Logon failure while accessing WinXP Home

[Guest]

I have two systems one a desktop and other a laptop. The desktop is loaded
with WinXP pro SP2 and the laptop has WinXP Home SP2 installed. Both are
connected to each other via a crossover cable. I am not able to access the
laptop(XP home) from my desktop(XP Pro).
the desktop has two netwodk cards one for internet and other for connectiong
to laptop. It (desktop) has internet connection sharing enabled and firwall
(only for the internet connection) enabled.
Both the systems are able to ping each other and the laptop is able to gain
access to inernet via the desktop. Also the laptop is able to access the
shared folders of the desktop(Laptop has firwall disabled). Both have the
same user account (without password) by which i am logging on.
The problem occurs when i click on the laptop icon in Network Neighbourhood
of the desktop, i get the following error:
\\computername is not accesiible. You might not have permission to use this
network resource. Contact the administrator of this server to find out if you
have access permissions.
Logon failure: the user has not been granted the requested logon type at
this computer.

I have changed the User Rights Assignment policy -> Access this computer
from the network and added all sorts of users into it. Also i have removed
all user objects from the policy "Deny access to this computer from the
network",but to no avail . Both policies can be found in Administrative tools
-> Local Security Setings -> Local Policies. Also there is no security
settings in XP Home(laptop) so i cant configure anything there.
I have already tried:
Enabling and disabling "use simple file sharing" on the dsktop.
Setting up a home office network on laptop.
any help in this matter would be appriciated.
Thanks in advance.

 

[Doug Sherman [MVP]]

"Also there is no security settings in XP Home(laptop) so i cant configure
anything there."

It sounds like the firewall is blocking file and printer sharing. Are you
saying that you cannot access the laptop's firewall settings to see if it is
enabled? If so, go to Administrative Tools/Services. Scroll down to
Windows Firewall/Internet Connection Sharing. If the status is 'started',
right click on it and select Stop.

Doug Sherman
MCSE, MCSA, MCP+I, MVP

 

[Ron Lowe]

The problem occurs when i click on the laptop icon in Network

Neighbourhood
of the desktop, i get the following error:
\\computername is not accesiible. You might not have permission to use
this
network resource. Contact the administrator of this server to find out if
you
have access permissions.
Logon failure: the user has not been granted the requested logon type at
this computer.

This is a problem with the user rights assignment on the XP-Home laptop...

I have changed the User Rights Assignment policy -> Access this computer
from the network and added all sorts of users into it. Also i have removed
all user objects from the policy "Deny access to this computer from the
network",but to no avail . Both policies can be found in Administrative
tools
-> Local Security Setings -> Local Policies.

That's the right place to look, but on the wrong machine.
The problem is on the laptop.
But as you have discovered.....

Also there is no security
settings in XP Home(laptop) so i cant configure anything there.

Indeed.
And therin lies the problem.

MS removed a lot of the security config tools from XP home.
Sounds OK, untill this kind of problem arises.

Anyway, here's the work-around..
You need to use the program NTRIGHTS.
It's missing from XP home, but you can get it as part of the Server Resource
Kit add-on.
Download and install the Windows 2003 Server Resource Kit Tools:
http://www.microsoft.com/downloads/...69-57ff-4ae7-96ee-b18c4790cffd&displaylang=en

To run it, go to:
Start | All Programs | Windows Resource Kit Tools | Command Shell.

A command prompt window will open.
Type these commands, be carefull to use capital letters exactly as shown:

net user guest /active:yes

( this enables the guest account, necessary for XP-Home Simple File
Sharing )

ntrights +r SeNetworkLogonRight -u Guest

( This grants the user 'Guest' the rights to log on across the network )

ntrights -r SeDenyNetworkLogonRight -u Guest

( This ensures the Guest account is not explicitly prohibited from accessing
the machine across the network. )

 

[Guest]

Hi..
I tried the commands which you said. but i am still not able to gain access
to the Laptop(winXP Home). though the error has changed.
Now when i click on the laptop icon in the Network Neighbourhood of the
desktop, i get the follwoing error.
\\laptop is not accesiible. You might not have permission to use this
network resource. Contact the administrator of this server to find out if you
have access permissions.
Access is denied.
Now please tell me, what might be the problem ?? I didn know that connecting
2 XP systems would be such a problem.
Regards
Saumitra

 

[Guest]

Hi..
Firewall on both the desktop(the conection to the laptop)and laptop are
disabled. Printer and file sharing are ON on both the systems. I feel this
has something to do with access permissions or security policy but which one
and on which system that seems to be the problem.
Regards
Saumitra

 

[Ron Lowe]

Hi..
I tried the commands which you said. but i am still not able to gain
access
to the Laptop(winXP Home). though the error has changed.
Now when i click on the laptop icon in the Network Neighbourhood of the
desktop, i get the follwoing error.
\\laptop is not accesiible. You might not have permission to use this
network resource. Contact the administrator of this server to find out if
you
have access permissions.
Access is denied.
Now please tell me, what might be the problem ?? I didn know that
connecting
2 XP systems would be such a problem.
Regards
Saumitra

Well, that is actually progress, believe it or not.

The simplest thing to try first is to un-share anything you have shared on
the laptop.
Then re-run the network setup wizard...

R-click some folder in Windows Explorer, and choose Sharing and Security;
Look at what it says in the Network Sharing and Security box.
It may tell you that sharing is disabled, and offer to run the wizard, or
just enable sharing.
Run the wizard from here.

Then share a folder.
This should correctly set up the guest account.

If that fails, we can do this manually, but that's rather tedious.

As a next step, quickly check the guest account is actually active:
R-click My Computer | Manage
Local Users And Groups
Users
Check the Gueat account: there should be no red X on it.
If there is, double-click it and un-check 'Account is Disabled'.

 

[Guest]

Hi again,
Still the problem persists.
I tried to unshare everything form the laptop(XP Home).
Apart from "Printers and Faxes" and "Scheduled Tasks" i was able to unshare
everything.
I tried to share the folder from windows explorer, but it didnt ask to run
netowrk sharing wizard it just asked me to name a share.
I re-ran the wizard from network neightbourhood(nothing was shared at this
moment part from the two items mentioned above.)
Still the the result was access denied.
till this time the Guest account remained disabled.
There is no option for Manage-> Local users and groups in the MMC shown.
So i was only able to enable guest account from Control Panel-> User Accounts.
but still there was no chage in the result.
Now what should i do??
regards
Saumitra

 

[Ron Lowe]

[ fixed : Logon failure: the user has not been granted the requested logon
type at
this computer. ]

Well, that is actually progress, believe it or not.
[ do stuff ]

Hi again,
Still the problem persists. [..]
Still the the result was access denied.
There is no option for Manage-> Local users and groups

Yes, sorry, that command is not available in XP-Home.
We'll do it from the command line instead.

Can I summarise where we are?
The machine is pingable, firewall has F+P exception enabled.
It is XP home, so Simple File Sharing is in force.
Yet is won't enumerate its shares, failing with error code 5 'Access
Denied'.

On the laptop, go to a command prompt, and issue the command

net user guest

Look at the output.
There is a line 'Account Active yes/no'
Is the Guest account active?
If not, issue the command:

net user guest /active:yes

Once you are sure the Guest account is active,
go to start | Run | type 'Regedit' in the box.

On the left hand pane, navigate to:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\

In the LSA folder, look in the right-hand pane.
look for the value 'RestrictAnonymous'.

It needs to be zero.
If it is not, double-click it and set it to zero.

( The value of RestrictAnonymousSam can be left at 1. )

Close regedit, and re-boot the server machine.

See if that helps.

 

[Guest]

[ fixed : Logon failure: the user has not been granted the requested logon
type at
this computer. ]

Now when i click on the laptop icon in the Network Neighbourhood of the
desktop, i get the follwoing error.
\\laptop is not accesiible. You might not have permission to use this
network resource. Contact the administrator of this server to find out
if
you have access permissions. Access is denied.

Well, that is actually progress, believe it or not.
[ do stuff ]

Hi again,
Still the problem persists. [..]
Still the the result was access denied.
There is no option for Manage-> Local users and groups

Yes, sorry, that command is not available in XP-Home.
We'll do it from the command line instead.

Can I summarise where we are?
The machine is pingable, firewall has F+P exception enabled.
It is XP home, so Simple File Sharing is in force.
Yet is won't enumerate its shares, failing with error code 5 'Access
Denied'.

On the laptop, go to a command prompt, and issue the command

net user guest

Look at the output.
There is a line 'Account Active yes/no'
Is the Guest account active?
If not, issue the command:

net user guest /active:yes

Once you are sure the Guest account is active,
go to start | Run | type 'Regedit' in the box.

On the left hand pane, navigate to:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\

In the LSA folder, look in the right-hand pane.
look for the value 'RestrictAnonymous'.

It needs to be zero.
If it is not, double-click it and set it to zero.

( The value of RestrictAnonymousSam can be left at 1. )

Close regedit, and re-boot the server machine.

See if that helps.

 

[Guest]

Hi again..
Sorry wasnt able to reply earlier cause of Inernet problems.
Your last post has sorted out the problem.
thank you very much for your help.
regards
Saumitra

[ fixed : Logon failure: the user has not been granted the requested logon
type at
this computer. ]

Now when i click on the laptop icon in the Network Neighbourhood of the
desktop, i get the follwoing error.
\\laptop is not accesiible. You might not have permission to use this
network resource. Contact the administrator of this server to find out
if
you have access permissions. Access is denied.

Well, that is actually progress, believe it or not.
[ do stuff ]

Hi again,
Still the problem persists. [..]
Still the the result was access denied.
There is no option for Manage-> Local users and groups

Yes, sorry, that command is not available in XP-Home.
We'll do it from the command line instead.

Can I summarise where we are?
The machine is pingable, firewall has F+P exception enabled.
It is XP home, so Simple File Sharing is in force.
Yet is won't enumerate its shares, failing with error code 5 'Access
Denied'.

On the laptop, go to a command prompt, and issue the command

net user guest

Look at the output.
There is a line 'Account Active yes/no'
Is the Guest account active?
If not, issue the command:

net user guest /active:yes

Once you are sure the Guest account is active,
go to start | Run | type 'Regedit' in the box.

On the left hand pane, navigate to:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\

In the LSA folder, look in the right-hand pane.
look for the value 'RestrictAnonymous'.

It needs to be zero.
If it is not, double-click it and set it to zero.

( The value of RestrictAnonymousSam can be left at 1. )

Close regedit, and re-boot the server machine.

See if that helps.