Access Rights

[Guest]

I have a network of 2 computers running XP Home.Everything works except the
client computer cannot access files or printers on the host computer. I get
an error message that the client computer does not have access rights and to
contact the administrator. This problem sounds identical to the one posted by
Broman..

Barry

 

[Guest]

Barry
I am having the same problem on a desktop Windows XP Pro and a laptop
Windows XP Home Edition. I have found I can not find my desktop to add to the
network places. I have tried redoing all of the network wizards. But it did
say I had no access but now I can not even get the desktop to show up.

 

[Chuck]

I have a network of 2 computers running XP Home.Everything works except the
client computer cannot access files or printers on the host computer. I get
an error message that the client computer does not have access rights and to
contact the administrator. This problem sounds identical to the one posted by
Broman..

Barry

Barry,

Are you running both Client for Microsoft Networks, and File and Printer Sharing
for Microsoft Networks (Local Area Connection - Properties), on each computer?
Do you have shares setup on each?

Are you running NetBIOS Over TCP/IP (Local Area Connection - Properties - TCP/IP
- Properties - Advanced - WINS) on each computer?

Make sure the browser service is running on the host computer. Control Panel -
Administrative Tools - Services. Verify that the Computer Browser, and the
TCP/IP NetBIOS Helper, services both show with Status = Started. Disable the
browser on the client.

Make sure that the Guest account is enabled, on each computer. Enable Guest
with Start - Run - "cmd", then type "net user guest /active:yes" in the command
window.

Do any of the computers have a software firewall (ICF / WF, or third party)? If
so, you need to configure them for file sharing. Firewall configurations are a
very common cause of (network) browser, and file sharing, problems.

Look at registry key [HKLM\System\CurrentControlSet\Control\Lsa], value
restrictanonymous, on both computers.
<http://www.microsoft.com/windows200...2000/techinfo/reskit/en-us/regentry/46688.asp>
<http://www.jsifaq.com/subf/tip2600/rh2625.htm>
http://support.microsoft.com/?id=246261
http://support.microsoft.com/?id=296403

The above articles refer to Windows 2000. Remember WinXP is NT V5.1, and Win2K
is NT V5.0.

Have you used the Registry Editor before? If not, it's a scary tool, but it's
pretty simple once you get used to it. Here are a couple articles that might
help:
<http://www.microsoft.com/windowsxp/...home/using/productdoc/en/tools_regeditors.asp>
<http://www.annoyances.org/exec/show/registry>

Just remember to backup the key (create a registry patch) for
[HKLM\System\CurrentControlSet\Control\Lsa] before making any changes, if
appropriate.

From the Annoyances article:
You can create a Registry patch by opening the Registry Editor, selecting a
branch, and choosing Export from the File menu. Then, specify a filename, and
press OK. You can then view the Registry patch file by opening it in Notepad
(right-click on it and select Edit). Again, just double-click on a Registry
patch file (or use Import in the Registry Editor's File menu) to apply it to the
registry.

 

[Interrogative]

I have a network of 2 computers running XP Home.Everything works except the
client computer cannot access files or printers on the host computer. I
get
an error message that the client computer does not have access rights and
to
contact the administrator. This problem sounds identical to the one posted
by
Broman..

Barry

Depends what you are doing. Best and easiest way to overcome this is to have
the same username and password on each machine when attempting this.

Even then, you wont get into some areas because they are not allowed access
until you go to the machine that is disallowing that and share the folders
themselves. Eg, C:\Documents and Settings needs to be separately shared on
each machine if you want desktop on each machine available to other machines
on the network.

 

[Guest]

Chuck

I checked the "restrict anonymous" value on both computers and they are both
set at 1. Should they be set at "0"?

Barry

 

[Guest]

Chuck

Reference my last post- if I need a change should this be in Hex or decimal?

Thanks,

Barry

 

[Guest]

Interogative,

Thanks but I have all the setting correct I think.

Barry

 

[Chuck]

Chuck

I checked the "restrict anonymous" value on both computers and they are both
set at 1. Should they be set at "0"?

Barry

Barry,

With your problem, setting restrictanonymous to Hex "0" (or Decimal "0" if you
wish) is the correct solution.

 

[Guest]

Chuck

I set both computers to 0 ,shut down and restarted, ran the network wizard
and checked again. The problem still exists. I can ping each computer. There
is also a "RestricAnonymoussam" value in the registry that I didn't change.
Should I? Any other thoughts?

Thanks,
Barry

 

[Chuck]

Chuck

I set both computers to 0 ,shut down and restarted, ran the network wizard
and checked again. The problem still exists. I can ping each computer. There
is also a "RestricAnonymoussam" value in the registry that I didn't change.
Should I? Any other thoughts?

Barry,

For right now, let's leave restrictanonymoussam as it is.

Any firewalls, now or in the past, on either computer? Firewalls, even
"disabled", can cause file sharing problems.

Please provide ipconfig information for each computer, and let's diagnose the
problem.
Start - Run - "cmd". Type "ipconfig /all >c:\ipconfig.txt" into the command
window - Open c:\ipconfig.txt in Notepad, make sure that Format - Word Wrap is
NOT checked!, copy and paste entire contents into your next post. Identify
operating system (by name, version, and SP level) with each ipconfig listing.

 

[Interrogative]

.....that being the case you are having no problems then! Glad that you
didn't need to post!

 

[Guest]

Chuck,

Only Windows firewall on both computers with the normal exceptions for file
sharing etc. I couldn't make "ipconfig/all>c:\ipconfig.txt" work so here is
my Ipconfig the hard way. Both computers are running Windows xp ver.5.1.2600
SP2.

Host

Host name : barry
Primary DNS suffix :
Node type :hybrid
IP Routing enabled : Yes
WINS Proxy enabled : No
Ethernet adapter local area Connection;
Connection specific DNS suffix :
Description : SiS 900 PCI fast
ethernet adapter
Physical address : 00-0D-87-06-85-69
Dhcp enabled : No
IP address : 192.168.0.1
Subnet mask : 255.255.255.0
Default gateway :

CLIENT

Host name : Maureen
Primary DNS suffix :
Node type : mixed
IP routing enabled : NO
WINS proxy enabled : NO
DNS suffix search list : mshome.net
Ethernet adapter local area connection;
Connection specific DNS suffix : mshome.net
Description : SiS 900-Based
PCI fast ethernet adapter
Physical address : 00-11-5b-51-25-27
Dhcp enabled : YES
Autoconfiguration enabled : YES
IP address : 192.168.0.136
Subnet mask : 255.255.255.0
Default gateway : 192.168.0.1
Dhcp server : 192.168.0.1
DNS server : 192.168.0.1
Lease obtained : Monday,
Dec.06,2004 9:40:03 am
Lease expires : Monday, Dec. 13,
2004 9:40:03 am

 

[Chuck]

Chuck,

Only Windows firewall on both computers with the normal exceptions for file
sharing etc. I couldn't make "ipconfig/all>c:\ipconfig.txt" work so here is
my Ipconfig the hard way. Both computers are running Windows xp ver.5.1.2600
SP2.

<SNIP>

OK, Barry,

Take the following code (everything inside the "#####"). (Did I get the names
and ip addresses right)?

Copy the code, precisely as it is keyed, into Notepad. Ensure that Format -
Word Wrap is not checked.
Save the file as "cdiag.cmd", as type "All Files", into the root folder "C:\".
Run it by Start - Run - "c:\cdiag".
Wait patiently.
When Notepad opens up displaying c:\cdiag.txt, first check Format and ensure
that Word Wrap is NOT checked! Then, copy the entire contents (Ctrl-A Ctrl-C)
and paste (Ctrl-V) into your next post.

Do this from both computers, please.

#####

@echo off
set FullTargets=barry 192.168.0.1 Maureen 192.168.0.136
set PingTargets=127.0.0.1
Set Version=V1.05
@echo CDiagnosis %Version% >c:\cdiag.txt
@echo Start diagnosis for %computername% (Targets %FullTargets%) >>c:\cdiag.txt
for %%a in (%FullTargets% %PingTargets%) do (
@echo. >>c:\cdiag.txt
@echo Target %%a >>c:\cdiag.txt
@echo. >>c:\cdiag.txt
@echo "ping %%a" >>c:\cdiag.txt
@echo. >>c:\cdiag.txt
ping %%a >>c:\cdiag.txt
@echo. >>c:\cdiag.txt
@echo "net view %%a" >>c:\cdiag.txt
@echo. >>c:\cdiag.txt
net view %%a >>c:\cdiag.txt
)
@echo End diagnosis for %computername% >>c:\cdiag.txt
notepad c:\cdiag.txt
:EOF

#####

 

[Guest]

Chuck,

Here is the contents of notepad for "barry". I could not get "Maureen" to
display when I run "c:\cdiag". There is a breif flash of what I think is the
command prompt.

Barry
CDiagnosis V1.05
Start diagnosis for BARRY (Targets barry 192.168.0.1 Maureen 192.168.0.136)

Target barry

"ping %"

"net view barry"

Shared resources at barry



Share name Type Used as Comment

-------------------------------------------------------------------------------
All Users Disk
C Disk
Canoni56 Print Canon i560
Maureen Disk
Microsoft Picture It! 2002 Disk
My Documents Disk
My Music Disk
My Pictures Disk
New Folder Disk
Norton SystemWorks Disk
SharedDocs Disk
SMPID Disk
Sun Life Disk
The command completed successfully.


Target 192.168.0.1

"ping %"

"net view 192.168.0.1"

Shared resources at 192.168.0.1



Share name Type Used as Comment

-------------------------------------------------------------------------------
All Users Disk
C Disk
Canoni56 Print Canon i560
Maureen Disk
Microsoft Picture It! 2002 Disk
My Documents Disk
My Music Disk
My Pictures Disk
New Folder Disk
Norton SystemWorks Disk
SharedDocs Disk
SMPID Disk
Sun Life Disk
The command completed successfully.


Target Maureen

"ping %"

"net view Maureen"

Shared resources at Maureen

Maureen

Share name Type Used as Comment

-------------------------------------------------------------------------------
C Disk Z:
My Documents Disk
My Pictures Disk
Shared Music Disk
SharedDocs Disk
The command completed successfully.


Target 192.168.0.136

"ping %"

"net view 192.168.0.136"

Shared resources at 192.168.0.136

Maureen

Share name Type Used as Comment

-------------------------------------------------------------------------------
C Disk
My Documents Disk
My Pictures Disk
Shared Music Disk
SharedDocs Disk
The command completed successfully.


Target 127.0.0.1

"ping %"

"net view 127.0.0.1"

Shared resources at 127.0.0.1



Share name Type Used as Comment

-------------------------------------------------------------------------------
All Users Disk
C Disk
Canoni56 Print Canon i560
Maureen Disk
Microsoft Picture It! 2002 Disk
My Documents Disk
My Music Disk
My Pictures Disk
New Folder Disk
Norton SystemWorks Disk
SharedDocs Disk
SMPID Disk
Sun Life Disk
The command completed successfully.

End diagnosis for BARRY

 

[Chuck]

Chuck,

Here is the contents of notepad for "barry". I could not get "Maureen" to
display when I run "c:\cdiag". There is a breif flash of what I think is the
command prompt.

Barry
CDiagnosis V1.05
Start diagnosis for BARRY (Targets barry 192.168.0.1 Maureen 192.168.0.136)

Target barry

"ping %"

"net view barry"

Shared resources at barry



Share name Type Used as Comment

-------------------------------------------------------------------------------
All Users Disk
C Disk
Canoni56 Print Canon i560
Maureen Disk
Microsoft Picture It! 2002 Disk
My Documents Disk
My Music Disk
My Pictures Disk
New Folder Disk
Norton SystemWorks Disk
SharedDocs Disk
SMPID Disk
Sun Life Disk
The command completed successfully.

End diagnosis for BARRY

Barry,

I'm not sure what is wrong here, but both of your computers seem to have
problems using my code. This may be related to the problem interfering with
file sharing accessing files on Barry from Maureen. Or you may be causing it
somehow.

Are you copying the code using copy - paste, so it stays identical to what I
provided?

The CDiag from Barry indicates no problem there. Except for the odd problem in
CDiag itself.

Target barry

"ping %" <== ???

"net view barry"

Open c:\cdiag.txt on Maureen, using Notepad, see if it contains anything.

Try opening a command prompt from Programs - Accessories. Run CDiag from the
command prompt as "c:\cdiag.cmd", see if you get anything.

 

[Guest]

Chuck,

I made a typo - forgot the space in front of "do". Here's Maureen.

Barry

CDiagnosis V1.05
Start Diagnosis for MAUREEN (Targets barry 192.168.0.1 Maureen 192.168.0.136)

Target barry

"ping barry"



Pinging barry.mshome.net [192.168.0.1] with 32 bytes of data:



Reply from 192.168.0.1: bytes=32 time<1ms TTL=128

Reply from 192.168.0.1: bytes=32 time<1ms TTL=128

Reply from 192.168.0.1: bytes=32 time<1ms TTL=128

Reply from 192.168.0.1: bytes=32 time<1ms TTL=128



Ping statistics for 192.168.0.1:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 0ms, Average = 0ms


"net view barry"


Target 192.168.0.1

"ping 192.168.0.1"



Pinging 192.168.0.1 with 32 bytes of data:



Reply from 192.168.0.1: bytes=32 time<1ms TTL=128

Reply from 192.168.0.1: bytes=32 time<1ms TTL=128

Reply from 192.168.0.1: bytes=32 time<1ms TTL=128

Reply from 192.168.0.1: bytes=32 time<1ms TTL=128



Ping statistics for 192.168.0.1:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 0ms, Average = 0ms


"net view 192.168.0.1"


Target Maureen

"ping Maureen"



Pinging Maureen [192.168.0.136] with 32 bytes of data:



Reply from 192.168.0.136: bytes=32 time<1ms TTL=128

Reply from 192.168.0.136: bytes=32 time<1ms TTL=128

Reply from 192.168.0.136: bytes=32 time<1ms TTL=128

Reply from 192.168.0.136: bytes=32 time<1ms TTL=128



Ping statistics for 192.168.0.136:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 0ms, Average = 0ms


"net view Maureen"

Shared resources at Maureen

Maureen

Share name Type Used as Comment

-------------------------------------------------------------------------------
C Disk
My Documents Disk
My Pictures Disk
Shared Music Disk
SharedDocs Disk
The command completed successfully.


Target 192.168.0.136

"ping 192.168.0.136"



Pinging 192.168.0.136 with 32 bytes of data:



Reply from 192.168.0.136: bytes=32 time<1ms TTL=128

Reply from 192.168.0.136: bytes=32 time<1ms TTL=128

Reply from 192.168.0.136: bytes=32 time<1ms TTL=128

Reply from 192.168.0.136: bytes=32 time<1ms TTL=128



Ping statistics for 192.168.0.136:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 0ms, Average = 0ms


"net view 192.168.0.136"

Shared resources at 192.168.0.136

Maureen

Share name Type Used as Comment

-------------------------------------------------------------------------------
C Disk
My Documents Disk
My Pictures Disk
Shared Music Disk
SharedDocs Disk
The command completed successfully.


Target 127.0.0.1

"ping 127.0.0.1"



Pinging 127.0.0.1 with 32 bytes of data:



Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128



Ping statistics for 127.0.0.1:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 0ms, Average = 0ms


"net view 127.0.0.1"

Shared resources at 127.0.0.1

Maureen

Share name Type Used as Comment

-------------------------------------------------------------------------------
C Disk
My Documents Disk
My Pictures Disk
Shared Music Disk
SharedDocs Disk
The command completed successfully.

End diagnosis for MAUREEN

 

[Chuck]

Chuck,

I made a typo - forgot the space in front of "do". Here's Maureen.

Barry

Barry,

OK, your original description of your problem was simple, and accurate. Maureen
simply can't view Barry, by name or by address. No connectivity or name
resolution problems exist. From the limited success of your copying my CDiag to
Barry, it would appear that no problems exist in the reverse direction - Barry
can access Maureen with no problems.

You have stated that there is no firewall, now or in the past, excepting Windows
Firewall, which does have the File and Printer Sharing exception enabled.

You've checked the restrictanonymous setting on both Barry and Maureen, and it
is now "0" (was "1").

Let's take a look at the browser situation (not Internet Explorer).

The Microsoft Browstat program will show us what browsers you have in your
domain / workgroup, at any time.
http://support.microsoft.com/?id=188305

You can download Browstat from either:
<http://www.dynawell.com/reskit/microsoft/win2000/browstat.zip>
<http://rescomp.stanford.edu/staff/manual/rcc/tools/browstat.zip>

Browstat is very small (40K), and needs no install. Just unzip the downloaded
file, copy browstat.exe to any folder in the Path, and run it from a command
window, by "browstat status". Make sure all computers give the same result.

For more information about the browser subsystem (very intricate), see:
http://support.microsoft.com/?id=188001
http://support.microsoft.com/?id=188305
<http://www.microsoft.com/technet/prodtechnol/winntas/deploy/prodspecs/ntbrowse.mspx>

Please provide browstat information for each computer.
Start - Run - "cmd". Type "browstat status >c:\browstat.txt" into the command
window - Open c:\browstat.txt in Notepad, copy and paste into your next post.

 

[Guest]

Chuck

I downloaded Browstat and extracted it. When I run it there is a brief
flash. The program was copied to: "C:\Documents and
settings\default\desktop\browstat". I cannot run from "cmd" as browstat is
not recognized as an internal or external command etc. Both computers do the
same. What am I doing wrong???

Barry

 

[Chuck]

Chuck

I downloaded Browstat and extracted it. When I run it there is a brief
flash. The program was copied to: "C:\Documents and
settings\default\desktop\browstat". I cannot run from "cmd" as browstat is
not recognized as an internal or external command etc. Both computers do the
same. What am I doing wrong???

Barry,

You need to copy browstat.exe into a folder in your Path. I setup a folder
"C:\Utility" on my computer, and added "C:\Utility" to my path. I copy all
programs like browstat to C:\Utility, and can then run anything from the command
prompt. How to add a folder name to Path:
<http://www.microsoft.com/resources/...dm_advancd_environmnt_addchange_variable.mspx>

Once browstat is in a Path folder, you can run it easily from the Run window, or
from a command window.

 

[Guest]

Chuck

Here's Browstat for Maureen.

Barry



Status for domain MSHOME on transport \Device\NwlnkNb
Browsing is active on domain.
Master browser name is: BARRY
Could not connect to registry, error = 5 Unable to determine build of
browser master: 5
Unable to determine server information for browser master: 5
1 backup servers retrieved from master BARRY
\\BARRY
There are 1 servers in domain MSHOME on transport \Device\NwlnkNb
There are 1 domains in domain MSHOME on transport \Device\NwlnkNb


Status for domain MSHOME on transport
\Device\NetBT_Tcpip_{4A6BEA3D-0356-4F73-965C-8AB9537F83EA}
Browsing is active on domain.
Master browser name is: BARRY
Could not connect to registry, error = 5 Unable to determine build of
browser master: 5
Unable to determine server information for browser master: 5
1 backup servers retrieved from master BARRY
\\BARRY
Unable to retrieve server list from BARRY: 64