I have xp professional sp2 installed on my machine. I created multiple user
account (computer administrator / limited) using the master administrator
account. The problem is, when I try to access the server using the accounts
created, I cannot access the server properly. If I try to log into the
server using the master administrator account, I will be prompted to enter
the username & password and then I can choose which folders I want to access.
But with the other user account I created, I go directly into the server
without being prompted and I cannot access anything. Folders are user access
specific unless the folder permission is set as "everyone". Any ideas how
this can be fixed so the other user account can access the server? At least
get prompted... I have tried with xp home machines and xp professional
laptop and also encountered the same problem. As for the server side, it's
not connected to internet so there is no firewall installed.

On Wed, 1 Mar 2006 19:36:26 -0800, "Lucky" <(E-Mail Removed)>
wrote:

>I have xp professional sp2 installed on my machine. I created multiple user
>account (computer administrator / limited) using the master administrator
>account. The problem is, when I try to access the server using the accounts
>created, I cannot access the server properly. If I try to log into the
>server using the master administrator account, I will be prompted to enter
>the username & password and then I can choose which folders I want to access.
> But with the other user account I created, I go directly into the server
>without being prompted and I cannot access anything. Folders are user access
>specific unless the folder permission is set as "everyone". Any ideas how
>this can be fixed so the other user account can access the server? At least
>get prompted... I have tried with xp home machines and xp professional
>laptop and also encountered the same problem. As for the server side, it's
>not connected to internet so there is no firewall installed.

Have you tried setting permissions for the non-administrative account, or for a
non-administrative group that your non-adminstrative user account is a member
of? Remember, you need to set both Share Permissions ("Sharing - Permissions"),
and NTFS Permissions ("Security"), for each set of folders that you want to be
accessible. And make sure that the account in question is properly activated
for network access.
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Help>
http://nitecruzr.blogspot.com/2005/0...s-xp.html#Help

--
Cheers,
Chuck, MS-MVP [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My email is AT DOT
actual address pchuck mvps org.

Hi Chuck,

Thanks for your reply. I don't know if I understand what you're saying
completely but in the server, permissions and security already been set. All
I wanted is that users can access the necessary files in the server using the
account created under the master administrator account. Say in the server,
there's a folder called "Accounts". Under the folder, permission has been
set to "Allow" under "Full Control", "Change" and "Read". Under the Security
setting, "Modify", "Read & Execute", "List Folder Contents", "Read" and
"Write" are also set to "Allow". And I set this permission to the user say
"Mike". The account "Mike" has already been created under the "Local Users
and Groups". Under the XP Professional user accounts, I have tried setting
the accounts from "Limited" to "Computer Adminstrator" but it still makes no
difference. Only the master administrator account gets prompted to enter
username & password.

-Lucky

On Wed, 1 Mar 2006 23:27:04 -0800, "Lucky" <(E-Mail Removed)>
wrote:

>Hi Chuck,
>
>Thanks for your reply. I don't know if I understand what you're saying
>completely but in the server, permissions and security already been set. All
>I wanted is that users can access the necessary files in the server using the
>account created under the master administrator account. Say in the server,
>there's a folder called "Accounts". Under the folder, permission has been
>set to "Allow" under "Full Control", "Change" and "Read". Under the Security
>setting, "Modify", "Read & Execute", "List Folder Contents", "Read" and
>"Write" are also set to "Allow". And I set this permission to the user say
>"Mike". The account "Mike" has already been created under the "Local Users
>and Groups". Under the XP Professional user accounts, I have tried setting
>the accounts from "Limited" to "Computer Adminstrator" but it still makes no
>difference. Only the master administrator account gets prompted to enter
>username & password.
>
>-Lucky

OK, if you create the same account on the client and on the server, with an
identical, non-blank password on both, you should expect to get no password
prompt when connecting. If the password is entered when logging in to the
client, and that password is the same on the server, no password prompt is
necessary. This is by design.

So, which specific problem are you observing?
# The non-admin user connects from the client, without getting prompted, and is
able to access resources? See my note above.
# The non-admin user tries to connect from the client, without getting prompted,
and is not able to access resources? If so, was the non-admin account activated
for network access? See my previously linked article.

--
Cheers,
Chuck, MS-MVP [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My email is AT DOT
actual address pchuck mvps org.

Hi Chuck,

I see. So if the xp professional user account's username & password both
are identical to the username & password create on the server side, then by
default, the user should be able to enter the network with no problem & can
access whatever folder the user can access. I thought this only work for
Windows ME. This works for both XP Professional and XP Home? With any SP
pack?

When the non-admin user connects from the client to the server, the user can
view all the server shared folders (without getting prompted). But the
non-admin user does not have permission to go into the user specific folders.
The non-admin user can however access the "everyone" folder.

There is 1 user here however is able to go into 1 user access folder but
cannot save/edit files but can transfer files out/read. That is the only
exception. This user is a computer administrator account (not master
administrator). This only lasted a few hours. When her PC crashed, she no
longer able to access the folder that she could access earlier.

-Lucky

On Thu, 2 Mar 2006 15:56:16 -0800, "Lucky" <(E-Mail Removed)>
wrote:

>Hi Chuck,
>
>I see. So if the xp professional user account's username & password both
>are identical to the username & password create on the server side, then by
>default, the user should be able to enter the network with no problem & can
>access whatever folder the user can access. I thought this only work for
>Windows ME. This works for both XP Professional and XP Home? With any SP
>pack?

This is how Windows Networking works. See the white paper linked from my
article:
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#OlderOS>
http://nitecruzr.blogspot.com/2005/0...p.html#OlderOS

And note the major difference between XP Pro with Simple File Sharing, and with
Advanced File Sharing!
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Advanced>
http://nitecruzr.blogspot.com/2005/0....html#Advanced


>When the non-admin user connects from the client to the server, the user can
>view all the server shared folders (without getting prompted). But the
>non-admin user does not have permission to go into the user specific folders.
> The non-admin user can however access the "everyone" folder.

Right. User specific folders require user specific access, or admin access.
Non admin = no access. See the white paper.


>There is 1 user here however is able to go into 1 user access folder but
>cannot save/edit files but can transfer files out/read. That is the only
>exception. This user is a computer administrator account (not master
>administrator). This only lasted a few hours. When her PC crashed, she no
>longer able to access the folder that she could access earlier.

Different administrator accounts might have different access ability, on any
computer. There's nothing magical about "administrative" access. Where I used
to work, it was a sort of game for each computer "owner" to change local /
remote access, to block administrative access. They thought they could keep the
admins from sniffing out the illegal movies and music the staff would try and
hide on "their" computers.

How can anybody access any folders when their computer crashes?

--
Cheers,
Chuck, MS-MVP [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My email is AT DOT
actual address pchuck mvps org.

Hi Chuck,

What is this white paper linked you are referring to? The link I opened is
called white paper linked?

So you are saying as long as the user account created from the XP
Professional is not a computer administrator account, the user cannot access
the server? Then that means I need to enable full access to the XP
Professional PC to all users? The account created on the server side is just
a normal "Users" account. It is not "Administrator" account.

Hehehe... I guess it's a normal thing to find music on staff's machine.
The staff here is not advance enough to know what is a remote access....

When I said her PC crashed and she no longer able to access the folder that
she could access earlier, I meant that after she tried the same way to access
the server, it failed. IE. First time she can access "Admin" folder (direct
access to the server without password prompt). Second time she can access
the server but when she clicked on "Admin" folder, she's denied access.

-Lucky

On Thu, 2 Mar 2006 16:57:26 -0800, Lucky <(E-Mail Removed)>
wrote:

>Hi Chuck,
>
>What is this white paper linked you are referring to? The link I opened is
>called white paper linked?
>
>So you are saying as long as the user account created from the XP
>Professional is not a computer administrator account, the user cannot access
>the server? Then that means I need to enable full access to the XP
>Professional PC to all users? The account created on the server side is just
>a normal "Users" account. It is not "Administrator" account.
>
>Hehehe... I guess it's a normal thing to find music on staff's machine.
> The staff here is not advance enough to know what is a remote access....
>
>When I said her PC crashed and she no longer able to access the folder that
>she could access earlier, I meant that after she tried the same way to access
>the server, it failed. IE. First time she can access "Admin" folder (direct
>access to the server without password prompt). Second time she can access
>the server but when she clicked on "Admin" folder, she's denied access.
>
>-Lucky

Read the article. There's a link to a Microsoft white paper in there.

What I said is, a non-admin cannot access personal folders of another person.
To access personal folders, you have to have either the account of the owner, or
an admin account. Read my article:
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Help>
http://nitecruzr.blogspot.com/2005/0...s-xp.html#Help

So what happened when the computer crashed? How did you recover from the crash?

What is the server running? XP Home or Pro? If Pro, is Simple File Sharing
enabled or disabled? Again, read my article.

--
Cheers,
Chuck, MS-MVP [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My email is AT DOT
actual address pchuck mvps org.

Hi Chuck,

Actually if you set the files as private, not even another Computer
Administrator account can access.

I believe our server is using Guest Authentification... I am not familiar
with the terms yet. All folders & certain files have permission and security
enabled.

The PC crashed so she made a force reboot. When the windows starts up
again, she tried to access the server again to find that she can no longer
access anymore. On top of that the master admin account mentioned something
about a corrupted profile. The corrupted profile only started today.

The server is Server 2000 with SP4. The PCs we have here are Windows ME,
Windows XP Home and Windows XP Professional (including Tablet PC). For the
XP Pro, the Simple File Sharing is not checked. Does it really matter? Our
PC are not supposed to access each other. Only access the server. I have
shared files under XP Professional before with the "Use Simple File Sharing"
disabled.

-Lucky

On Thu, 2 Mar 2006 20:16:27 -0800, Lucky <(E-Mail Removed)>
wrote:

>Hi Chuck,
>
>Actually if you set the files as private, not even another Computer
>Administrator account can access.
>
>I believe our server is using Guest Authentification... I am not familiar
>with the terms yet. All folders & certain files have permission and security
>enabled.
>
>The PC crashed so she made a force reboot. When the windows starts up
>again, she tried to access the server again to find that she can no longer
>access anymore. On top of that the master admin account mentioned something
>about a corrupted profile. The corrupted profile only started today.
>
>The server is Server 2000 with SP4. The PCs we have here are Windows ME,
>Windows XP Home and Windows XP Professional (including Tablet PC). For the
>XP Pro, the Simple File Sharing is not checked. Does it really matter? Our
>PC are not supposed to access each other. Only access the server. I have
>shared files under XP Professional before with the "Use Simple File Sharing"
>disabled.
>
>-Lucky

What matters is how the server is authenticating. If it's using Guest
authentication, then you won't have administrative access. No administrative
access = no access to private folders.

If folders & certain files have permission and security enabled, you need to
know what's enabled, because that could affect what you need to do. This is all
stuff that you need to know, if you're going to own and use a server. It's
stuff that I can't predict, very easily, from here.

If you have a corrupted profile, as a result of the crash, then one very real
possibility is inability to access stuff. It sounds to me like you need to
delete and re add the accounts that you need. It would help if you could
confirm that you are using Guest, and an administrative account.

Do you have any idea why the server crashed? You might want to resolve that
before continuing. Did it do a checkdisk (chkdsk? scandisk?) when it restarted?

--
Cheers,
Chuck, MS-MVP [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My email is AT DOT
actual address pchuck mvps org.