Need Permissions

[Ed C]

My desktop is hardwired to a wireless router; my laptop is wireless to same
router.

Desktop-->My Network Places works and I can see/share files on laptop.

Same thing on laptop DOES NOT work. Error Windows says, "\\desktop is not
accessible. You might not have permissions....

Logon failure: user account restrictions: blank passwords not allowed ....
or policy restrictions...enforced"

What do I have to change to get my laptop to see files/printers on my
desktop?

Thanks,

EdC

 

[Chuck]

My desktop is hardwired to a wireless router; my laptop is wireless to same
router.

Desktop-->My Network Places works and I can see/share files on laptop.

Same thing on laptop DOES NOT work. Error Windows says, "\\desktop is not
accessible. You might not have permissions....

Logon failure: user account restrictions: blank passwords not allowed ....
or policy restrictions...enforced"

What do I have to change to get my laptop to see files/printers on my
desktop?

Ed,

Are both computers running WinXP? Which version of WinXP Home or Pro - makes a
difference here.

Are you running both Client for Microsoft Networks, and File and Printer Sharing
for Microsoft Networks (Local Area Connection - Properties), on each computer?
Do you have shares setup on each?

Make sure the browser service is running on each computer. Control Panel -
Administrative Tools - Services. Verify that the Computer Browser, and the
TCP/IP NetBIOS Helper, services both show with Status = Started.

On any XP Pro computer, check to see if Simple File Sharing (Control Panel -
Folder Options - View - Advanced settings) is enabled or disabled. With XP Pro,
you need to have SFS properly set on each computer.

With XP Pro, if SFS is disabled, check the Local Security Policy (Control Panel
- Administrative Tools). Under Local Policies - Security Options, look at
"Network access: Sharing and security model", and ensure it's set to "Classic -
local users authenticate as themselves".

With XP Pro, if you set the above Local Security Policy to "Guest only", enable
the Guest account, using Local User Manager (Start - Run - "lusrmgr.msc"). If
"Classic", setup and use a common non-Guest account on all computers. Whichever
account is used, give it an identical, non-blank password on all computers.

For XP Home, OR for XP Pro with Simple File Sharing enabled, make sure that the
Guest account is enabled, on each computer. For XP Pro, enable Guest using
Local User Manager (Start - Run - "lusrmgr.msc"); for XP Home, Start - Run -
"cmd" - type "net user guest /active:yes" in the command window.

Do any of the computers have a software firewall (ICF / WF, or third party)? If
so, you need to configure them for file sharing, by opening ports TCP 139, 445
and UDP 137, 138, 445, by enabling the File and Printer Sharing exception, and /
or by identifying the other computers as present in the Local (Trusted) zone.
Firewall configurations are a very common cause of (network) browser, and file
sharing, problems.

Hopefully, one of the above will help you find the problem. If not, post back
and we'll do some diagnostic work.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Ed C]

Sorry, I should have given more details on my configurations.

Desktop: Windows XP Pro with SP2; ZoneAlarm 5.1.01; I am the one and only
user. Not defined so Windows boots up directly to 'Welcome' screen without
any logon.

Laptop: Windows XP Home with SP2; Norton Personal Firewall (live updated
more than once). Same logo on as desktop.

Wireless router and Wireless adapter are both from Netgear and claim 108
Mbps, "Up to 300% faster and double the range of G only products. Primary
reason I bought this particular brand.

Yes, File and Printer sharing are enabled everywhere for both computers. The
whole reason for this exercise is I need printer sharing on the laptop.

I will have to check browser service. Believe they are as I have used
'msconfig' to modify 'start' tab and have checked 'services' tab. Believe
everything is enabled. I believe there are 3 options: manual, automatic and
started. Will check again.

As noted, firewall are enabled. I haven't yet figured out Norton's
configurations procedures. Don't remember seeing anything in ZoneAlarm about
ports. IS IT POSSIBLE TO USE THE PORT FORWARDING FEATURE IN THE ROUTER?????

Really DO APPRECIATE your comments and will get back to you.

Ed C.

 

[Ed C]

Chuck,
Thanks. Some progress!!

I made the changes you suggested in 'Services' and check 'SFS on my desktop.
Found how to open ports in ZoneAlarm and did so per your directions. Opened
those ports for both incomming and outgoing. Did not make any changes to
Norton Firewall on my laptop.

I no longer get the 'you might not have permission ...' That's progress!!

What I now get in Network Places-->Entire Network-->Workgroup name-->Desktop
(all this on my laptop XP Home) is a 'Connect to ....' window with 2 input
boxes, (1) a user name [already filled in (Desktop\Guest')] and (2) a blank
'password' box. Is there a default password somewhere? I generally DO NOT
use/like passwords on my either of my computers since no one uses them but
me. Is the Network 'log on' password created the first time I fill it in? Is
there somewhere else to do this? It didn't accept a 'blank' password.

Lastly, my desktop still works as before. I can find the laptop's shared
files/folders in Network Places.

Ed C

 

[Chuck]

Chuck,
Thanks. Some progress!!

I made the changes you suggested in 'Services' and check 'SFS on my desktop.
Found how to open ports in ZoneAlarm and did so per your directions. Opened
those ports for both incomming and outgoing. Did not make any changes to
Norton Firewall on my laptop.

I no longer get the 'you might not have permission ...' That's progress!!

What I now get in Network Places-->Entire Network-->Workgroup name-->Desktop
(all this on my laptop XP Home) is a 'Connect to ....' window with 2 input
boxes, (1) a user name [already filled in (Desktop\Guest')] and (2) a blank
'password' box. Is there a default password somewhere? I generally DO NOT
use/like passwords on my either of my computers since no one uses them but
me. Is the Network 'log on' password created the first time I fill it in? Is
there somewhere else to do this? It didn't accept a 'blank' password.

Lastly, my desktop still works as before. I can find the laptop's shared
files/folders in Network Places.

Ed,

Check the Local Security Policy [...Network access: Sharing and security model]
on each computer again. And check the authenticating account / passwords. By
default, you need to use identical, non-blank passwords on all computers, for
each account.

You CAN make a policy change [Local Security Settings\Local Policies\Security
Options\Accounts: Limit local account use of blank passwords to console logon
only] is by default Enabled; you can set it to Disabled if you wish. But be
consistent on all computers.

With XP Pro, if you set the [...Network access: Sharing and security model]
Local Security Policy to "Guest only", enable the Guest account, using Local
User Manager (Start - Run - "lusrmgr.msc"). If "Classic", setup and use a
common non-Guest account on all computers. Whichever account is used, give it
an identical, non-blank password on all computers, if you do not change the
above Local Security Policy.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Ed C]

Chuck,

Here's your latest message and my results:

Check the Local Security Policy [...Network access: Sharing and security model]
on each computer again. And check the authenticating account / passwords. By
default, you need to use identical, non-blank passwords on all computers, for
each account.

Found first part (..sharing..) on XP Pro (Desktop) but not on XP Home. Could not find 'authenticating/....' on either computer (XP Home on laptop). Can you be more specific on where this is found?

You CAN make a policy change [Local Security Settings\Local Policies\Security
Options\Accounts: Limit local account use of blank passwords to console logon
only] is by default Enabled; you can set it to Disabled if you wish. But be
consistent on all computers. Found this but did not change.

With XP Pro, if you set the [...Network access: Sharing and security model]
Local Security Policy to "Guest only", enable the Guest account, using Local
User Manager (Start - Run - "lusrmgr.msc"). If "Classic", setup and use a
common non-Guest account on all computers. Whichever account is used, give it
an identical, non-blank password on all computers, if you do not change the
above Local Security Policy.

Ran 'lusrmgr' on both but XP Home said it wasn't available. 'Use User Accounts' Went there and turned User Accounts 'on'.

Is this non-blank password unique to the network? I only see a place on the laptop (XP Home) when I go to 'network places' and try to access the desktop's shared folders. I never see it when I do this from the desktop. Is this normal? You advise using identical, non-blank password on all computers. How do I do this on XP Pro? Will it apply to only the guest account?

Thanks again for help.
Ed C

 

[Ed C]

I rechecked 'Guest Accounts' on XP Pro and can't find a way to set a password.
Chuck,

Here's your latest message and my results:

Check the Local Security Policy [...Network access: Sharing and security model]
on each computer again. And check the authenticating account / passwords. By
default, you need to use identical, non-blank passwords on all computers, for
each account.

Found first part (..sharing..) on XP Pro (Desktop) but not on XP Home. Could not find 'authenticating/....' on either computer (XP Home on laptop). Can you be more specific on where this is found?

You CAN make a policy change [Local Security Settings\Local Policies\Security
Options\Accounts: Limit local account use of blank passwords to console logon
only] is by default Enabled; you can set it to Disabled if you wish. But be
consistent on all computers. Found this but did not change.

With XP Pro, if you set the [...Network access: Sharing and security model]
Local Security Policy to "Guest only", enable the Guest account, using Local
User Manager (Start - Run - "lusrmgr.msc"). If "Classic", setup and use a
common non-Guest account on all computers. Whichever account is used, give it
an identical, non-blank password on all computers, if you do not change the
above Local Security Policy.

Ran 'lusrmgr' on both but XP Home said it wasn't available. 'Use User Accounts' Went there and turned User Accounts 'on'.

Is this non-blank password unique to the network? I only see a place on the laptop (XP Home) when I go to 'network places' and try to access the desktop's shared folders. I never see it when I do this from the desktop. Is this normal? You advise using identical, non-blank password on all computers. How do I do this on XP Pro? Will it apply to only the guest account?

Thanks again for help.
Ed C

 

[Chuck]

I rechecked 'Guest Accounts' on XP Pro and can't find a way to set a password.
Chuck,

Here's your latest message and my results:

Check the Local Security Policy [...Network access: Sharing and security model]
on each computer again. And check the authenticating account / passwords. By
default, you need to use identical, non-blank passwords on all computers, for
each account.

Found first part (..sharing..) on XP Pro (Desktop) but not on XP Home. Could not find 'authenticating/....' on either computer (XP Home on laptop). Can you be more specific on where this is found?

You CAN make a policy change [Local Security Settings\Local Policies\Security
Options\Accounts: Limit local account use of blank passwords to console logon
only] is by default Enabled; you can set it to Disabled if you wish. But be
consistent on all computers. Found this but did not change.

With XP Pro, if you set the [...Network access: Sharing and security model]
Local Security Policy to "Guest only", enable the Guest account, using Local
User Manager (Start - Run - "lusrmgr.msc"). If "Classic", setup and use a
common non-Guest account on all computers. Whichever account is used, give it
an identical, non-blank password on all computers, if you do not change the
above Local Security Policy.

Ran 'lusrmgr' on both but XP Home said it wasn't available. 'Use User Accounts' Went there and turned User Accounts 'on'.

Is this non-blank password unique to the network? I only see a place on the laptop (XP Home) when I go to 'network places' and try to access the desktop's shared folders. I never see it when I do this from the desktop. Is this normal? You advise using identical, non-blank password on all computers. How do I do this on XP Pro? Will it apply to only the guest account?

Sorry, Ed,

For some reason I was thinking you had two XP Pro systems. %-}

With XP Home and Pro on the LAN together, you have to enable SFS on the Pro
system, and enable Guest on both systems. You have no other choice; XP Home
uses Guest for authorisation.

To enable Guest on XP Home, Start - Run - "cmd" - type "net user guest
/active:yes" in the command window.

If you still have a problem, you need to look at passwords on Guest. On XP
Home, you can't set a password for Guest, so you'll have to set the password on
Pro to null value. That may require you to set the policy as indicated.

This would tax the patience of Job, if he had had a computer.

Oh, BTW, in answer to your earlier question about port forwarding. PF is a
feature to enable traffic from the WAN (internet) on your router to a specific
computer on the LAN. That will NOT help in your case. Your problem is at the
individual computer level.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Ed C]

I seemed to have taken a step back. On Laptop (Using Network Places-->Entire
Network, etc) I now get an error window (Big Red X), "Not
accessible.....might not have permission.....Logon failure: the user has not
been granted the requested logon type at this computer" I assume 'this
computer' means the desktop.

Does this have something to do with Guest??

I am somewhat confused by the difference between a Network password and a
User password.

I have a couple of options that might simplify all this:

(1) Install XP Pro on my laptop. Not sure this is possible since I already
have SP2 installed on XP Home.

(2) Create defined (not guest) users on both Desktop and Laptop and give
them passwords.

Appreciate any comments and/or next step. I thought for a moment I was real
close.

Ed

 

[Chuck]

I seemed to have taken a step back. On Laptop (Using Network Places-->Entire
Network, etc) I now get an error window (Big Red X), "Not
accessible.....might not have permission.....Logon failure: the user has not
been granted the requested logon type at this computer" I assume 'this
computer' means the desktop.

Does this have something to do with Guest??

I am somewhat confused by the difference between a Network password and a
User password.

I have a couple of options that might simplify all this:

(1) Install XP Pro on my laptop. Not sure this is possible since I already
have SP2 installed on XP Home.

(2) Create defined (not guest) users on both Desktop and Laptop and give
them passwords.

Appreciate any comments and/or next step. I thought for a moment I was real
close.

Ed

Ed,

Did you enable the Guest account on both computers (Start - Run - "cmd" - type
"net user guest /active:yes" in the command window)? Did you enable Simple File
Sharing on the desktop (XP Pro) system?

Simple File Sharing (which is what you're stuck with on XP Home) uses the Guest
account for network access authorisation.

I believe "network password" refers to the password required by the remote
(networked) system; "user password" refers to the password on the local system.
In order to access network resources, the two have to be identical, for the
account used.

With XP Home, you cannot assign a password to the Guest account, all you can do
is enable or disable the account. So after you enable the Guest account on the
XP Pro system, make sure that it is null, to match the Guest account password on
the Home system.

To enter a null password on XP Pro, start User Manager (Start - Run -
"lusrmgr.msc"). Right click on the account (Guest in this case), and select Set
Password. Put the cursor in the New password box, and hit tab. The cursor will
position in the Confirm password box, so hit tab again. Then hit OK. And make
sure Guest is enabled.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Ed C]

Check out everything. Still doesn't work Both computer have 'Guest' enabled.
Used your cmd/dos command. Control Panel-->User Accounts show this on both
computers.

Pinging still works: both computers see each other. Network Places on
Desktop finds the Laptop and it's shared files. Only the laptop (XP Home)
shows the desktop but gives a 'No permission...' error message when I try to
expand it.

Still think XP Pro on laptop is last option.

Ed

 

[Chuck]

Check out everything. Still doesn't work Both computer have 'Guest' enabled.
Used your cmd/dos command. Control Panel-->User Accounts show this on both
computers.

Pinging still works: both computers see each other. Network Places on
Desktop finds the Laptop and it's shared files. Only the laptop (XP Home)
shows the desktop but gives a 'No permission...' error message when I try to
expand it.

Still think XP Pro on laptop is last option.

Ed,

It's not a bad idea to install XP Pro, in general. But, unless you do a clean
install, the XP install process has a way of giving unpredictable results. And
if the problem isn't actually caused by XP, you could end up even worse off.
Better the devil you know...

I've got a couple ideas. Let's look at ipconfig information for each computer.
Start - Run - "cmd". Type "ipconfig /all >c:\ipconfig.txt" into the command
window - Open c:\ipconfig.txt in Notepad, copy and paste into your next post.
Identify operating system (by name and version) with each ipconfig listing.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Ed C]

Give me some time to do this; am busy all of today.
Ed

 

[Ed C]

Chuck,
Here are the two files:

DESKTOP'S IPCONFIG FILE
Windows IP Configuration
Host Name . . . . . . . . . . . . : Dell8200
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection 6:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : NETGEAR FA310TX Fast Ethernet
Adapter (NGRPCI)
Physical Address. . . . . . . . . : 00-A0-CC-5D-EC-39
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.0.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DHCP Server . . . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 192.168.0.1
Lease Obtained. . . . . . . . . . : Monday, September 20, 2004
5:19:11 PM
Lease Expires . . . . . . . . . . : Tuesday, September 21, 2004
5:19:11 PM


LAPTOP'S IPCONFIG FILE
Windows IP Configuration

Host Name . . . . . . . . . . . . : Laptop
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

Media State . . . . . . . . . . . : Media disconnected
Description . . . . . . . . . . . : SiS 900 PCI Fast Ethernet
Adapter
Physical Address. . . . . . . . . : 00-50-EB-0B-BE-3B

Ethernet adapter Wireless Network Connection 3:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : NETGEAR 108 Mbps Wireless PC
Card WG511T
Physical Address. . . . . . . . . : 00-09-5B-C1-FB-51
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.0.3
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DHCP Server . . . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 192.168.0.1
Lease Obtained. . . . . . . . . . : Monday, September 20, 2004
5:21:25 PM
Lease Expires . . . . . . . . . . : Tuesday, September 21, 2004
5:21:25 PM

Ed

 

[Chuck]

Chuck,
Here are the two files:

Ed,

OK, we're running out of options here.

The IPConfig listings look normal. The error messages you're getting,
paraphrased as Resource not found or you don't have permission, can be caused by
several problems.
- Physical connectivity: cabling / router problems.
- Network connectivity: TCP/IP configuration.
- Name resolution / browsing problems.
- Authentication / authorisation issues.

You've checked physical and network connectivity issues by pinging each computer
from the other.

You've checked for network protocols and services:
- NetBIOS Over TCP/IP.
- Browser and TCP/IP network helper services.
- File and Printer Sharing for Microsoft Networks.
- Client for Microsoft Networks.

Name resolution problems can be caused by incompatible node type. A common
problem is caused by a "Peer-Peer" node type (which requires a WINS server to
work), but A node type of "Unknown" is valid. I myself have "Unknown" node type
on both of my Windows XP computers, and no problems.

With Windows XP Home on one computer, the logical way to share between two
computers is Simple File Sharing. For SFS to work, you have to have:
- Guest account enabled (using "net user" command - or lusrmgr on XP Pro).
- One or more shares established ("Share this folder on the network"), with each
share named.

You've enabled SFS on Dell8200, and you've enabled Guest on both systems. Did
you use "net user" on both?

Can Dell8200 see its own shares? Do "net view \\dell8200" from both computers.

Can you link to a share on Dell8200 from itself, and access files thru the
share? If you can do that, then the problem is clearly with Laptop. And you
can consider installing XP Pro on laptop.

Check the browser subsystem.

The Microsoft Browstat program will show us what browsers you have in your
domain / workgroup, at any time.
http://support.microsoft.com/?id=188305

You can download Browstat from either:
<http://www.dynawell.com/reskit/microsoft/win2000/browstat.zip>
<http://rescomp.stanford.edu/staff/manual/rcc/tools/browstat.zip>

Browstat is very small (40K), and needs no install. Just unzip the downloaded
file, copy browstat.exe to any folder in the Path, and run it from a command
window.

Please provide browstat information for each computer.
Start - Run - "cmd". Type "browstat status >c:\browstat.txt" into the command
window - Open c:\browstat.txt in Notepad, copy and paste into your next post.

For more information about the browser subsystem (very intricate), see:
http://support.microsoft.com/?id=188001
http://support.microsoft.com/?id=188305
<http://www.microsoft.com/technet/prodtechnol/winntas/deploy/prodspecs/ntbrowse.mspx>

Other than a clue provided by the above, with no other options, you may as well
install XP Pro on Laptop. Assuming that you have a legal license for XP Pro
available, or want to buy an upgrade. Presumably applying an upgrade should not
change the SP status, but IIWY, I'd check the SP on the box before buying.

Please let us know what you do, and how it turns out. Many folks here learn
from experiences like yours. Nobody knows everything about Windows (even
Microsoft couldn't test SP2 / Security Center, and have it work with the most
common AntiVirus product on the market!), even Microsoft.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Ed C]

Thanks.

Sounds like you have narrowed field to fewer pieces. Lots to check out. Will
watch Monday Night Football and tackle this tomorrow!!!

Is NetBEUI an option? Or IPX/SPX? Or Norton Firewall on laptop and ZoneAlarm
on Desktop? Would perfer any or all of these before installing XP Pro on
laptop.

Ed

 

[Ed C]

Chuck,
Here is the info from browstat for both computers:

THIS IS FROM DESKTOP (DELL8200)

Status for domain MSEBC on transport
\Device\NetBT_Tcpip_{A3B4E590-4FDC-4EEC-B0C0-710044B7E66A}
Browsing is active on domain.
Master browser name is: LAPTOP
Could not connect to registry, error = 53 Unable to determine build
of browser master:

53
\\\\LAPTOP . Version:05.01 Flags: 51003 NT POTENTIAL MASTER
1 backup servers retrieved from master LAPTOP
\\LAPTOP
There are 2 servers in domain MSEBC on transport

\Device\NetBT_Tcpip_{A3B4E590-4FDC-4EEC-B0C0-710044B7E66A}
There are 1 domains in domain MSEBC on transport
\Device\NetBT_Tcpip_{A3B4E590-4FDC-4EEC-B0C0-710044B7E66A}

THIS IS FROM LAPTOP

Status for domain MSEBC on transport
\Device\NetBT_Tcpip_{B1CB735E-1EE3-4C86-9362-094DF102D508}
Browsing is active on domain.
Master browser name is: LAPTOP
Master browser is running build 2600
1 backup servers retrieved from master LAPTOP
\\LAPTOP
There are 2 servers in domain MSEBC on transport

\Device\NetBT_Tcpip_{B1CB735E-1EE3-4C86-9362-094DF102D508}
There are 1 domains in domain MSEBC on transport
\Device\NetBT_Tcpip_{B1CB735E-1EE3-4C86-9362-094DF102D508}

EdC