I'm curious what SMB version is running on the PCs. If you wouldn't mind, run up a PowerShell session as administrator on a working PC and execute the following two commands:
Code:
PS C:\> dir \\localhost\c$
The second command must be executed within about 10 seconds of executing the first command:
Code:
PS C:\> Get-SmbConnection -ServerName localhost
I'm really only interested in output from the second command. It should look something like the following:
Code:
ServerName ShareName UserName Credential Dialect NumOpens
---------- --------- -------- ---------- ------- --------
localhost c$ DomainName\UserN... DomainName.Testi... 3.02 0
The
Dialect is of interest. Repeat for the rogue PC.