- Joined
- Feb 3, 2016
- Messages
- 1
- Reaction score
- 0
My situation:
I own a latop Acer Aspire Ethos (8951G) on which I migrated Windows7 Home to Windows 10. Everything looked OK until I found out that the scans I make with my Ricoh MPC3000, are not placed in my shared directory on my laptop. Ricoh shows: file transfer not successful.
I watched my Windows security log book:
Er is een account aangemeld.
Onderwerp:
Beveiligings-id: NULL SID
Accountnaam: -
Accountdomein: -
Aanmeldings-id: : 0x0
Aanmeldingsgegevens:
Aanmeldingstype
3
Beperkte beheermodus: -
Virtueel account: Nee
Verhoogd token: Nee
Imitatieniveau: Imitatie
Nieuwe aanmelding:
Beveiligings-id: HansGoosen-PC\scanner-ricoh
Accountnaam: scanner-ricoh
Accountdomein: HansGoosen-PC
Aanmeldings-id: 0xF62DBE
Gekoppelde aanmeldings-id: 0x0
Netwerkaccountnaam: -
Netwerkaccountdomein: -
Aanmeldings-GUID: {00000000-0000-0000-0000-000000000000}
Procesgegevens:
Proces-id: 0x0
Naam proces: -
Netwerkgegevens:
Naam van werkstation: RNPC23228
Netwerkadres van bron: 192.168.1.50
Poort van bron: 65435
Gedetailleerde authenticatiegegevens:
Aanmeldingsproces: NtLmSsp
Authenticatiepakket: NTLM
Doorgezette services: -
Pakketnaam (alleen NTLM): NTLM V1
Sleutellengte: 128
With the following details:
+
System
-
Provider
[ Name]
Microsoft-Windows-Security-Auditing
[ Guid]
{54849625-5478-4994-A5BA-3E3B0328C30D}
EventID
4624
Version
2
Level
0
Task
12544
Opcode
0
Keywords
0x8020000000000000
-
TimeCreated
[ SystemTime]
2016-02-03T15:40:07.769416300Z
EventRecordID
7827
-
Correlation
[ ActivityID]
{7718783B-5E8E-0006-4A78-18778E5ED101}
-
Execution
[ ProcessID]
1928
[ ThreadID]
7576
Channel
Security
Computer
HansGoosen-PC
Security
-
EventData
SubjectUserSid
S-1-0-0
SubjectUserName
-
SubjectDomainName
-
SubjectLogonId
0x0
TargetUserSid
S-1-5-21-2399486583-1100445512-426617512-1005
TargetUserName
scanner-ricoh
TargetDomainName
HansGoosen-PC
TargetLogonId
0xf62dbe
LogonType
3
LogonProcessName
NtLmSsp
AuthenticationPackageName
NTLM
WorkstationName
RNPC23228
LogonGuid
{00000000-0000-0000-0000-000000000000}
TransmittedServices
-
LmPackageName
NTLM V1
KeyLength
128
ProcessId
0x0
ProcessName
-
IpAddress
192.168.1.50
IpPort
65435
ImpersonationLevel
%%1833
RestrictedAdminMode
-
TargetOutboundUserName
-
TargetOutboundDomainName
-
VirtualAccount
%%1843
TargetLinkedLogonId
0x0
ElevatedToken
%%1843
The previous informating regards tot he log on (aanmelding) of the Ricoh-machine.
The next entry is about the disconnection of the Ricoh:
Er is een account afgemeld.
Onderwerp:
Beveiligings-id: HansGoosen-PC\scanner-ricoh
Accountnaam: scanner-ricoh
Accountdomein: HansGoosen-PC
Aanmeldings-id: 0xF62DBE
Aanmeldingstype: 3
Met de details:
-
System
-
Provider
[ Name]
Microsoft-Windows-Security-Auditing
[ Guid]
{54849625-5478-4994-A5BA-3E3B0328C30D}
EventID
4634
Version
0
Level
0
Task
12545
Opcode
0
Keywords
0x8020000000000000
-
TimeCreated
[ SystemTime]
2016-02-03T15:40:07.777958500Z
EventRecordID
7828
Correlation
-
Execution
[ ProcessID]
1928
[ ThreadID]
10420
Channel
Security
Computer
HansGoosen-PC
Security
-
EventData
TargetUserSid
S-1-5-21-2399486583-1100445512-426617512-1005
TargetUserName
scanner-ricoh
TargetDomainName
HansGoosen-PC
TargetLogonId
0xf62dbe
LogonType
3
The Ricoh MPC3000 uses the SMB-protocol for file transfer.
I already found many threads/solutions via Google but nothing helped so far.
It is strange that the connection TEST on the Ricoh is showing: the connection is OK! While the file is not being transferred when I make a scan……
Who is able to help me out ?
I own a latop Acer Aspire Ethos (8951G) on which I migrated Windows7 Home to Windows 10. Everything looked OK until I found out that the scans I make with my Ricoh MPC3000, are not placed in my shared directory on my laptop. Ricoh shows: file transfer not successful.
I watched my Windows security log book:
Er is een account aangemeld.
Onderwerp:
Beveiligings-id: NULL SID
Accountnaam: -
Accountdomein: -
Aanmeldings-id: : 0x0
Aanmeldingsgegevens:
Aanmeldingstype
3
Beperkte beheermodus: -
Virtueel account: Nee
Verhoogd token: Nee
Imitatieniveau: Imitatie
Nieuwe aanmelding:
Beveiligings-id: HansGoosen-PC\scanner-ricoh
Accountnaam: scanner-ricoh
Accountdomein: HansGoosen-PC
Aanmeldings-id: 0xF62DBE
Gekoppelde aanmeldings-id: 0x0
Netwerkaccountnaam: -
Netwerkaccountdomein: -
Aanmeldings-GUID: {00000000-0000-0000-0000-000000000000}
Procesgegevens:
Proces-id: 0x0
Naam proces: -
Netwerkgegevens:
Naam van werkstation: RNPC23228
Netwerkadres van bron: 192.168.1.50
Poort van bron: 65435
Gedetailleerde authenticatiegegevens:
Aanmeldingsproces: NtLmSsp
Authenticatiepakket: NTLM
Doorgezette services: -
Pakketnaam (alleen NTLM): NTLM V1
Sleutellengte: 128
With the following details:
+
System
-
Provider
[ Name]
Microsoft-Windows-Security-Auditing
[ Guid]
{54849625-5478-4994-A5BA-3E3B0328C30D}
EventID
4624
Version
2
Level
0
Task
12544
Opcode
0
Keywords
0x8020000000000000
-
TimeCreated
[ SystemTime]
2016-02-03T15:40:07.769416300Z
EventRecordID
7827
-
Correlation
[ ActivityID]
{7718783B-5E8E-0006-4A78-18778E5ED101}
-
Execution
[ ProcessID]
1928
[ ThreadID]
7576
Channel
Security
Computer
HansGoosen-PC
Security
-
EventData
SubjectUserSid
S-1-0-0
SubjectUserName
-
SubjectDomainName
-
SubjectLogonId
0x0
TargetUserSid
S-1-5-21-2399486583-1100445512-426617512-1005
TargetUserName
scanner-ricoh
TargetDomainName
HansGoosen-PC
TargetLogonId
0xf62dbe
LogonType
3
LogonProcessName
NtLmSsp
AuthenticationPackageName
NTLM
WorkstationName
RNPC23228
LogonGuid
{00000000-0000-0000-0000-000000000000}
TransmittedServices
-
LmPackageName
NTLM V1
KeyLength
128
ProcessId
0x0
ProcessName
-
IpAddress
192.168.1.50
IpPort
65435
ImpersonationLevel
%%1833
RestrictedAdminMode
-
TargetOutboundUserName
-
TargetOutboundDomainName
-
VirtualAccount
%%1843
TargetLinkedLogonId
0x0
ElevatedToken
%%1843
The previous informating regards tot he log on (aanmelding) of the Ricoh-machine.
The next entry is about the disconnection of the Ricoh:
Er is een account afgemeld.
Onderwerp:
Beveiligings-id: HansGoosen-PC\scanner-ricoh
Accountnaam: scanner-ricoh
Accountdomein: HansGoosen-PC
Aanmeldings-id: 0xF62DBE
Aanmeldingstype: 3
Met de details:
-
System
-
Provider
[ Name]
Microsoft-Windows-Security-Auditing
[ Guid]
{54849625-5478-4994-A5BA-3E3B0328C30D}
EventID
4634
Version
0
Level
0
Task
12545
Opcode
0
Keywords
0x8020000000000000
-
TimeCreated
[ SystemTime]
2016-02-03T15:40:07.777958500Z
EventRecordID
7828
Correlation
-
Execution
[ ProcessID]
1928
[ ThreadID]
10420
Channel
Security
Computer
HansGoosen-PC
Security
-
EventData
TargetUserSid
S-1-5-21-2399486583-1100445512-426617512-1005
TargetUserName
scanner-ricoh
TargetDomainName
HansGoosen-PC
TargetLogonId
0xf62dbe
LogonType
3
The Ricoh MPC3000 uses the SMB-protocol for file transfer.
I already found many threads/solutions via Google but nothing helped so far.
It is strange that the connection TEST on the Ricoh is showing: the connection is OK! While the file is not being transferred when I make a scan……
Who is able to help me out ?