IT Support Playbooks / IT Support Guides
Identify the account used for a Windows file share
A user can be signed into Windows with one identity while an SMB connection uses another. Inspect the established share session before changing server permissions.
Environment and inputs: Everyday IT support · Windows PowerShell examples unless specified
Try the diagnostic command
Use the stated shell and platform. Replace sample domains, addresses, services and paths with values from the system you are authorized to support.
Get-SmbConnection | Select-Object ServerName, ShareName, UserName, Dialect
How to read the result
The result reports established SMB client connections and the identity associated with them. No result can mean there is no visible active SMB connection in that context.
What to do next
Compare the server, share and account with the access request. Test the exact UNC path and involve the share owner when the intended account lacks the required authorization.
Before you make a change
Do not grant broad access to compensate for a wrong session identity. Disconnecting SMB sessions can interrupt open documents and should be coordinated with the user.