XP Pro Network problem

[G. Patricks]

I've gotten as far as I can, hopefully someone here has an idea. I run
5 computers on the same Workgroup. Four run XP Pro SP2 w/ all updates,
one is a Win2000 Server acting as an FTP/Web/File server (non domain).
All are connected via a Linksys WRT54G (using DHCP) Router in Gateway
mode. Two are connected wirelessly, three are on 100 MB cards directly
wired in. All systems are runninf TCP/IP w/NetBIOS enabled, all on the
same subnet, same subnet mask.

Here is the situation:

Machine #1 - Can ping all machines >2ms avg. Net view shows only
itself (#1) and #2 (Win200 Server). Browstat shows browsing active and
#1 as the Master Browser. In Network under workgroups only machine #1
and #2 show up. Am 100% sure all systems are in the same workgroup.
Using IP address I can connect and map any shared drive on any
computer. Name resolution failed until I created a new LMHosts file,
then it worked fine. This machine has a static Internet IP and a
secondary static internal IP using the Router's IP as a gateway out.
The guest account is active, no password. Have tried with Zone Alarm
on/off, put in whole range of IP's as "trusted", etc.. don't think its
an issue. MS Firewall is disabled (on all machines).

Machine #2 is a Win2000 Server also using a static Internet IP and a
secondary Internal IP. It can ping all machines fine also. Net View
fails with a 6xx Error. It can "see" machine #1 but can not connect to
it, System Error 5 - Authorization problem I believe.

Machines #3, #4, #5 are all DHCP clients. They all see each other in
Network Neighborhood, can ping all 4 otheres fine, and are able to map
drives/printers to all machines beside #1, which gives Auth Failure
(or System 5 Error at CMD prompt from net view).

So the jist of it is machine #1 is blocking all access to it somehow
and I can't for the life of me see why. I share a printer from it
(TRYING to anyway!) but if I can't open it up i'll just get a
printserver for the darn thing!

Thanks for any help!
Gary

 

[Chuck]

I've gotten as far as I can, hopefully someone here has an idea. I run
5 computers on the same Workgroup. Four run XP Pro SP2 w/ all updates,
one is a Win2000 Server acting as an FTP/Web/File server (non domain).
All are connected via a Linksys WRT54G (using DHCP) Router in Gateway
mode. Two are connected wirelessly, three are on 100 MB cards directly
wired in. All systems are runninf TCP/IP w/NetBIOS enabled, all on the
same subnet, same subnet mask.

Here is the situation:

Machine #1 - Can ping all machines >2ms avg. Net view shows only
itself (#1) and #2 (Win200 Server). Browstat shows browsing active and
#1 as the Master Browser. In Network under workgroups only machine #1
and #2 show up. Am 100% sure all systems are in the same workgroup.
Using IP address I can connect and map any shared drive on any
computer. Name resolution failed until I created a new LMHosts file,
then it worked fine. This machine has a static Internet IP and a
secondary static internal IP using the Router's IP as a gateway out.
The guest account is active, no password. Have tried with Zone Alarm
on/off, put in whole range of IP's as "trusted", etc.. don't think its
an issue. MS Firewall is disabled (on all machines).

Machine #2 is a Win2000 Server also using a static Internet IP and a
secondary Internal IP. It can ping all machines fine also. Net View
fails with a 6xx Error. It can "see" machine #1 but can not connect to
it, System Error 5 - Authorization problem I believe.

Machines #3, #4, #5 are all DHCP clients. They all see each other in
Network Neighborhood, can ping all 4 otheres fine, and are able to map
drives/printers to all machines beside #1, which gives Auth Failure
(or System 5 Error at CMD prompt from net view).

So the jist of it is machine #1 is blocking all access to it somehow
and I can't for the life of me see why. I share a printer from it
(TRYING to anyway!) but if I can't open it up i'll just get a
printserver for the darn thing!

Thanks for any help!
Gary

Gary,

On any XP Pro computer, check to see if Simple File Sharing (Control Panel -
Folder Options - View - Advanced settings) is enabled or disabled. With XP Pro,
you need to have SFS consistently set on each computer.

On XP Pro with SFS disabled, check the Local Security Policies (Control Panel -
Administrative Tools). Under Local Policies - Security Options, look at
"Network access: Sharing and security model", and ensure it's set to "Classic -
local users authenticate as themselves".

On XP Pro with SFS disabled, if you set the above Local Security Policy to
"Guest only", enable the Guest account, using Start - Run - "cmd" - type "net
user guest /active:yes" in the command window. If "Classic", setup and use a
common non-Guest account on all computers. Whichever account is used, give it
an identical, non-blank password on all computers.

On XP Pro with Simple File Sharing enabled, make sure that the Guest account is
enabled, on each computer. Enable Guest, with Start - Run - "cmd", then type
"net user guest /active:yes" in the command window. Ensure that the password
for Guest is blank, with Start - Run - "control userpasswords2"; select Guest,
click Reset Password, click OK without entering a new password.

On XP Pro, if you're going to use Guest authentication, check your Local
Security Policy (Control Panel - Administrative Tools) - User Rights Assignment,
on the XP Pro computer, and look at "Deny access to this computer from the
network". Make sure Guest is not in the list. Look at "Access this computer
from the network", and make sure that Everyone is in this list.

The browser requires anonymous access, so look at registry key
[HKLM\System\CurrentControlSet\Control\Lsa], value restrictanonymous.
<http://www.microsoft.com/windows200...2000/techinfo/reskit/en-us/regentry/46688.asp>
<http://www.jsifaq.com/subf/tip2600/rh2625.htm>
http://support.microsoft.com/?id=246261
http://support.microsoft.com/?id=296403

The above articles refer to Windows 2000. Remember WinXP is NT V5.1, and Win2K
is NT V5.0.

Just remember to backup the key (create a registry patch) for
[HKLM\System\CurrentControlSet\Control\Lsa] before making any changes, if
appropriate.

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
My email is AT DOT
actual address pchuck sonic net.

 

[G. Patricks]

Chuck, thanks for the quick feedback. A light went off when reading
your response and I shot into User Rights Assignment and looked at the
"Access this Computer from the Network" parameter as I remembered
having an issue on a clients machine a long time ago.. It was set to
ASPNET only. Of course as soon as I added "Everyone" I was able to get
to it via the other systems!! I still need to go through the other
steps and do some more work as I still don't see everyone in Network
Neighborhood under my Workgroup name yet but the network itself is
fully functional (Names are resolving normally, etc.).

Thanks a million for the "push" in the right direction!
Gary

Gary,

On any XP Pro computer, check to see if Simple File Sharing (Control Panel -
Folder Options - View - Advanced settings) is enabled or disabled. With XP Pro,
you need to have SFS consistently set on each computer.

On XP Pro with SFS disabled, check the Local Security Policies (Control Panel -
Administrative Tools). Under Local Policies - Security Options, look at
"Network access: Sharing and security model", and ensure it's set to "Classic -
local users authenticate as themselves".

On XP Pro with SFS disabled, if you set the above Local Security Policy to
"Guest only", enable the Guest account, using Start - Run - "cmd" - type "net
user guest /active:yes" in the command window. If "Classic", setup and use a
common non-Guest account on all computers. Whichever account is used, give it
an identical, non-blank password on all computers.

On XP Pro with Simple File Sharing enabled, make sure that the Guest account is
enabled, on each computer. Enable Guest, with Start - Run - "cmd", then type
"net user guest /active:yes" in the command window. Ensure that the password
for Guest is blank, with Start - Run - "control userpasswords2"; select Guest,
click Reset Password, click OK without entering a new password.

On XP Pro, if you're going to use Guest authentication, check your Local
Security Policy (Control Panel - Administrative Tools) - User Rights Assignment,
on the XP Pro computer, and look at "Deny access to this computer from the
network". Make sure Guest is not in the list. Look at "Access this computer
from the network", and make sure that Everyone is in this list.

The browser requires anonymous access, so look at registry key
[HKLM\System\CurrentControlSet\Control\Lsa], value restrictanonymous.
<http://www.microsoft.com/windows200...2000/techinfo/reskit/en-us/regentry/46688.asp>
<http://www.jsifaq.com/subf/tip2600/rh2625.htm>
http://support.microsoft.com/?id=246261
http://support.microsoft.com/?id=296403

The above articles refer to Windows 2000. Remember WinXP is NT V5.1, and Win2K
is NT V5.0.

Just remember to backup the key (create a registry patch) for
[HKLM\System\CurrentControlSet\Control\Lsa] before making any changes, if
appropriate.

 

[Chuck]

Chuck, thanks for the quick feedback. A light went off when reading
your response and I shot into User Rights Assignment and looked at the
"Access this Computer from the Network" parameter as I remembered
having an issue on a clients machine a long time ago.. It was set to
ASPNET only. Of course as soon as I added "Everyone" I was able to get
to it via the other systems!! I still need to go through the other
steps and do some more work as I still don't see everyone in Network
Neighborhood under my Workgroup name yet but the network itself is
fully functional (Names are resolving normally, etc.).

Thanks a million for the "push" in the right direction!
Gary

Gary,

Thats great! Thanks for the feedback!

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
My email is AT DOT
actual address pchuck sonic net