Access to server denied

[Guest]

I have xp professional sp2 installed on my machine. I created multiple user
account (computer administrator / limited) using the master administrator
account. The problem is, when I try to access the server using the accounts
created, I cannot access the server properly. If I try to log into the
server using the master administrator account, I will be prompted to enter
the username & password and then I can choose which folders I want to access.
But with the other user account I created, I go directly into the server
without being prompted and I cannot access anything. Folders are user access
specific unless the folder permission is set as "everyone". Any ideas how
this can be fixed so the other user account can access the server? At least
get prompted... I have tried with xp home machines and xp professional
laptop and also encountered the same problem. As for the server side, it's
not connected to internet so there is no firewall installed.

 

[Chuck]

I have xp professional sp2 installed on my machine. I created multiple user
account (computer administrator / limited) using the master administrator
account. The problem is, when I try to access the server using the accounts
created, I cannot access the server properly. If I try to log into the
server using the master administrator account, I will be prompted to enter
the username & password and then I can choose which folders I want to access.
But with the other user account I created, I go directly into the server
without being prompted and I cannot access anything. Folders are user access
specific unless the folder permission is set as "everyone". Any ideas how
this can be fixed so the other user account can access the server? At least
get prompted... I have tried with xp home machines and xp professional
laptop and also encountered the same problem. As for the server side, it's
not connected to internet so there is no firewall installed.

Have you tried setting permissions for the non-administrative account, or for a
non-administrative group that your non-adminstrative user account is a member
of? Remember, you need to set both Share Permissions ("Sharing - Permissions"),
and NTFS Permissions ("Security"), for each set of folders that you want to be
accessible. And make sure that the account in question is properly activated
for network access.
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Help>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Help

 

[Guest]

Hi Chuck,

Thanks for your reply. I don't know if I understand what you're saying
completely but in the server, permissions and security already been set. All
I wanted is that users can access the necessary files in the server using the
account created under the master administrator account. Say in the server,
there's a folder called "Accounts". Under the folder, permission has been
set to "Allow" under "Full Control", "Change" and "Read". Under the Security
setting, "Modify", "Read & Execute", "List Folder Contents", "Read" and
"Write" are also set to "Allow". And I set this permission to the user say
"Mike". The account "Mike" has already been created under the "Local Users
and Groups". Under the XP Professional user accounts, I have tried setting
the accounts from "Limited" to "Computer Adminstrator" but it still makes no
difference. Only the master administrator account gets prompted to enter
username & password.

-Lucky

 

[Chuck]

Hi Chuck,

Thanks for your reply. I don't know if I understand what you're saying
completely but in the server, permissions and security already been set. All
I wanted is that users can access the necessary files in the server using the
account created under the master administrator account. Say in the server,
there's a folder called "Accounts". Under the folder, permission has been
set to "Allow" under "Full Control", "Change" and "Read". Under the Security
setting, "Modify", "Read & Execute", "List Folder Contents", "Read" and
"Write" are also set to "Allow". And I set this permission to the user say
"Mike". The account "Mike" has already been created under the "Local Users
and Groups". Under the XP Professional user accounts, I have tried setting
the accounts from "Limited" to "Computer Adminstrator" but it still makes no
difference. Only the master administrator account gets prompted to enter
username & password.

-Lucky

OK, if you create the same account on the client and on the server, with an
identical, non-blank password on both, you should expect to get no password
prompt when connecting. If the password is entered when logging in to the
client, and that password is the same on the server, no password prompt is
necessary. This is by design.

So, which specific problem are you observing?
# The non-admin user connects from the client, without getting prompted, and is
able to access resources? See my note above.
# The non-admin user tries to connect from the client, without getting prompted,
and is not able to access resources? If so, was the non-admin account activated
for network access? See my previously linked article.

 

[Guest]

Hi Chuck,

I see. So if the xp professional user account's username & password both
are identical to the username & password create on the server side, then by
default, the user should be able to enter the network with no problem & can
access whatever folder the user can access. I thought this only work for
Windows ME. This works for both XP Professional and XP Home? With any SP
pack?

When the non-admin user connects from the client to the server, the user can
view all the server shared folders (without getting prompted). But the
non-admin user does not have permission to go into the user specific folders.
The non-admin user can however access the "everyone" folder.

There is 1 user here however is able to go into 1 user access folder but
cannot save/edit files but can transfer files out/read. That is the only
exception. This user is a computer administrator account (not master
administrator). This only lasted a few hours. When her PC crashed, she no
longer able to access the folder that she could access earlier.

-Lucky

 

[Chuck]

Hi Chuck,

I see. So if the xp professional user account's username & password both
are identical to the username & password create on the server side, then by
default, the user should be able to enter the network with no problem & can
access whatever folder the user can access. I thought this only work for
Windows ME. This works for both XP Professional and XP Home? With any SP
pack?

This is how Windows Networking works. See the white paper linked from my
article:
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#OlderOS>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#OlderOS

And note the major difference between XP Pro with Simple File Sharing, and with
Advanced File Sharing!
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Advanced>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Advanced

When the non-admin user connects from the client to the server, the user can
view all the server shared folders (without getting prompted). But the
non-admin user does not have permission to go into the user specific folders.
The non-admin user can however access the "everyone" folder.

Right. User specific folders require user specific access, or admin access.
Non admin = no access. See the white paper.

There is 1 user here however is able to go into 1 user access folder but
cannot save/edit files but can transfer files out/read. That is the only
exception. This user is a computer administrator account (not master
administrator). This only lasted a few hours. When her PC crashed, she no
longer able to access the folder that she could access earlier.

Different administrator accounts might have different access ability, on any
computer. There's nothing magical about "administrative" access. Where I used
to work, it was a sort of game for each computer "owner" to change local /
remote access, to block administrative access. They thought they could keep the
admins from sniffing out the illegal movies and music the staff would try and
hide on "their" computers.

How can anybody access any folders when their computer crashes?

 

[Guest]

Hi Chuck,

What is this white paper linked you are referring to? The link I opened is
called white paper linked?

So you are saying as long as the user account created from the XP
Professional is not a computer administrator account, the user cannot access
the server? Then that means I need to enable full access to the XP
Professional PC to all users? The account created on the server side is just
a normal "Users" account. It is not "Administrator" account.

Hehehe... I guess it's a normal thing to find music on staff's machine.
The staff here is not advance enough to know what is a remote access....

When I said her PC crashed and she no longer able to access the folder that
she could access earlier, I meant that after she tried the same way to access
the server, it failed. IE. First time she can access "Admin" folder (direct
access to the server without password prompt). Second time she can access
the server but when she clicked on "Admin" folder, she's denied access.

-Lucky

 

[Chuck]

Hi Chuck,

What is this white paper linked you are referring to? The link I opened is
called white paper linked?

So you are saying as long as the user account created from the XP
Professional is not a computer administrator account, the user cannot access
the server? Then that means I need to enable full access to the XP
Professional PC to all users? The account created on the server side is just
a normal "Users" account. It is not "Administrator" account.

Hehehe... I guess it's a normal thing to find music on staff's machine.
The staff here is not advance enough to know what is a remote access....

When I said her PC crashed and she no longer able to access the folder that
she could access earlier, I meant that after she tried the same way to access
the server, it failed. IE. First time she can access "Admin" folder (direct
access to the server without password prompt). Second time she can access
the server but when she clicked on "Admin" folder, she's denied access.

-Lucky

Read the article. There's a link to a Microsoft white paper in there.

What I said is, a non-admin cannot access personal folders of another person.
To access personal folders, you have to have either the account of the owner, or
an admin account. Read my article:
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Help>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Help

So what happened when the computer crashed? How did you recover from the crash?

What is the server running? XP Home or Pro? If Pro, is Simple File Sharing
enabled or disabled? Again, read my article.

 

[Guest]

Hi Chuck,

Actually if you set the files as private, not even another Computer
Administrator account can access.

I believe our server is using Guest Authentification... I am not familiar
with the terms yet. All folders & certain files have permission and security
enabled.

The PC crashed so she made a force reboot. When the windows starts up
again, she tried to access the server again to find that she can no longer
access anymore. On top of that the master admin account mentioned something
about a corrupted profile. The corrupted profile only started today.

The server is Server 2000 with SP4. The PCs we have here are Windows ME,
Windows XP Home and Windows XP Professional (including Tablet PC). For the
XP Pro, the Simple File Sharing is not checked. Does it really matter? Our
PC are not supposed to access each other. Only access the server. I have
shared files under XP Professional before with the "Use Simple File Sharing"
disabled.

-Lucky

 

[Chuck]

Hi Chuck,

Actually if you set the files as private, not even another Computer
Administrator account can access.

I believe our server is using Guest Authentification... I am not familiar
with the terms yet. All folders & certain files have permission and security
enabled.

The PC crashed so she made a force reboot. When the windows starts up
again, she tried to access the server again to find that she can no longer
access anymore. On top of that the master admin account mentioned something
about a corrupted profile. The corrupted profile only started today.

The server is Server 2000 with SP4. The PCs we have here are Windows ME,
Windows XP Home and Windows XP Professional (including Tablet PC). For the
XP Pro, the Simple File Sharing is not checked. Does it really matter? Our
PC are not supposed to access each other. Only access the server. I have
shared files under XP Professional before with the "Use Simple File Sharing"
disabled.

-Lucky

What matters is how the server is authenticating. If it's using Guest
authentication, then you won't have administrative access. No administrative
access = no access to private folders.

If folders & certain files have permission and security enabled, you need to
know what's enabled, because that could affect what you need to do. This is all
stuff that you need to know, if you're going to own and use a server. It's
stuff that I can't predict, very easily, from here.

If you have a corrupted profile, as a result of the crash, then one very real
possibility is inability to access stuff. It sounds to me like you need to
delete and re add the accounts that you need. It would help if you could
confirm that you are using Guest, and an administrative account.

Do you have any idea why the server crashed? You might want to resolve that
before continuing. Did it do a checkdisk (chkdsk? scandisk?) when it restarted?

 

[Guest]

Hi Chuck,

How do I check if the server is authenticating? I am not sure if I already
have it. The Administrator account exist and is part of the Administrators
group. This should mean this account have access to private folders?
Because at this moment, that account can access all unless a particular file
is for some reason changes ownership. This seems to only happen when a file
is being replaced. The "Owner" setting under Advanced Security change from
Administrators to another user that is...

Yes I am fully aware who can access which folder. If any user can log into
any of the non-master administrator account and can access their own account
in the server that would be awesome.

IE.
Server-side:
Account folder: User Account=Mike/123456, User Account=Kim/741852
Marketing folder: User Account=John/852236

XP Professional/XP Home side:
Non-computer administrator account (Limited): Mike, Kim, John.
Mike, Kim & John should be able to access their own department's folder.
Of course they will need to log off in order for another user to access
another department folder.

The users I listed above can access their accounts in all master
administrator accounts (username & password prompted) but not under
non-master administrator account.

The problem with the corrupted profile belongs to the master administrator
account itself. The other user accounts are working fine. I can't delete
this account...

The server did not crash. It is the user PC that crashed which cause the
corrupted profile I believed. It went to the blue screen and did some kind
of scanning. It did not display any error there. Only when the master
administrator is in the process of being signed on then a small window
display an error message regarding a corrupted profile. When the account is
fully loaded, an error display something about recovering from a serious
error.

-Lucky

 

[Chuck]

Hi Chuck,

How do I check if the server is authenticating? I am not sure if I already
have it. The Administrator account exist and is part of the Administrators
group. This should mean this account have access to private folders?
Because at this moment, that account can access all unless a particular file
is for some reason changes ownership. This seems to only happen when a file
is being replaced. The "Owner" setting under Advanced Security change from
Administrators to another user that is...

Yes I am fully aware who can access which folder. If any user can log into
any of the non-master administrator account and can access their own account
in the server that would be awesome.

IE.
Server-side:
Account folder: User Account=Mike/123456, User Account=Kim/741852
Marketing folder: User Account=John/852236

XP Professional/XP Home side:
Non-computer administrator account (Limited): Mike, Kim, John.
Mike, Kim & John should be able to access their own department's folder.
Of course they will need to log off in order for another user to access
another department folder.

The users I listed above can access their accounts in all master
administrator accounts (username & password prompted) but not under
non-master administrator account.

The problem with the corrupted profile belongs to the master administrator
account itself. The other user accounts are working fine. I can't delete
this account...

The server did not crash. It is the user PC that crashed which cause the
corrupted profile I believed. It went to the blue screen and did some kind
of scanning. It did not display any error there. Only when the master
administrator is in the process of being signed on then a small window
display an error message regarding a corrupted profile. When the account is
fully loaded, an error display something about recovering from a serious
error.

-Lucky

Are the accounts for John, Kim, and Mike, on the server, properly activated for
network access? With matching, non-blank passwords?
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Help>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Help

When you say that the users can't access folders that aren't accessible by
Everyone, it sounds like the server is using Guest authentication (Guest is a
member of Everyone). Which means that the user accounts aren't setup properly.

Generally, the Administrator account has access to all folders, but this is not
a magical possibility. Someone with the right access can change rights for any
folder.

 

[Guest]

Hi Chuck,

Yes the username & password are absolutely identical both on server & pc
side. There is no space and all at least 6 characters long. The shortest
username is 2 characters long. Our boss wants everything short and less
click. Could this be preventing the non-administrator account from
connecting?

when you said user account are not setup properly, how to set it up
properly? I have already give almost full permission except full control
under security settings for the folders they're suppose to access.

As for the one with ownership, I have to physically go change the ownership
myself back to administrators using the server account.

-Lucky

 

[Chuck]

Hi Chuck,

Yes the username & password are absolutely identical both on server & pc
side. There is no space and all at least 6 characters long. The shortest
username is 2 characters long. Our boss wants everything short and less
click. Could this be preventing the non-administrator account from
connecting?

when you said user account are not setup properly, how to set it up
properly? I have already give almost full permission except full control
under security settings for the folders they're suppose to access.

As for the one with ownership, I have to physically go change the ownership
myself back to administrators using the server account.

-Lucky

Setting up file sharing, using Windows Advanced File Sharing authentication and
authorisation, is a pretty complex process. If you don't do it properly, you
may end up using Guest authentication, which is what it sounds like you're
getting.

Now, I don't pretend to know everything about Windows Networking, and File
Sharing. I don't think anybody who really knows Windows Networking will make
that claim either.

I've been writing about the many steps involved, for over a year now, and have
condensed what I know into my website. It's a hypertext document, and links a
lot to other articles. You have to follow each link, if you read any detail
that you don't agree with, or don't understand.
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html

Tell us a little about your LAN, please.
# You have a server, that's not used as anybody's desktop computer right?
# How many employees?
# How many desktop computers?
# Do the employees ever share desks or fill in for each other?
# Do you have any turnover of staff?

 

[Guest]

Hi Chuck,

I have tried following the steps under "Advance aka Classic File Sharing".
However when I tried to look for "Use simple file sharing", I do not see
anything under the View tab. I don't see any sub folders either. I checked
this twice today and once last week to double check.

The accounts are all active (for both server side and pc side). Not disabled.

Information about our LAN:

1. The server is not used by anyone. It's not used as a desktop. There's
nothing installed so not worthwile to be used as desktop!
2. There are 11 employees but only 10 use computers. Plus another 2 which
is temporarily sharing the network (another company). So to say there are 12
users.
3. Desktop = 10, laptop = 3 (1 of which is connected perhaps 1 - 2 hrs a
day to transfer data in & out)
4. Sometimes the desktop/laptop are shared because there is a lack of
resource. That's why there is a need for multiple accounts. Not all
desktop/laptop has microsoft office installed.
5. There is... There used to be more users. At the moment the number will
not increase/decrease for the next 2-3 months.

By the way, the server is Windows 2000 & NTFS ready. In the near future we
are adding 2 new pcs into the network. So there will be 2 extra pc connected
to server. We have 15 CAL so we're still within that number.

Laptop / PC OS:

1 tablet PC - XP Professional
2 laptop - 1 XP Professional, 1 XP Home (the one that connects 1 - 2 hrs a
day)
10 - 1 XP Professional, 4 XP Home, 4 Win ME, 1 Server 2000 (This is our 2nd
server which is used as desktop temporarily. Absolutely no one has access to
this server by the way.)

In about 2 - 3 months, all PC/laptop will be upgraded to XP Professional.
Our 2nd server will be taken off the LAN when the upgrade happens.

-Lucky

 

[Chuck]

Hi Chuck,

I have tried following the steps under "Advance aka Classic File Sharing".
However when I tried to look for "Use simple file sharing", I do not see
anything under the View tab. I don't see any sub folders either. I checked
this twice today and once last week to double check.

The accounts are all active (for both server side and pc side). Not disabled.

Information about our LAN:

1. The server is not used by anyone. It's not used as a desktop. There's
nothing installed so not worthwile to be used as desktop!
2. There are 11 employees but only 10 use computers. Plus another 2 which
is temporarily sharing the network (another company). So to say there are 12
users.
3. Desktop = 10, laptop = 3 (1 of which is connected perhaps 1 - 2 hrs a
day to transfer data in & out)
4. Sometimes the desktop/laptop are shared because there is a lack of
resource. That's why there is a need for multiple accounts. Not all
desktop/laptop has microsoft office installed.
5. There is... There used to be more users. At the moment the number will
not increase/decrease for the next 2-3 months.

By the way, the server is Windows 2000 & NTFS ready. In the near future we
are adding 2 new pcs into the network. So there will be 2 extra pc connected
to server. We have 15 CAL so we're still within that number.

Laptop / PC OS:

1 tablet PC - XP Professional
2 laptop - 1 XP Professional, 1 XP Home (the one that connects 1 - 2 hrs a
day)
10 - 1 XP Professional, 4 XP Home, 4 Win ME, 1 Server 2000 (This is our 2nd
server which is used as desktop temporarily. Absolutely no one has access to
this server by the way.)

In about 2 - 3 months, all PC/laptop will be upgraded to XP Professional.
Our 2nd server will be taken off the LAN when the upgrade happens.

-Lucky

If your computer is running XP Pro, and there is no selection for Simple File
Sharing, then the computer must be joined to a domain. When an XP Pro computer
is joined to a domain, SFS is disabled automatically, and there is no selection.

In this case, the whole situation changes. So the first thing you need to do is
tell me if you have a domain, or a workgroup.

If you're in a workgroup, and you have all of these expansion plans, you are
prime candidate for setting up a domain. If you have a domain, either I'm
misunderstanding how your accounts are setup, or you need to review the benefits
of having a domain, and simplify your setup.
<http://nitecruzr.blogspot.com/2005/07/windows-networking.html>
http://nitecruzr.blogspot.com/2005/07/windows-networking.html

 

[Guest]

Hi Chuck,

The server is setup as a workgroup... All PC/laptop is using a workgroup.
Absolutely no domain involved in our network at the moment. But we do have
WIFI in our network. Which doesn't matter much right? Sorry I did not
clarify about the "Advance aka Classic File Sharing". This was referring to
the Server... For the XP Professional machines, "Simple file sharing" is
unclicked. I thought the instruction was for the server... The server is
using NTFS system...

I have heard domain is good but I have not looked into it yet... I heard
it's harder to manage & we do not have the resources yet so it is KIV at the
moment. I read your link but still not sure how it work. Is it IP based?
If it is so, that would mean there cannot be more than 1 user per machine?
Since there can only be 1 IP per machine. I do not understand DNS or WINS so
I will have to look more into this. The equipment won't come until 2-3
months time... Even when the time comes, is it not more tedious to change
the server from workgroup to domain? There will be a need to rework the
permission/security...

-Lucky

 

[Chuck]

Hi Chuck,

The server is setup as a workgroup... All PC/laptop is using a workgroup.
Absolutely no domain involved in our network at the moment. But we do have
WIFI in our network. Which doesn't matter much right? Sorry I did not
clarify about the "Advance aka Classic File Sharing". This was referring to
the Server... For the XP Professional machines, "Simple file sharing" is
unclicked. I thought the instruction was for the server... The server is
using NTFS system...

I have heard domain is good but I have not looked into it yet... I heard
it's harder to manage & we do not have the resources yet so it is KIV at the
moment. I read your link but still not sure how it work. Is it IP based?
If it is so, that would mean there cannot be more than 1 user per machine?
Since there can only be 1 IP per machine. I do not understand DNS or WINS so
I will have to look more into this. The equipment won't come until 2-3
months time... Even when the time comes, is it not more tedious to change
the server from workgroup to domain? There will be a need to rework the
permission/security...

-Lucky

Lucky,

The presence of WiFi in any workgroup is always a challenge, but I doubt that it
has anything to do with your immediate symptoms.

With over 10 computers, over 10 employees, and some sharing of computers, you
would be so better off with a domain. Now to concepts. A domain, like a
workgroup, uses whatever network infrastructure you have in place. There is no
limitation of 1 user / computer.

A domain is a small amount of work to setup, but the payback, when you
administer one, is considerable.
<http://nitecruzr.blogspot.com/2005/08/setting-up-domain-or-workgroup-plan.html>
http://nitecruzr.blogspot.com/2005/08/setting-up-domain-or-workgroup-plan.html

Anyway, now that I know that you're using a workgroup, my previous suspicions
are still valid. If you have accounts on the server that aren't properly
activated for network access, when anybody logs in to their local computer and
tries to access the server, he / she could be using the Guest account on the
server. Guest will give limited to no ability, per your symptoms. Please make
sure that Mike/123456, Kim/741852, and John/852236 are properly activated on the
server.
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Activate>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Activate

 

[Guest]

Hi Chuck,

At the moment the WiFi is not posing any problem... Perhaps when I change
the Access Point with another and perhaps when all machines are upgraded...

Regarding domain, will there still be permissions & security? Because not
only certain folders have restrictions to who have access to view & modify
but files itself as well. For example:

Account/balance.xls
Account/productivity rate.xls
Account/debtor.xls
Account/payment.xls
Account/vouchers.xls
Account/Stationaries.xls

Marketing/xx.xls
Marketing/xxx.xls
Marketing/sales.xls
Marketing/clientlist.doc

At anytime all accountants (mark, mike) can view & modify the files within
the Account folder. But say we have a debt collector (tom), he can go into
the Account folder but in reality can only open/modify debtor.xls only. The
boss on the other hand will be able to view everything but cannot edit
anything. Say I enable all employee access to view the stationaries stock
for view but cannot edit as well. Etc... It gets really complicated as
there are too many folder and files which needs to be setup.

I read through the link but it does not answer what I needed to know. We
have Windows 2000 but should work about the same right (domain wise)?

As per your comment regarding "properly activated on the server", the
"Account is disabled" is unchecked. In fact, none of the account is
disabled. Is this what you're referring to?

-Lucky

 

[Chuck]

Hi Chuck,

At the moment the WiFi is not posing any problem... Perhaps when I change
the Access Point with another and perhaps when all machines are upgraded...

Regarding domain, will there still be permissions & security? Because not
only certain folders have restrictions to who have access to view & modify
but files itself as well. For example:

Account/balance.xls
Account/productivity rate.xls
Account/debtor.xls
Account/payment.xls
Account/vouchers.xls
Account/Stationaries.xls

Marketing/xx.xls
Marketing/xxx.xls
Marketing/sales.xls
Marketing/clientlist.doc

At anytime all accountants (mark, mike) can view & modify the files within
the Account folder. But say we have a debt collector (tom), he can go into
the Account folder but in reality can only open/modify debtor.xls only. The
boss on the other hand will be able to view everything but cannot edit
anything. Say I enable all employee access to view the stationaries stock
for view but cannot edit as well. Etc... It gets really complicated as
there are too many folder and files which needs to be setup.

I read through the link but it does not answer what I needed to know. We
have Windows 2000 but should work about the same right (domain wise)?

As per your comment regarding "properly activated on the server", the
"Account is disabled" is unchecked. In fact, none of the account is
disabled. Is this what you're referring to?

-Lucky

Lucky,

Domain authentication and authorisation is greatly similar to workgroup
authentication and authorisation. If you can do it in a workgroup, you can do
it in a domain. The advantage of a domain is that you can store and maintain
the authentication and authorisation information in a central server, the domain
controller, instead of (as well as) in the individual servers, and the client
computers.

Setting up authorisation groups, to separate access for Mark and Mike from Tom,
is the same for a domain as for a workgroup. It's just easier if you want to
add somebody to work with Tom. If Tom gets an assistant, adding an assistant is
as simple as creating a new account, and indicating that the new account is part
of the same functional group as Tom. Regardless of how many client and servers
you have.

Windows 2000 and Windows XP Pro work the same, if Simple File Sharing is
disabled under XP Pro. Joined to a domain, all XP Pro computers run with SFS
disabled, no option. Computers running XP Home can access domain resources as
if there was a workgroup, but they can't join a domain, no option.

And yes the "Account is disabled" is unchecked means the account is activated
properly for network access. IFF that is what you're seeing on the server. In
that case, we have more work to do.