Access Denied Problem

[Waqar Aziz]

From my desktop machine i can see shared folders on my laptop, can copy,
delete files etc.

From the laptop i am told i do not have permission, but if i map a drive
then it works.

Trying to follow some of the advice in the newsgroups I have obtained
the following using the browstat program but am unsure what to do next.

Can anyone help ?

*****************

DIM 3000

C:\>browstat status


Status for domain AZIZHOME on transport
\Device\NetBT_Tcpip_{DC566B4B-1187-41D5-
8205-4119884B6041}
Browsing is active on domain.
Master browser name is: DIM3000
Master browser is running build 2600
1 backup servers retrieved from master DIM3000
\\DIM3000
There are 2 servers in domain AZIZHOME on transport
\Device\NetBT_Tcpip_{DC5
66B4B-1187-41D5-8205-4119884B6041}
There are 1 domains in domain AZIZHOME on transport
\Device\NetBT_Tcpip_{DC5
66B4B-1187-41D5-8205-4119884B6041}

C:\>

*********************

8600c


C:\>browstat status


Status for domain AZIZHOME on transport
\Device\NetBT_Tcpip_{BEFC2B5F-9682-4074-
A097-81B6BB5EF84B}
Browsing is active on domain.
Master browser name is: DIM3000
Master browser is running build 2600
1 backup servers retrieved from master DIM3000
\\DIM3000
There are 3 servers in domain AZIZHOME on transport
\Device\NetBT_Tcpip_{BEF
C2B5F-9682-4074-A097-81B6BB5EF84B}
There are 1 domains in domain AZIZHOME on transport
\Device\NetBT_Tcpip_{BEF
C2B5F-9682-4074-A097-81B6BB5EF84B}

C:\>

*******************

Waqar

 

[Guest]

From my desktop machine i can see shared folders on my laptop, can copy,
delete files etc.

From the laptop i am told i do not have permission, but if i map a drive
then it works.

Trying to follow some of the advice in the newsgroups I have obtained
the following using the browstat program but am unsure what to do next.

Can anyone help ?

*****************

DIM 3000

C:\>browstat status


Status for domain AZIZHOME on transport
\Device\NetBT_Tcpip_{DC566B4B-1187-41D5-
8205-4119884B6041}
Browsing is active on domain.
Master browser name is: DIM3000
Master browser is running build 2600
1 backup servers retrieved from master DIM3000
\\DIM3000
There are 2 servers in domain AZIZHOME on transport
\Device\NetBT_Tcpip_{DC5
66B4B-1187-41D5-8205-4119884B6041}
There are 1 domains in domain AZIZHOME on transport
\Device\NetBT_Tcpip_{DC5
66B4B-1187-41D5-8205-4119884B6041}

C:\>

*********************

8600c


C:\>browstat status


Status for domain AZIZHOME on transport
\Device\NetBT_Tcpip_{BEFC2B5F-9682-4074-
A097-81B6BB5EF84B}
Browsing is active on domain.
Master browser name is: DIM3000
Master browser is running build 2600
1 backup servers retrieved from master DIM3000
\\DIM3000
There are 3 servers in domain AZIZHOME on transport
\Device\NetBT_Tcpip_{BEF
C2B5F-9682-4074-A097-81B6BB5EF84B}
There are 1 domains in domain AZIZHOME on transport
\Device\NetBT_Tcpip_{BEF
C2B5F-9682-4074-A097-81B6BB5EF84B}

C:\>

*******************

Waqar

 

[Guest]

I don't know what all those results of yours mean but I have the same problem
and have been having it over and over again since XP came out. I can't
beleive there isnt more written about it. Hay Microsoft are you seeing this?
What is it that prevents machines from browsing the network? This must be
very common as I see it almost every time I set machines up.

 

[Chuck]

I don't know what all those results of yours mean but I have the same problem
and have been having it over and over again since XP came out. I can't
beleive there isnt more written about it. Hay Microsoft are you seeing this?
What is it that prevents machines from browsing the network? This must be
very common as I see it almost every time I set machines up.

Jason,

Actually, there is a very good article about the browser.
<http://www.microsoft.com/technet/archive/winntas/deploy/prodspecs/ntbrowse.mspx>

And if you prefer a more chatty, lighter one:
<http://nitecruzr.blogspot.com/2005/04/nt-browser-or-why-cant-i-always-see.html>

If you have problems, why not post details, and give us a chance to help you?
<http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html#AskingForHelp>

--
Cheers,
Chuck [MS-MVP Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem - it's a normal response from experience.
My email is AT DOT
actual address pchuck sonic net.

 

[Chuck]

From my desktop machine i can see shared folders on my laptop, can copy,
delete files etc.

From the laptop i am told i do not have permission, but if i map a drive
then it works.

Trying to follow some of the advice in the newsgroups I have obtained
the following using the browstat program but am unsure what to do next.

Can anyone help ?

*****************

DIM 3000

C:\>browstat status


Status for domain AZIZHOME on transport
\Device\NetBT_Tcpip_{DC566B4B-1187-41D5-
8205-4119884B6041}
Browsing is active on domain.
Master browser name is: DIM3000
Master browser is running build 2600
1 backup servers retrieved from master DIM3000
\\DIM3000
There are 2 servers in domain AZIZHOME on transport
\Device\NetBT_Tcpip_{DC5
66B4B-1187-41D5-8205-4119884B6041}
There are 1 domains in domain AZIZHOME on transport
\Device\NetBT_Tcpip_{DC5
66B4B-1187-41D5-8205-4119884B6041}

C:\>

*********************

8600c


C:\>browstat status


Status for domain AZIZHOME on transport
\Device\NetBT_Tcpip_{BEFC2B5F-9682-4074-
A097-81B6BB5EF84B}
Browsing is active on domain.
Master browser name is: DIM3000
Master browser is running build 2600
1 backup servers retrieved from master DIM3000
\\DIM3000
There are 3 servers in domain AZIZHOME on transport
\Device\NetBT_Tcpip_{BEF
C2B5F-9682-4074-A097-81B6BB5EF84B}
There are 1 domains in domain AZIZHOME on transport
\Device\NetBT_Tcpip_{BEF
C2B5F-9682-4074-A097-81B6BB5EF84B}

C:\>

*******************

Waqar

Wagar,

OK, you don't have a browser conflict shown here, at least from these 2
computers. According to 8600c (is that the desktop or laptop?), there are 3
servers, but according to Dim3000, there are only 2. How about browstat for the
third computer?

Also, "ipconfig /all" for all 3 please.
<http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html#AskingForHelp>

And more detail about the network too.
<http://nitecruzr.blogspot.com/2005/06/background-information-useful-in.html>

--
Cheers,
Chuck [MS-MVP Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem - it's a normal response from experience.
My email is AT DOT
actual address pchuck sonic net.

 

[Waqar Aziz]

From my desktop machine i can see shared folders on my laptop, can copy,
delete files etc.

From the laptop i am told i do not have permission, but if i map a drive
then it works.

Trying to follow some of the advice in the newsgroups I have obtained
the following using the browstat program but am unsure what to do next.

Can anyone help ?

*****************

DIM 3000

C:\>browstat status


Status for domain AZIZHOME on transport
\Device\NetBT_Tcpip_{DC566B4B-1187-41D5-
8205-4119884B6041}
Browsing is active on domain.
Master browser name is: DIM3000
Master browser is running build 2600
1 backup servers retrieved from master DIM3000
\\DIM3000
There are 2 servers in domain AZIZHOME on transport
\Device\NetBT_Tcpip_{DC5
66B4B-1187-41D5-8205-4119884B6041}
There are 1 domains in domain AZIZHOME on transport
\Device\NetBT_Tcpip_{DC5
66B4B-1187-41D5-8205-4119884B6041}

C:\>

*********************

8600c


C:\>browstat status


Status for domain AZIZHOME on transport
\Device\NetBT_Tcpip_{BEFC2B5F-9682-4074-
A097-81B6BB5EF84B}
Browsing is active on domain.
Master browser name is: DIM3000
Master browser is running build 2600
1 backup servers retrieved from master DIM3000
\\DIM3000
There are 3 servers in domain AZIZHOME on transport
\Device\NetBT_Tcpip_{BEF
C2B5F-9682-4074-A097-81B6BB5EF84B}
There are 1 domains in domain AZIZHOME on transport
\Device\NetBT_Tcpip_{BEF
C2B5F-9682-4074-A097-81B6BB5EF84B}

C:\>

*******************

Waqar

Wagar,

OK, you don't have a browser conflict shown here, at least from these 2
computers. According to 8600c (is that the desktop or laptop?), there are 3
servers, but according to Dim3000, there are only 2. How about browstat for the
third computer?

Also, "ipconfig /all" for all 3 please.
<http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html#AskingForHelp>

And more detail about the network too.
<http://nitecruzr.blogspot.com/2005/06/background-information-useful-in.html>

--
Cheers,
Chuck [MS-MVP Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem - it's a normal response from experience.
My email is AT DOT
actual address pchuck sonic net.

Thanks for replying Chuck,

The DHCP on my server shows 7 machines in total, there are laptops which come and go (brother,
friend etc) plus a Ipaq Pocket PC running PPC2003. So are you saying one of the machines that may
not be here at present could be causing this problem ?

Dim3000 is my desktop and 8600c is my laptop.

I can access shared drives on my sisters laptop from either Dim3000 or 8600c and can get back to
shared drives on 8600c from her machine, BUT only have the problem getting back to Dim3000 and get
the access denied problem. The Dim3000 machine appears in Network Neighbourhood and can be seen
from any other machine but not accessed. Mapping a drive and assigning a letter straight through to
one of the shared folders on Dim3000 works ok.

What can i do ? Must i run browstat on each machine ?

PS - All machines run Win XP Pro SP2

Waqar

 

[Chuck]

From my desktop machine i can see shared folders on my laptop, can copy,
delete files etc.

From the laptop i am told i do not have permission, but if i map a drive
then it works.

Trying to follow some of the advice in the newsgroups I have obtained
the following using the browstat program but am unsure what to do next.

Can anyone help ?

*****************

DIM 3000

C:\>browstat status


Status for domain AZIZHOME on transport
\Device\NetBT_Tcpip_{DC566B4B-1187-41D5-
8205-4119884B6041}
Browsing is active on domain.
Master browser name is: DIM3000
Master browser is running build 2600
1 backup servers retrieved from master DIM3000
\\DIM3000
There are 2 servers in domain AZIZHOME on transport
\Device\NetBT_Tcpip_{DC5
66B4B-1187-41D5-8205-4119884B6041}
There are 1 domains in domain AZIZHOME on transport
\Device\NetBT_Tcpip_{DC5
66B4B-1187-41D5-8205-4119884B6041}

C:\>

*********************

8600c


C:\>browstat status


Status for domain AZIZHOME on transport
\Device\NetBT_Tcpip_{BEFC2B5F-9682-4074-
A097-81B6BB5EF84B}
Browsing is active on domain.
Master browser name is: DIM3000
Master browser is running build 2600
1 backup servers retrieved from master DIM3000
\\DIM3000
There are 3 servers in domain AZIZHOME on transport
\Device\NetBT_Tcpip_{BEF
C2B5F-9682-4074-A097-81B6BB5EF84B}
There are 1 domains in domain AZIZHOME on transport
\Device\NetBT_Tcpip_{BEF
C2B5F-9682-4074-A097-81B6BB5EF84B}

C:\>

*******************

Waqar

Wagar,

OK, you don't have a browser conflict shown here, at least from these 2
computers. According to 8600c (is that the desktop or laptop?), there are 3
servers, but according to Dim3000, there are only 2. How about browstat for the
third computer?

Also, "ipconfig /all" for all 3 please.
<http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html#AskingForHelp>

And more detail about the network too.
<http://nitecruzr.blogspot.com/2005/06/background-information-useful-in.html>

--
Cheers,
Chuck [MS-MVP Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem - it's a normal response from experience.
My email is AT DOT
actual address pchuck sonic net.

Thanks for replying Chuck,

The DHCP on my server shows 7 machines in total, there are laptops which come and go (brother,
friend etc) plus a Ipaq Pocket PC running PPC2003. So are you saying one of the machines that may
not be here at present could be causing this problem ?

Dim3000 is my desktop and 8600c is my laptop.

I can access shared drives on my sisters laptop from either Dim3000 or 8600c and can get back to
shared drives on 8600c from her machine, BUT only have the problem getting back to Dim3000 and get
the access denied problem. The Dim3000 machine appears in Network Neighbourhood and can be seen
from any other machine but not accessed. Mapping a drive and assigning a letter straight through to
one of the shared folders on Dim3000 works ok.

What can i do ? Must i run browstat on each machine ?

PS - All machines run Win XP Pro SP2

Waqar

Wagar,

OK, if there are up to 7 computers that could be involved in your workgroup, you
have an extreme version of what I write about in my article. Please spend some
time reading this article - I think it will inform you what you're up against.
<http://nitecruzr.blogspot.com/2005/04/nt-browser-or-why-cant-i-always-see.html>

I don't know what your problem is, right now. I don't even know (completely)
what your symptoms are. You've provided us so far with 2 browstat logs, both
which show Dom3000 to be the master browser from those 2 computers.

When you say you can see a computer in NN, but not access it from there ("access
denied..."), BUT can access that same computer by an explicitly mapped drive, it
sounds very much like a browser conflict. It's probably not a sharing
(permissioning) problem, nor a connectivity or name resolution issue. All
possible issues are enumerated in this article:
<http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html>

First you need to identify the scope and nature of the problem. No, I don't
want any more than you, to dig thru 7 sets of clues. But the more you can
provide, the better chance of finding the problem.

Please start by inventorying those 7 computers, or as many as possible,
(minimally Dim3000, 8600c, and your sis laptop) providing for each:
# Name.
# Operating system name, edition (if XP, Home or Pro?), service pack level.
# What problem if any is seen from this computer.
# Output from "browstat status" (IFF Windows NT/2000/XP).
# Output from "ipconfig /all".
<http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html#AskingForHelp>

--
Cheers,
Chuck [MS-MVP Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem - it's a normal response from experience.
My email is AT DOT
actual address pchuck sonic net.

 

[Ron Lowe]

From my desktop machine i can see shared folders on my laptop, can copy,
delete files etc.

From the laptop i am told i do not have permission, but if i map a drive
then it works.

Trying to follow some of the advice in the newsgroups I have obtained
the following using the browstat program but am unsure what to do next.

Can anyone help ?

The description you give on this thread rather rings some bells here.

From what I can see, the machine cannot be browsed ( ie you cannot enumerate
it's shares ), and fails with error code 5, Access Denied. However, access
to the shares themselves works OK.

Try this for a fix:

On the machine you are trying to contact, ( 'main machine' ) go to:

start | Run | type 'Regedit' in the box.

On the left hand pane, navigate to:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\

In the LSA folder, look in the right-hand pane.
look for the value 'RestrictAnonymous'.

It needs to be zero.
If it is not, double-click it and set it to zero.

( The value of RestrictAnonymousSam can be left at 1. )

Close regedit, and re-boot the server machine.

See if that helps.

 

[Waqar Aziz]

THANK YOU

Thats fixed it !

PS Sorry for top posting and caps

Waq