Access denied from XP computers

[Guest]

I finally set up my home network. Three xp's and one vista. They can all
see each other but the xp's can't access the vista drive. I keep getting the
"access denied" error message. Any help would be appreciated. I've spent
hours on this stuff.

 

[Eric Cross [MVP]]

Hello maryse,

If you haven't already, I suggest that you walk through the steps in this
TechNet Article and see if this helps you.

http://www.microsoft.com/technet/network/evaluate/vista_fp.mspx

 

[Guest]

Thanks but I read it already and am still having the problem.

 

[Malke]

Thanks but I read it already and am still having the problem.

You say you've been through the link Mr. Cross gave you but you haven't
told us anything else you've tried. Therefore I suggest you go through
the following general network troubleshooting steps systematically
because you *have* forgotten *something*. It's just not possible for us
to tell you what that something is. These steps are a cut/paste so not
everything may be applicable to you. Take the bits that are but be
careful about the assumptions you make about applicability.

*****
This link will take you through Vista networking very well:

http://www.microsoft.com/technet/network/evaluate/vista_fp.mspx

Problems sharing files between computers on a network are generally
caused by 1) a misconfigured firewall; or 2) inadvertently running two
firewalls such as the built-in Windows Firewall and a third-party
firewall; and/or 3) not having identical user accounts and passwords on
all Workgroup machines; 4) trying to create shares where the operating
system does not permit it.

Here are some general networking tips for home/small networks:

1. Configure firewalls on all machines to allow the Local Area Network
(LAN) traffic as trusted. With Windows Firewall, this means allowing
File/Printer Sharing on the Exceptions tab. Normally running the Network
Setup Wizard on XP will take care of this for those machines.The only
"gotcha" is that this will turn on the XPSP2 Windows Firewall. If you
aren't running a third-party firewall or have an antivirus with
"Internet Worm Protection" (like Norton 2006/07) which acts as a
firewall, then you're fine. With third-party firewalls, I usually
configure the LAN allowance with an IP range. Ex. would be
192.168.1.0-192.168.1.254. Obviously you would substitute your correct
subnet. Do not run more than one firewall.

2. With earlier Microsoft operating systems, the name of the Workgroup
didn't matter. Apparently it does with Vista, so put all computers in
the same Workgroup. This is done from the System applet in Control
Panel, Computer Name tab.

3. Create identical user accounts and passwords on all machines. If you
wish a machine to boot directly to the Desktop (into one particular
user's account) for convenience, you can do this. The instructions at
this link work for both XP and Vista:

Configure Windows to Automatically Login (MVP Ramesh) -
http://windowsxp.mvps.org/Autologon.htm

4. If one or more of the computers is XP Pro or Media Center:

a. If you need Pro's ability to set fine-grained permissions, turn off
Simple File Sharing (Folder Options>View tab) and create identical user
accounts/passwords on all computers.

b. If you don't care about using Pro's advanced features, leave the
Simple File Sharing enabled.

Simple File Sharing means that Guest (network) is enabled. This means
that anyone without a user account on the target system can use its
resources. This is a security hole but only you can decide if it matters
in your situation.

I think it is a good idea to create the identical user
accounts/passwords in any case when Vista machines are involved and it
isn't an onerous task with home/small networks.

5. Create shares as desired. XP Home does not permit sharing of users'
home directories (My Documents) or Program Files, but you can share
folders inside those directories. A better choice is to simply use the
Shared Documents folder. See the first link above for details about
Vista sharing.
*****

Malke

 

[Robert L [MVP - Networking]]

I would check the permission first. These search results may help,

Vista sharing issues
Solved: Vista sharing - Access denied ... To share a folder, there are two places, you need to assign permission. sharing and security tabs. ...
http://www.chicagotech.net/vista/vistasharing.htm - Similar pages

Vista issues
my Vista computer but when I go to install it I get an access denied message. ... Also make sure the Vista have the printer driver available. ...
http://www.chicagotech.net/vista/vistanetissues.htm


Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
I finally set up my home network. Three xp's and one vista. They can all
see each other but the xp's can't access the vista drive. I keep getting the
"access denied" error message. Any help would be appreciated. I've spent
hours on this stuff.

 

[Guest]

Hi malke,

Will try user accounts on all four machines with the same password. It's
not something that I really wanted since each machine is for a specific
family member and there isn't a whole lot of logging on to each other's
machine. I will also try auto logon to see if that remedies that problem.
Thanks for all the info.

 

[Malke]

Hi malke,

Will try user accounts on all four machines with the same password. It's
not something that I really wanted since each machine is for a specific
family member and there isn't a whole lot of logging on to each other's
machine. I will also try auto logon to see if that remedies that problem.
Thanks for all the info.

You don't need to only have *one* identical user account. If everyone
shares between all the computers, make four user accounts with four
passwords that are identical on all four machines. As I said, you can
have each computer log into a particular account automatically if you
like. Example:

User - Mom - Mom's password
User - Dad - Dad's password
User - Brother - Brother's password
User - Sister - Sister's password

Mom logs onto her machine with her own Mom account with her own password
(or you set it to go directly to her Desktop with control
userpasswords2). The other three accounts don't ever have to be used;
they just need to be there.


Malke

 

[KawaiDon]

Maryse,

I, too, fought with this, and here is my list of what to do. This is
presuming you are on a private network, and not logged on to a Domain.

1. Make sure you have installed the 'Link Layer Topology Discovery' on the
XP machines. If they can see the Vista computer, this may already have been
done. If you didn't download and install it, though, you have to do it.
Search on Microsoft.com for the file name, download, and run it on each
machine. This protocol is visible in the network properties after it is
installed.

2. Make sure the network name is the same on all computers. "Workgroup" is
default with Vista, and MSHOME is default with XP Home. Just change them
all to the same thing, whatever you want.

3. On the Vista computer, turn off the "Password Protected Sharing" function
unless you need it. This will eliminate the need for matching accounts and
passwords on different computers.

4. Right click on the shared folder in Vista, select 'Properties' then
'Sharing' tab. Click 'Advanced Sharing,' clear the annoying warning
message, then select the 'Permissions' button. Make sure the following are
there (maybe they aren't all needed, but it worked for me):
Everyone
Administrators
Users (should be included in Everyone, but what the heck)
Guests (plural)

Give each the rights that they need. 'Guests' will be how network users
access the folder, so set Guests' rights accordingly - Full control may not
be needed.

5. Click 'Apply' then 'OK,' then 'OK' again to get back to the folder
properties.

6. Select the "Security" tab, and select 'Edit.'

7. In the security area, set the same 4 groups as in sharing, including
'Guests' (note that this is plural - it is a group, or user type). Give
them all full control, unless you are concerned about these other computers
having this type of access.

What would be nice, if Redmond could ever wake up to the concept, is if
these error messages actually told you WHY access is denied. This is such a
common issue in home networks that more friendly error messages really are
called for!

I have a laptop that is set up for logging into a domain at my office, and I
still haven't succeeded in getting it to share on my home network. If I
create a separate login for the home network name it will probably work - I
haven't tried that yet.

Good luck.

Don Mannino

 

[EW]

Maryse,

I, too, fought with this, and here is my list of what to do. This is
presuming you are on a private network, and not logged on to a Domain.

1. Make sure you have installed the 'Link Layer Topology Discovery' on the
XP machines. If they can see the Vista computer, this may already have
been done. If you didn't download and install it, though, you have to do
it. Search on Microsoft.com for the file name, download, and run it on
each machine. This protocol is visible in the network properties after it
is installed.

2. Make sure the network name is the same on all computers. "Workgroup"
is default with Vista, and MSHOME is default with XP Home. Just change
them all to the same thing, whatever you want.

3. On the Vista computer, turn off the "Password Protected Sharing"
function unless you need it. This will eliminate the need for matching
accounts and passwords on different computers.

4. Right click on the shared folder in Vista, select 'Properties' then
'Sharing' tab. Click 'Advanced Sharing,' clear the annoying warning
message, then select the 'Permissions' button. Make sure the following
are there (maybe they aren't all needed, but it worked for me):
Everyone
Administrators
Users (should be included in Everyone, but what the heck)
Guests (plural)

Give each the rights that they need. 'Guests' will be how network users
access the folder, so set Guests' rights accordingly - Full control may
not be needed.

5. Click 'Apply' then 'OK,' then 'OK' again to get back to the folder
properties.

6. Select the "Security" tab, and select 'Edit.'

7. In the security area, set the same 4 groups as in sharing, including
'Guests' (note that this is plural - it is a group, or user type). Give
them all full control, unless you are concerned about these other
computers having this type of access.

What would be nice, if Redmond could ever wake up to the concept, is if
these error messages actually told you WHY access is denied. This is such
a common issue in home networks that more friendly error messages really
are called for!

Thanks for a great explanation of what can be done to share Vista folders
from an XP computer. In my case, I can share the Public folder, share a
printer, share the Internet, and I can "see" the Vista shared folders (which
may mean I have the LLTD installed -- but don't know for sure). But I still
can't share a folder, named "Z" which I made on Vista's C: drive. I've
added "Everyone" to the Permissions area, but not the others as you're
written. The only other user listed is the Vista Administrator. Surely,
that's not the problem. All else looks good.

I've been fighting this forever. The MVPs usually give their rote answers
which, of course, don't work (for me). Some day I'll just luck out and it
will work. Until then, I'll just use the Public folder.

I'm hoping in vain that the next Service Pack for Vista will include a
better file sharing process, but I don't believe they are reading or
listening.

Regards.

EW

 

[Guest]

Thank you for your very complete response. I have gotten everything to work
now but there is no reason that microsoft should make this so difficult. I
actually went into each XP computer in safe mode and made changes to the
permissions as well.

Maryse

 

[Guest]

maryse,

I'm glad to hear the new settings helped. Vista is more secure by default,
so things like sharing (Guest accounts, root drive sharing) which were
default in XP, now require explicit actions on behalf of the user in Vista.
With the proliferation of wireless networks, wardriving, and confusion on how
to set up a secure wireless network at home (thus, many folks leaving their
home networks vulnerable in XP), we improved Vista's security, as well as
network setup.

And, Microsoft certainly does monitor this newsgroup (even though it's a
community newsgroup, and not a Microsoft-monitored newsgroup). We know that
file and printer sharing is more difficult in Vista, and we are working to
improve the experience as we move forward.