{"id":3573,"date":"2025-05-02T14:07:19","date_gmt":"2025-05-02T18:07:19","guid":{"rendered":"https:\/\/increasec.com\/?p=3573"},"modified":"2025-05-02T14:08:44","modified_gmt":"2025-05-02T18:08:44","slug":"tailscale-and-smb-file-shares","status":"publish","type":"post","link":"https:\/\/increasec.com\/?p=3573","title":{"rendered":"Tailscale and SMB file shares"},"content":{"rendered":"\n<p>Tailscale is good for getting basic IP connectivity but it introduces some complexity when the user needs INTERNAL DNS for domain authentication.<\/p>\n\n\n\n<p>Case in point; remote user is trying to connect to an SMB share.  He has software installed locally, his laptop is NOT connected to the domain.<br>Testing shows the user can ping the file server but not connect to the share.<\/p>\n\n\n\n<p>SOLVED:<br>Log into the tailscale console as an administrator and click the <strong>DNS <\/strong>tab<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"973\" height=\"80\" src=\"https:\/\/increasec.com\/wp-content\/uploads\/2025\/05\/image.png\" alt=\"\" class=\"wp-image-3576\" srcset=\"https:\/\/increasec.com\/wp-content\/uploads\/2025\/05\/image.png 973w, https:\/\/increasec.com\/wp-content\/uploads\/2025\/05\/image-300x25.png 300w, https:\/\/increasec.com\/wp-content\/uploads\/2025\/05\/image-768x63.png 768w\" sizes=\"auto, (max-width: 973px) 100vw, 973px\" \/><\/figure>\n\n\n\n<p>Scroll down to Nameservers, and pull down &#8220;Add nameserver&#8221;<\/p>\n\n\n\n<p>Choose to add a <strong>Custom<\/strong>&#8230;<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"762\" height=\"380\" src=\"https:\/\/increasec.com\/wp-content\/uploads\/2025\/05\/image-2.png\" alt=\"\" class=\"wp-image-3578\" srcset=\"https:\/\/increasec.com\/wp-content\/uploads\/2025\/05\/image-2.png 762w, https:\/\/increasec.com\/wp-content\/uploads\/2025\/05\/image-2-300x150.png 300w\" sizes=\"auto, (max-width: 762px) 100vw, 762px\" \/><\/figure>\n\n\n\n<p>For Nameserver type the IP address of your <strong>internal <\/strong>DNS server \/ Domain Controller<\/p>\n\n\n\n<p>Enable Restrict to domain \/ Split DNS<\/p>\n\n\n\n<p>Under Domain enter your internal domain name, hint; it may end in .local <\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"564\" height=\"520\" src=\"https:\/\/increasec.com\/wp-content\/uploads\/2025\/05\/image-3.png\" alt=\"\" class=\"wp-image-3579\" srcset=\"https:\/\/increasec.com\/wp-content\/uploads\/2025\/05\/image-3.png 564w, https:\/\/increasec.com\/wp-content\/uploads\/2025\/05\/image-3-300x277.png 300w\" sizes=\"auto, (max-width: 564px) 100vw, 564px\" \/><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<p>Now all internal domain related DNS will go to the Domain Controller and your domain credentials will automatically be used for SMB shares, providing your laptop is part of the domain and you are logged in with a domain account.   If you are not using a domain account you will be prompted for valid domain credentials.<\/p>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Tailscale is good for getting basic IP connectivity but it introduces some complexity when the user needs INTERNAL DNS for domain authentication. Case in point; remote user is trying to&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[51,3,205],"class_list":["post-3573","post","type-post","status-publish","format-standard","hentry","category-uncategorised","tag-domain","tag-smb","tag-tailscale"],"_links":{"self":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/3573","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3573"}],"version-history":[{"count":5,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/3573\/revisions"}],"predecessor-version":[{"id":3582,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/3573\/revisions\/3582"}],"wp:attachment":[{"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3573"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3573"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3573"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}