Logon failure

[Guest]

I have 2 PC's with XP Pro SP2 all updated. I have them set up identically.
During the installation I chose not to enable File & Printer Sharing on my
computer. I enabled it on the wifes for the color printer. I always just
access the wifes Shared Folder. I cannot get my computer to let any other
computer log onto it. I have tiried everything I know. Everyone has Full
Access and the Guest Account is enabled but I just get the error;
Logon failure: the user has not been granted the requested logon type at
this computer.
It originally asked for a username and password until I run Set up a home
network wizard and enabled the guest account.
Is there any way of making this work?
Thanks.

 

[Guest]

The guest account is one of the least-understood aspects of NT/XP networking.

If the guest account is active, then any network-logon to the machine which
matches NO local accountname is made as Guest instead.

If the logon-attempt matches a non-guest accountname then the password for
that account must be supplied, guest-account or no.

If the Guest account has no password, then it follows that users matching no
local account will be straight-in without having to authenticate at all.

Remedy: turn of the guest account, or else set a guest password.

 

[Chuck]

I have 2 PC's with XP Pro SP2 all updated. I have them set up identically.
During the installation I chose not to enable File & Printer Sharing on my
computer. I enabled it on the wifes for the color printer. I always just
access the wifes Shared Folder. I cannot get my computer to let any other
computer log onto it. I have tiried everything I know. Everyone has Full
Access and the Guest Account is enabled but I just get the error;
Logon failure: the user has not been granted the requested logon type at
this computer.
It originally asked for a username and password until I run Set up a home
network wizard and enabled the guest account.
Is there any way of making this work?
Thanks.

Sam,

XP Pro is known to have this Symptom from time to time. Fortunately, the
solution is simple.
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Help>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Help

 

[Steve Winograd [MVP]]

I have 2 PC's with XP Pro SP2 all updated. I have them set up identically.
During the installation I chose not to enable File & Printer Sharing on my
computer. I enabled it on the wifes for the color printer. I always just
access the wifes Shared Folder. I cannot get my computer to let any other
computer log onto it. I have tiried everything I know. Everyone has Full
Access and the Guest Account is enabled but I just get the error;
Logon failure: the user has not been granted the requested logon type at
this computer.
It originally asked for a username and password until I run Set up a home
network wizard and enabled the guest account.
Is there any way of making this work?
Thanks.

Did you enable the Guest account in Control Panel | User Accounts?
That setting has nothing to do with networking and file sharing. It
determines whether you can log on as Guest at the local keyboard.

To enable the Guest account for networked access, type this line at
the command prompt:

net user guest /active:yes

If that doesn't solve the problem:

1. Click Start | Run, type "secpol.msc" in the box, and click OK.
2. Click Local Policies.
3. Click User Rights Assignment.
4. Click "Access this computer from the network" and make sure that
the Everyone group is included.
5. Click "Deny access to this computer from the network" and make sure
that the Everyone group is NOT included.
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com

 

[Guest]

Thank you all for the help. I have tried every last bit of it to no avail.
The closest I can get is to simply turn on simple file sharing and then it
brings up a box prompting for a password. There are no passwords on either
computer. I guess when you set Windows up initially with File & Printer
Sharing off it just cannot change it's mind. I really didn't want to do a
reinstall to change this.

 

[Chuck]

Thank you all for the help. I have tried every last bit of it to no avail.
The closest I can get is to simply turn on simple file sharing and then it
brings up a box prompting for a password. There are no passwords on either
computer. I guess when you set Windows up initially with File & Printer
Sharing off it just cannot change it's mind. I really didn't want to do a
reinstall to change this.

Sam,

What account is identified in the box? This is a case where details count.
Guest or non-Guest? And is the account properly activated, with identical,
non-blank password, on the target computer?
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Help>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Help

 

[Steve Winograd [MVP]]

Thank you all for the help. I have tried every last bit of it to no avail.
The closest I can get is to simply turn on simple file sharing and then it
brings up a box prompting for a password. There are no passwords on either
computer. I guess when you set Windows up initially with File & Printer
Sharing off it just cannot change it's mind. I really didn't want to do a
reinstall to change this.

Getting the password prompt instead of the previous logon failure
message is good, because it shows that the solution is very near.
There's no need to reinstall Windows.

It might help to un-share and then re-share the desired disks and
folders before trying to access them over the network again.

With simple file sharing turned on, all networked access uses the
Guest account.

Run this command to enable networked access to this computer via the
Guest account:

net user guest /active:yes

Remove any network password from the Guest account:

1. Click Start | Run.
2. Type "control userpasswords2" in the box and click OK:
3. Click Guest.
4. Click Reset Password.
5. Click OK without entering a new password.
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com

 

[Guest]

The box comes up and has PENT253\Guest as the user and a blank for th password.

I run the commands and get the error:

Logon failure: the user has net been granted the requested logon type at
this computer.

 

[Chuck]

The box comes up and has PENT253\Guest as the user and a blank for th password.

I run the commands and get the error:

Logon failure: the user has net been granted the requested logon type at
this computer.

The message
Logon failure: the user has net been granted the requested logon type at
this computer.
is easy to resolve under XP Pro, but may require extra effort under XP Home.

With XP Pro, there are a pair of Local Security Policy settings, under User
Rights Assignment, "Deny access to this computer from the network", and "Access
this computer from the network". If your server uses Guest authentication,
"Guest" must NOT be in the first list, and "Everyone" must be in the second. If
it uses non-Guest authentication, your properly setup, and activated, non-Guest
account must NOT be in the first list.
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Help>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Help

You can run the Local Security Policy editor in any of several ways.
* From Control Panel - Administrative Tools - Local Security Policy.
* From Start - Run - "secpol.msc".
* From any command window, again as "secpol.msc".
<http://nitecruzr.blogspot.com/2005/07/local-security-policy-editor.html>
http://nitecruzr.blogspot.com/2005/07/local-security-policy-editor.html

 

[Guest]

Thanks again for the help.
I appear to be missing some of those entries in the Local Security Policy
settings.

In the Access..network:
Administrators
Backup Operators
Everyone
Power Users
Users

In the Deny...network:
Guest
SUPPORT_388945Aao

I have removed Guest from Deny to no avail. Maybe I need to Add User or Group?

Thanks so much

 

[Chuck]

Thanks again for the help.
I appear to be missing some of those entries in the Local Security Policy
settings.

In the Access..network:
Administrators
Backup Operators
Everyone
Power Users
Users

In the Deny...network:
Guest
SUPPORT_388945Aao

I have removed Guest from Deny to no avail. Maybe I need to Add User or Group?

Thanks so much

Sam,

If you're using Guest authentication (either Simple File Sharing, or Classical
File Sharing with no non-Guest accounts setup) then the Guest account is
essential for file sharing thru the network. In that case, having Guest in the
Deny list is your problem. You say you've removed Guest, so why does it show in
the list?

Try setting up, and using, non-Guest account on both computers.
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Activate>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Activate

Or, figure out why Guest is still in the Deny list, if you have removed it. Are
you logged in as an administrator, when you're doing this?

 

[Guest]

I have removed it previously, restarted and still get the password prompt. I
keep restoring my system to the way it started out before I try any of these
modifications so what I posted is how it was originally set up. I really
hoped to get this working without simple file sharing but at this point I
guess I'll have to settle for whatever I can get working. I ust retried it
and I still get a password prompt and I cannot figure out what it wants.

Thanks

 

[Steve Winograd [MVP]]

Thanks again for the help.
I appear to be missing some of those entries in the Local Security Policy
settings.

In the Access..network:
Administrators
Backup Operators
Everyone
Power Users
Users

In the Deny...network:
Guest
SUPPORT_388945Aao

I have removed Guest from Deny to no avail. Maybe I need to Add User or Group?

Thanks so much

Make sure that Guest ** is ** in the Access list. You don't show that
above.

Make sure that Guest ** is not ** in the Deny list. You don't show
that above.
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com

 

[Chuck]

I have removed it previously, restarted and still get the password prompt. I
keep restoring my system to the way it started out before I try any of these
modifications so what I posted is how it was originally set up. I really
hoped to get this working without simple file sharing but at this point I
guess I'll have to settle for whatever I can get working. I ust retried it
and I still get a password prompt and I cannot figure out what it wants.

Thanks

Sam,

Well, if Guest is in the Deny list, that's your problem. And if Guest stays
there, then Simple File Sharing isn't going to work any better.

You need to test properly. Either test for removal of Guest from the Deny list,
or test for the prompt when accessing, but don't do both. Either:
1) Remove Guest from the Deny list, then test to see if you get the prompt.
THEN restart and test for the prompt again.
or
2) Remove Guest from the Deny list, close and reopen the LSP editor, and verify
that Guest is NOT in the Deny list. THEN restart and check the Deny list again.

In other words, are you not removing Guest at all? Or are you removing it, with
it being replaced there when you restart the system?

 

[Chuck]

Make sure that Guest ** is ** in the Access list. You don't show that
above.

Make sure that Guest ** is not ** in the Deny list. You don't show
that above.

Steve,

In the XP Pro systems, using Guest authentication, that I have worked on, having
"Everyone" in the allow list is sufficient, as "Guest" is supposed to be a
member of "Everyone". Is this not so on your systems?

 

[Guest]

In my futile attempts I did indeed try to add Guest to the Access list and it
says Guest already has access to this computer

 

[Chuck]

In my futile attempts I did indeed try to add Guest to the Access list and it
says Guest already has access to this computer

Well, having Guest in the Deny list overrides the Access list. Work on that
please.

 

[Guest]

After your recommendation I started with my system freshly restored to the no
share setup.
I set simple file sharing on
I run the network wizard
I checked the deny list and guest was absent
I added guest to the access list
I restarted the computer
I went to the remote system and got Access denied when I clicked the icon in
network p[laces. Both systerms are present in network places but I cannot go
to the one I set up with file & printer sharing off.

Thank you, thank you

 

[Chuck]

After your recommendation I started with my system freshly restored to the no
share setup.
I set simple file sharing on
I run the network wizard
I checked the deny list and guest was absent
I added guest to the access list
I restarted the computer
I went to the remote system and got Access denied when I clicked the icon in
network p[laces. Both systerms are present in network places but I cannot go
to the one I set up with file & printer sharing off.

Thank you, thank you

You're welcome of course. But I'm not clear whether your problem is fixed.

If you turn file & printer sharing off on a computer, you certainly shouldn't be
able to access it. It may show up in network places for a while, but it won't
be accessible.

 

[Guest]

By my reference to file & printer sharing I was refering to the original
Windows installation. The problem isn't solved. I always get an error when I
try to go beyond the icon for this computer in network places. If I turn on
simple file sharing, a box opens with PENT253\Guest in the user name
(computers name) and it's grayed out. It also had a password box and I have
typed in everything I can think of to no avail. Niether computer has any type
of passwords. The only diffenrnce between them is when I originally installed
Windows and run the network setup wizard, I didn't enable file & printer
sharing on this system we've been working on. The other system has an inkjet
I wanted to share so I enabled file & printer sharing and it, and it works
perfectly with simple file sharing off. If I had only known I would have
enabled file & printer sharing during the initial setup and just turned off
the folders but I thought I was being more secure. Maybe it's time for the
dreaded format C.

Thanks
--
Sam

After your recommendation I started with my system freshly restored to the no
share setup.
I set simple file sharing on
I run the network wizard
I checked the deny list and guest was absent
I added guest to the access list
I restarted the computer
I went to the remote system and got Access denied when I clicked the icon in
network p[laces. Both systerms are present in network places but I cannot go
to the one I set up with file & printer sharing off.

Thank you, thank you

You're welcome of course. But I'm not clear whether your problem is fixed.

If you turn file & printer sharing off on a computer, you certainly shouldn't be
able to access it. It may show up in network places for a while, but it won't
be accessible.