Connecting Mac to SMB share - Event ID 551 RRS feed

  • Question

  • Hello community,

    I need some help for a client Mac failing to connect to a Windows 10 Pro SMB share. The error in the event viewer under "Applications and Services" > "Microsoft" > "Windows" > "SMBServer" > "Security" are as follows:

    SMB Session Authentication Failure

    Client Name: \\x.x.x.x
    Client Address: x.x.x.x:54898
    User Name: 
    Session ID: 0x640004000061
    Status: An invalid parameter was passed to a service or function. (0xC000000D)
    SPN: session setup failed before the SPN could be queried
    SPN Validation Policy: SPN optional / no validation


    You should expect this error when attempting to connect to shares using incorrect credentials.

    This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.

    This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled

    The username and password are correct. As you can see from the log, no username is populating. 

    We are on OSX 10.9.5 and the Windows 10 is fully up to date.

    Monday, June 24, 2019 6:35 PM

All replies

  • Same problem here, but for WIndows Server 2012 R2 Share.

    No solution until now

    Tuesday, June 25, 2019 2:18 PM
  • Hello Slay3r_9903 and Heli,

    One way of understanding what is happening (as a first step to resolving the problem) would be to trace the SMB network traffic. This can either be performed on the client with a command like "tcpdump -i en0 -s 1514 -w macsmb.pcap tcp port 445" or on the server with commands like "logman start macsmb -ets -p Microsoft-Windows-SMBServer -o macsmb.etl" and "logman stop macsmb -ets".

    The network interface name on the Mac will probably need to be adjusted to match your device ("ifconfig" gives information about network interfaces).

    The resulting trace file (macsmb.pcap or macsmb.etl) should give a first hint about the nature of the problem; if the problem is Kerberos related then further tracing would probably be necessary.


    Tuesday, June 25, 2019 2:57 PM
  • Hi,

    Just checking the current situation of your problem.
    Was your issue resolved?

    Best regards,

    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, June 28, 2019 8:44 AM
  • Cayey U P R 
    Monday, September 23, 2019 7:19 PM