win7 enterprise laptop (win7, 64 bit, in a workgroup, not domain member) and want to map to a share (\\domain\share) of a file server (2008R2, SP1) which is a domain member. All users that allowed to logon to all computers can map a drive to the share no problem from this laptop, but if a domain user that is allowed to log on to this file server only (this will be the reality, unfortunately) will get error message: "The mapped network drive could not be created because the following error has occurred: An extended error has occurred." from map a drive GUI; Using net view command line, it will have an error 5 - access denied. Tracing the packets, we have discovered that the file server did talk to DC but DC denied it by " xxxx xxxxx xxxxx ............. SMB2 131 SessionSetup Response, Error: STATUS_INVALID_WORKSTATION" *the clock and date are all right on both laptop and file server; *domanname\domainusername and correct password was used; *File server communicated with DC using NTLMSSP, map request and NetrLogonEx request in sequence. Has anyone seen this before? Thank you ahead for any suggestion! JY

You must add the laptop into DomainRegards, Kalyan.