Network Logon Failure: User account restriction

[BlondJeff]

I have two computers on my home network; let's just call
them computers A and B.

I can ping from A to B and from B to A.
I can also logon to B from A.
I can see but cannot not logon to A from computer B, I get
the error - Logon Failure: User Account restriction.

The computers are in the same workgroup; why can I go one
way but not the other? I could go both ways previously and
don't recall changing any settings on either machine.

Any suggestions are appreciated.

 

[Chuck]

I have two computers on my home network; let's just call
them computers A and B.

I can ping from A to B and from B to A.
I can also logon to B from A.
I can see but cannot not logon to A from computer B, I get
the error - Logon Failure: User Account restriction.

The computers are in the same workgroup; why can I go one
way but not the other? I could go both ways previously and
don't recall changing any settings on either machine.

Any suggestions are appreciated.

Jeff,

On any XP Pro computer, check to see if Simple File Sharing (Control Panel -
Folder Options - View - Advanced settings) is enabled or disabled. With XP Pro,
you need to have SFS properly set on each computer.

With XP Pro, if SFS is disabled, check the Local Security Policy (Control Panel
- Administrative Tools). Under Local Policies - Security Options, look at
"Network access: Sharing and security model", and ensure it's set to "Classic -
local users authenticate as themselves".

With XP Pro, if you set the Local Security Policy to "Guest only", make sure
that the Guest account is enabled, thru Local User Manager (Start - Run -
"lusrmgr.msc"), and has an identical, non-blank, password on all computers. If
"Classic", setup and use a common non-Guest account, with identical, non-blank,
password on all computers.

For XP Home, OR for XP Pro with Simple File Sharing enabled, make sure that the
Guest account is enabled (for XP Pro, thru Local User Manager (Start - Run -
"lusrmgr.msc")), on each computer.

Do either of the computers have a software firewall (ICF or third party)? If
so, you need to configure them for file sharing, by opening ports TCP 139, 445
and UDP 137, 138, 445, and / or by identifying the other computers as present in
the Local (Trusted) zone. Firewall configurations are a very common cause of
(network) browser, and file sharing, problems.

More about file sharing, between all different versions of Windows:
<http://www.microsoft.com/downloads/...db-aef8-4bef-925e-7ac9be791028&DisplayLang=en>

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[BlondJeff]

-----Original Message-----


Jeff,

On any XP Pro computer, check to see if Simple File Sharing (Control Panel -
Folder Options - View - Advanced settings) is enabled or disabled. With XP Pro,
you need to have SFS properly set on each computer.

With XP Pro, if SFS is disabled, check the Local Security Policy (Control Panel
- Administrative Tools). Under Local Policies - Security Options, look at
"Network access: Sharing and security model", and ensure it's set to "Classic -
local users authenticate as themselves".

With XP Pro, if you set the Local Security Policy to "Guest only", make sure
that the Guest account is enabled, thru Local User Manager (Start - Run -
"lusrmgr.msc"), and has an identical, non-blank, password on all computers. If
"Classic", setup and use a common non-Guest account, with identical, non-blank,
password on all computers.

For XP Home, OR for XP Pro with Simple File Sharing enabled, make sure that the
Guest account is enabled (for XP Pro, thru Local User Manager (Start - Run -
"lusrmgr.msc")), on each computer.

Do either of the computers have a software firewall (ICF or third party)? If
so, you need to configure them for file sharing, by opening ports TCP 139, 445
and UDP 137, 138, 445, and / or by identifying the other computers as present in
the Local (Trusted) zone. Firewall configurations are a very common cause of
(network) browser, and file sharing, problems.

More about file sharing, between all different versions of Windows:
<http://www.microsoft.com/downloads/details.aspx? FamilyID=87c0a6db-aef8-4bef-925e-
7ac9be791028&DisplayLang=en>

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
.

Chuck,

You are sharp! I had disabled the Quest account on my XP
Pro. machine for additional security. I enabled the
account and am "Networked" again.

Thanks,

Jeffrey
aka: BlondJeff

 

[Chuck]

Chuck,

You are sharp! I had disabled the Quest account on my XP
Pro. machine for additional security. I enabled the
account and am "Networked" again.

Thanks,

Jeffrey
aka: BlondJeff

Excellent, Jeffrey. Thanks for the update!

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Guest]

I asume that computer A is runnig Windows XP. aiaf this is the case then the
problem is the Local Security policy. Go to the Local Security policy. On the
top right pane R-click on Security Sttings and select Import policy. When the
next window opens duble click on setup security.inf This install the correct
template
and allow you to connect to computer A from computer B providing you have
the correct permissions and accounts setup on both PC's