click Spool Settings, click Print directly to printer, and then click OK.
More Information
If you are using a debugging program to debug the Spooler service, the following data may be logged in the debug log:
LSPL:SplGetPrinter Failure with ERROR_INSUFFICIENT_BUFFER cbBuf is 0 and pcbNeeded is 78.
References
For additional information about related printing problems, click the article numbers below to view the articles in the Microsoft Knowledge Base:
180892 Err Msg: Error Writing to LPT1: Access Denied
142370 Printing to HP Laserjet Printer Results in Event 2004
179156 Updated TCP/IP Printing Options for Windows NT 4.0 SP3 and Later
188878 Printing to Local Port May Fail with Access Denied Error
The third-party products that are discussed in this article are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, regarding the performance or reliability of these products.Ошибка (Доступ запрещен из-за политик организации) в SharePoint или OneDrive
При попытке войти в SharePoint или OneDrive пользователи получают следующее сообщение об ошибке:
Отказано в доступе
Из-за политик организации вы не можете получить доступ к этому ресурсу из этого сетевого расположения.Причина
Существуют аналогичные ошибки с разными первопричинами. Прежде чем продолжить, убедитесь, что проверка следующие сведения:
- Если вы получаете сообщение об ошибке «Из-за политик организации вы не можете получить доступ к этому ресурсу«, это может быть связано с информационными барьерами.
- Если вы получаете сообщение об ошибке «Из-за политик организации вы не можете получить доступ к этому ресурсу с этого ненадежного устройства«, это может быть связано с политикой неуправляемого устройства.
- Если вы получаете сообщение об ошибке с сообщением «Из-за политик организации вы не можете получить доступ к этому ресурсу из этого сетевого расположения«. Продолжайте работу с решением.
Решение
Чтобы устранить эту проблему, попробуйте следующий метод в зависимости от уровня разрешений.
Неадминистраторов
Если вы получаете это сообщение об ошибке, обратитесь к администратору Microsoft 365.
Администраторы
Эта диагностика недоступна для сред GCC High или DoD, microsoft 365, управляемых 21Vianet, или для клиентов Microsoft 365 для Германии.
Если вы являетесь администратором и заблокировали доступ к SharePoint и OneDrive из-за политики на основе расположения, выполните следующие действия, чтобы разблокировать клиент:
-
Выберите Выполнить тесты, чтобы заполнить диагностику в центре Microsoft 365 Admin.
- В форме диагностики выберите корневой URL-адрес SharePoint Online, а затем выберите Выполнить тесты.

- Если тест обнаруживает, что у вас настроена политика сетевого расположения, и вы в настоящее время заблокированы из клиента, вы можете отключить политику.
