Access to computer in network denied

[Guest]

The message:
\\Office is not accessible. You might not have permission to use this
network resource. Contact the administrator of the server to find out if yu
have access permissions.

Access is denied.

I have had up to 4 computers (2 XP Pro Desktops, 1 XP Home Laptop, 1
Windows 98 SE Laptop) running both wired and wireless with one or two
routers. All can be made to work OK except for one of the desktops.

I have reduced the network to the XP Pro Desktop (Office) and the XP Home
Laptop (Laptop) wired with a hub. Firewalls are turned off. Operation is by
Administrator, with no passwords.

All computers can see Office, Office can see all computers, but no computers
can access Office - see above message. Office can access all computers.

Ping both ways is OK

Office Ipconfig:
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 192.168.1.10
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1

Laptop Ipconfig:
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 192.168.1.12
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1

Browstat on Office with Office as master browser:

Status for domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
Browsing is active on domain.
Master browser name is: OFFICE
Could not open key in registry, error = 5 Unable to determine build
of browser master: 5
Unable to determine server information for browser master: 5
1 backup servers retrieved from master OFFICE
\\OFFICE
There are 2 servers in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
There are 1 domains in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}


Browstat on Laptop with Office as master browser:

Status for domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
Browsing is active on domain.
Master browser name is: OFFICE
Could not open key in registry, error = 5 Unable to determine build
of browser master: 5
Unable to determine server information for browser master: 5
1 backup servers retrieved from master OFFICE
\\OFFICE
There are 2 servers in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
There are 1 domains in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}


Browstat on Office with Laptop as master browser:

Status for domain MSHOME on transport
\Device\NetBT_Tcpip_{BDF2B313-12D8-476E-9FAF-42C3A99DF92D}
Browsing is active on domain.
Master browser name is: LAPTOP
Could not connect to registry, error = 53 Unable to determine build
of browser master: 53
\\\\LAPTOP . Version:05.01 Flags: 51203 NT POTENTIAL MASTER
1 backup servers retrieved from master LAPTOP
\\LAPTOP
There are 2 servers in domain MSHOME on transport
\Device\NetBT_Tcpip_{BDF2B313-12D8-476E-9FAF-42C3A99DF92D}
Unable to retrieve server list from LAPTOP: 64



Browstat on Laptop with Laptop as master browser:

Status for domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
Browsing is active on domain.
Master browser name is: LAPTOP
Master browser is running build 2600
1 backup servers retrieved from master LAPTOP
\\LAPTOP
There are 2 servers in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
There are 1 domains in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}

I have spent a week trying any combination that I know about, including many
suggestions from this forum to no avail. It must be simple, but won't XP even
let me access the computer?

Thank you for any help you can give me!

Bayard

 

[Chuck]

The message:
\\Office is not accessible. You might not have permission to use this
network resource. Contact the administrator of the server to find out if yu
have access permissions.

Access is denied.

I have had up to 4 computers (2 XP Pro Desktops, 1 XP Home Laptop, 1
Windows 98 SE Laptop) running both wired and wireless with one or two
routers. All can be made to work OK except for one of the desktops.

I have reduced the network to the XP Pro Desktop (Office) and the XP Home
Laptop (Laptop) wired with a hub. Firewalls are turned off. Operation is by
Administrator, with no passwords.

All computers can see Office, Office can see all computers, but no computers
can access Office - see above message. Office can access all computers.

Ping both ways is OK

Office Ipconfig:
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 192.168.1.10
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1

Laptop Ipconfig:
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 192.168.1.12
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1

Browstat on Office with Office as master browser:

Status for domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
Browsing is active on domain.
Master browser name is: OFFICE
Could not open key in registry, error = 5 Unable to determine build
of browser master: 5
Unable to determine server information for browser master: 5
1 backup servers retrieved from master OFFICE
\\OFFICE
There are 2 servers in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
There are 1 domains in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}


Browstat on Laptop with Office as master browser:

Status for domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
Browsing is active on domain.
Master browser name is: OFFICE
Could not open key in registry, error = 5 Unable to determine build
of browser master: 5
Unable to determine server information for browser master: 5
1 backup servers retrieved from master OFFICE
\\OFFICE
There are 2 servers in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
There are 1 domains in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}


Browstat on Office with Laptop as master browser:

Status for domain MSHOME on transport
\Device\NetBT_Tcpip_{BDF2B313-12D8-476E-9FAF-42C3A99DF92D}
Browsing is active on domain.
Master browser name is: LAPTOP
Could not connect to registry, error = 53 Unable to determine build
of browser master: 53
\\\\LAPTOP . Version:05.01 Flags: 51203 NT POTENTIAL MASTER
1 backup servers retrieved from master LAPTOP
\\LAPTOP
There are 2 servers in domain MSHOME on transport
\Device\NetBT_Tcpip_{BDF2B313-12D8-476E-9FAF-42C3A99DF92D}
Unable to retrieve server list from LAPTOP: 64



Browstat on Laptop with Laptop as master browser:

Status for domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
Browsing is active on domain.
Master browser name is: LAPTOP
Master browser is running build 2600
1 backup servers retrieved from master LAPTOP
\\LAPTOP
There are 2 servers in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
There are 1 domains in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}

I have spent a week trying any combination that I know about, including many
suggestions from this forum to no avail. It must be simple, but won't XP even
let me access the computer?

Thank you for any help you can give me!

Bayard

Bayard,

What firewalls are turned off?

On any XP Pro computer, check to see if Simple File Sharing (Control Panel -
Folder Options - View - Advanced settings) is enabled or disabled. With XP Pro,
you need to have SFS properly set on each computer.

On XP Pro with SFS disabled, check the Local Security Policies (Control Panel -
Administrative Tools). Under Local Policies - Security Options, look at
"Network access: Sharing and security model", and ensure it's set to "Classic -
local users authenticate as themselves".

On XP Pro with SFS disabled, if you set the above Local Security Policy to
"Guest only", enable the Guest account, using Start - Run - "cmd" - type "net
user guest /active:yes" in the command window. If "Classic", setup and use a
common non-Guest account on all computers. Whichever account is used, give it
an identical, non-blank password on all computers.

On XP Pro with Simple File Sharing enabled, make sure that the Guest account is
enabled, on each computer. Enable Guest, with Start - Run - "cmd", then type
"net user guest /active:yes" in the command window. Ensure that the password
for Guest is blank, with Start - Run - "control userpasswords2"; select Guest,
click Reset Password, click OK without entering a new password.

On XP Pro, if you're going to use Guest authentication, check your Local
Security Policy (Control Panel - Administrative Tools) - User Rights Assignment,
on the XP Pro computer, and look at "Deny access to this computer from the
network". Make sure Guest is not in the list. Look at "Access this computer
from the network", and make sure that Everyone is in this list.

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
My email is AT DOT
actual address pchuck sonic net.

 

[Guest]

(1)
What firewalls are turned off?
(2)
On any XP Pro computer, check to see if Simple File Sharing (Control Panel -
Folder Options - View - Advanced settings) is enabled or disabled. With XP Pro,
you need to have SFS properly set on each computer.
(3)
On XP Pro with SFS disabled, check the Local Security Policies (Control Panel -
Administrative Tools). Under Local Policies - Security Options, look at
"Network access: Sharing and security model", and ensure it's set to "Classic -
local users authenticate as themselves".
(4)
On XP Pro with SFS disabled, if you set the above Local Security Policy to
"Guest only", enable the Guest account, using Start - Run - "cmd" - type "net
user guest /active:yes" in the command window. If "Classic", setup and use a
common non-Guest account on all computers. Whichever account is used, give it
an identical, non-blank password on all computers.
(5)
On XP Pro with Simple File Sharing enabled, make sure that the Guest account is
enabled, on each computer. Enable Guest, with Start - Run - "cmd", then type
"net user guest /active:yes" in the command window. Ensure that the password
for Guest is blank, with Start - Run - "control userpasswords2"; select Guest,
click Reset Password, click OK without entering a new password.
(6)
On XP Pro, if you're going to use Guest authentication, check your Local
Security Policy (Control Panel - Administrative Tools) - User Rights Assignment,
on the XP Pro computer, and look at "Deny access to this computer from the
network". Make sure Guest is not in the list. Look at "Access this computer
from the network", and make sure that Everyone is in this list.

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
My email is AT DOT
actual address pchuck sonic net.

Thanks for the reply, Chuck.
To simplfy matters as much as possible, the two computers that I am now
using are the inaccessable desktop (OFFICE) XP Pro SP2 and another desktop
(DESKTOP) also running XP Pro SP2. Checks with Ipconfig and Browstat are
comparable with LAPTOP used for previous data. As mentioned before, all four
computers see and communicate with each other in several configerations,
except OFFICE can not be accessed on the network.

In response to your instructions, I have numbered them and give the results
of the actions below:

(1) Both computers use Windows Firewall and they are disabled.

(2) Both computers normally use Simple File Sharing. Tests were run with
both enabled and both disabled. No access either way.

(3) Set up per directions and verified. No access

(4) I did not perform this since it requires setting up passwords (which I
don't use and perfer not to, and dosent seem to be required. Will do so if
critical.

(5) Set up per directions and verified. No access

(6) Set up, verified, and exercised a number of permutations. No access

Is there any command that resets all (most) registry, et.al. to default
values?
All of my other systems have worked "out of the box", but reinstalling SP2,
and I suspect even XP Pro doesn't reset the problem parameters. I hope
reformating isn't my only option!!

Thanks again,
Bayard

 

[Chuck]

Thanks for the reply, Chuck.
To simplfy matters as much as possible, the two computers that I am now
using are the inaccessable desktop (OFFICE) XP Pro SP2 and another desktop
(DESKTOP) also running XP Pro SP2. Checks with Ipconfig and Browstat are
comparable with LAPTOP used for previous data. As mentioned before, all four
computers see and communicate with each other in several configerations,
except OFFICE can not be accessed on the network.

In response to your instructions, I have numbered them and give the results
of the actions below:

(1) Both computers use Windows Firewall and they are disabled.

(2) Both computers normally use Simple File Sharing. Tests were run with
both enabled and both disabled. No access either way.

(3) Set up per directions and verified. No access

(4) I did not perform this since it requires setting up passwords (which I
don't use and perfer not to, and dosent seem to be required. Will do so if
critical.

(5) Set up per directions and verified. No access

(6) Set up, verified, and exercised a number of permutations. No access

Is there any command that resets all (most) registry, et.al. to default
values?
All of my other systems have worked "out of the box", but reinstalling SP2,
and I suspect even XP Pro doesn't reset the problem parameters. I hope
reformating isn't my only option!!

Bayard,

How did you disable Windows Firewall? Was it thru the Security Center applet,
or by disabling the WF service? Its essential to disable WF thru the SC applet,
never by disabling the service. Better still to enable it, and enable the File
and Printer Sharing exception for the LAN.

There is no command that I know of that resets all (most) registry et al to
default values. There are a lot of values, you have to set them yourself, and
know what you're doing.

You're making a lot of changes, rapidly, one at a time, and testing after each
change. You need to make your changes systematically, and for a reason. You've
been studying some of the other cases here, which is good, but you've been
trying to fix your problem by imitating what we've done in those other cases.
This is not good. It's like going to the pharmacy and getting medicine because
your cough sounds like your neighbors, and his doctor told him to treat it so.

With XP Pro, Simple File Sharing disabled, and Classic network access selected,
you can access a computer thru the network using an administrative account, but
you need an identical, non-blank password on both computers. With XP Home, or
with XP Pro with SFS enabled, you'll have to enable the Guest account (see my
previous instructions), but that will not give you administrative access. With
SFS, anything but the Guest account is useless for network access. This
includes browstat, when the master browser is the other computer.

We need to start with the browstat displays. The browser requires anonymous
access, so look at registry key [HKLM\System\CurrentControlSet\Control\Lsa],
value restrictanonymous on Laptop and Office.
<http://www.microsoft.com/windows200...2000/techinfo/reskit/en-us/regentry/46688.asp>
<http://www.jsifaq.com/subf/tip2600/rh2625.htm>
http://support.microsoft.com/?id=246261
http://support.microsoft.com/?id=296403

The above articles refer to Windows 2000. Remember WinXP is NT V5.1, and Win2K
is NT V5.0.

Have you used the Registry Editor before? If not, it's a scary tool, but it's
pretty simple once you get used to it. Here are a couple articles that might
help:
<http://www.microsoft.com/windowsxp/...home/using/productdoc/en/tools_regeditors.asp>
<http://www.annoyances.org/exec/show/registry>

Just remember to backup the key (create a registry patch) for
[HKLM\System\CurrentControlSet\Control\Lsa] before making any changes, if
appropriate.

After you check / reset restrictanonymous, power both Laptop and Office down.
Once both are powered down, power Office back up. Once Office is powered up,
power Laptop up. Then rerun browstat on each, and let's see the results.

Once you make Office be the master browser, disable SFS, select Classic network
access, AND use a non-Guest account with identical non-blank passwords on both
Laptop and Office, the "error = 5" messages should go away. Then we will look
at the rest of your problems. But make one change at a time, please.

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
My email is AT DOT
actual address pchuck sonic net.

 

[Guest]

Thanks for the reply, Chuck.
To simplfy matters as much as possible, the two computers that I am now
using are the inaccessable desktop (OFFICE) XP Pro SP2 and another desktop
(DESKTOP) also running XP Pro SP2. Checks with Ipconfig and Browstat are
comparable with LAPTOP used for previous data. As mentioned before, all four
computers see and communicate with each other in several configerations,
except OFFICE can not be accessed on the network.

In response to your instructions, I have numbered them and give the results
of the actions below:

(1) Both computers use Windows Firewall and they are disabled.

(2) Both computers normally use Simple File Sharing. Tests were run with
both enabled and both disabled. No access either way.

(3) Set up per directions and verified. No access

(4) I did not perform this since it requires setting up passwords (which I
don't use and perfer not to, and dosent seem to be required. Will do so if
critical.

(5) Set up per directions and verified. No access

(6) Set up, verified, and exercised a number of permutations. No access

Is there any command that resets all (most) registry, et.al. to default
values?
All of my other systems have worked "out of the box", but reinstalling SP2,
and I suspect even XP Pro doesn't reset the problem parameters. I hope
reformating isn't my only option!!

Bayard,

How did you disable Windows Firewall? Was it thru the Security Center applet,
or by disabling the WF service? Its essential to disable WF thru the SC applet,
never by disabling the service. Better still to enable it, and enable the File
and Printer Sharing exception for the LAN.

There is no command that I know of that resets all (most) registry et al to
default values. There are a lot of values, you have to set them yourself, and
know what you're doing.

You're making a lot of changes, rapidly, one at a time, and testing after each
change. You need to make your changes systematically, and for a reason. You've
been studying some of the other cases here, which is good, but you've been
trying to fix your problem by imitating what we've done in those other cases.
This is not good. It's like going to the pharmacy and getting medicine because
your cough sounds like your neighbors, and his doctor told him to treat it so.

With XP Pro, Simple File Sharing disabled, and Classic network access selected,
you can access a computer thru the network using an administrative account, but
you need an identical, non-blank password on both computers. With XP Home, or
with XP Pro with SFS enabled, you'll have to enable the Guest account (see my
previous instructions), but that will not give you administrative access. With
SFS, anything but the Guest account is useless for network access. This
includes browstat, when the master browser is the other computer.

We need to start with the browstat displays. The browser requires anonymous
access, so look at registry key [HKLM\System\CurrentControlSet\Control\Lsa],
value restrictanonymous on Laptop and Office.
<http://www.microsoft.com/windows200...2000/techinfo/reskit/en-us/regentry/46688.asp>
<http://www.jsifaq.com/subf/tip2600/rh2625.htm>
http://support.microsoft.com/?id=246261
http://support.microsoft.com/?id=296403

The above articles refer to Windows 2000. Remember WinXP is NT V5.1, and Win2K
is NT V5.0.

Have you used the Registry Editor before? If not, it's a scary tool, but it's
pretty simple once you get used to it. Here are a couple articles that might
help:
<http://www.microsoft.com/windowsxp/...home/using/productdoc/en/tools_regeditors.asp>
<http://www.annoyances.org/exec/show/registry>

Just remember to backup the key (create a registry patch) for
[HKLM\System\CurrentControlSet\Control\Lsa] before making any changes, if
appropriate.

After you check / reset restrictanonymous, power both Laptop and Office down.
Once both are powered down, power Office back up. Once Office is powered up,
power Laptop up. Then rerun browstat on each, and let's see the results.

Once you make Office be the master browser, disable SFS, select Classic network
access, AND use a non-Guest account with identical non-blank passwords on both
Laptop and Office, the "error = 5" messages should go away. Then we will look
at the rest of your problems. But make one change at a time, please.

Thank you Chuck, you are right!

Since I have always avoided passwords, would you please detail the proper
procedure to eatablish a non-Guest account with identical non-blank passwords.

Thanks again,

Bayard

 

[Chuck]

:

The message:
\\Office is not accessible. You might not have permission to use this
network resource. Contact the administrator of the server to find out if yu
have access permissions.

Access is denied.

I have had up to 4 computers (2 XP Pro Desktops, 1 XP Home Laptop, 1
Windows 98 SE Laptop) running both wired and wireless with one or two
routers. All can be made to work OK except for one of the desktops.

I have reduced the network to the XP Pro Desktop (Office) and the XP Home
Laptop (Laptop) wired with a hub. Firewalls are turned off. Operation is by
Administrator, with no passwords.

All computers can see Office, Office can see all computers, but no computers
can access Office - see above message. Office can access all computers.

Ping both ways is OK

Office Ipconfig:
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 192.168.1.10
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1

Laptop Ipconfig:
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 192.168.1.12
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1

Browstat on Office with Office as master browser:

Status for domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
Browsing is active on domain.
Master browser name is: OFFICE
Could not open key in registry, error = 5 Unable to determine build
of browser master: 5
Unable to determine server information for browser master: 5
1 backup servers retrieved from master OFFICE
\\OFFICE
There are 2 servers in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
There are 1 domains in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}


Browstat on Laptop with Office as master browser:

Status for domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
Browsing is active on domain.
Master browser name is: OFFICE
Could not open key in registry, error = 5 Unable to determine build
of browser master: 5
Unable to determine server information for browser master: 5
1 backup servers retrieved from master OFFICE
\\OFFICE
There are 2 servers in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
There are 1 domains in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}


Browstat on Office with Laptop as master browser:

Status for domain MSHOME on transport
\Device\NetBT_Tcpip_{BDF2B313-12D8-476E-9FAF-42C3A99DF92D}
Browsing is active on domain.
Master browser name is: LAPTOP
Could not connect to registry, error = 53 Unable to determine build
of browser master: 53
\\\\LAPTOP . Version:05.01 Flags: 51203 NT POTENTIAL MASTER
1 backup servers retrieved from master LAPTOP
\\LAPTOP
There are 2 servers in domain MSHOME on transport
\Device\NetBT_Tcpip_{BDF2B313-12D8-476E-9FAF-42C3A99DF92D}
Unable to retrieve server list from LAPTOP: 64



Browstat on Laptop with Laptop as master browser:

Status for domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
Browsing is active on domain.
Master browser name is: LAPTOP
Master browser is running build 2600
1 backup servers retrieved from master LAPTOP
\\LAPTOP
There are 2 servers in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
There are 1 domains in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}

I have spent a week trying any combination that I know about, including many
suggestions from this forum to no avail. It must be simple, but won't XP even
let me access the computer?

Thank you for any help you can give me!

Bayard

Bayard,

(1)
What firewalls are turned off?

(2)
On any XP Pro computer, check to see if Simple File Sharing (Control Panel -
Folder Options - View - Advanced settings) is enabled or disabled. With XP Pro,
you need to have SFS properly set on each computer.

(3)
On XP Pro with SFS disabled, check the Local Security Policies (Control Panel -
Administrative Tools). Under Local Policies - Security Options, look at
"Network access: Sharing and security model", and ensure it's set to "Classic -
local users authenticate as themselves".

(4)
On XP Pro with SFS disabled, if you set the above Local Security Policy to
"Guest only", enable the Guest account, using Start - Run - "cmd" - type "net
user guest /active:yes" in the command window. If "Classic", setup and use a
common non-Guest account on all computers. Whichever account is used, give it
an identical, non-blank password on all computers.

(5)
On XP Pro with Simple File Sharing enabled, make sure that the Guest account is
enabled, on each computer. Enable Guest, with Start - Run - "cmd", then type
"net user guest /active:yes" in the command window. Ensure that the password
for Guest is blank, with Start - Run - "control userpasswords2"; select Guest,
click Reset Password, click OK without entering a new password.

(6)
On XP Pro, if you're going to use Guest authentication, check your Local
Security Policy (Control Panel - Administrative Tools) - User Rights Assignment,
on the XP Pro computer, and look at "Deny access to this computer from the
network". Make sure Guest is not in the list. Look at "Access this computer
from the network", and make sure that Everyone is in this list.

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
My email is AT DOT
actual address pchuck sonic net.

Thanks for the reply, Chuck.
To simplfy matters as much as possible, the two computers that I am now
using are the inaccessable desktop (OFFICE) XP Pro SP2 and another desktop
(DESKTOP) also running XP Pro SP2. Checks with Ipconfig and Browstat are
comparable with LAPTOP used for previous data. As mentioned before, all four
computers see and communicate with each other in several configerations,
except OFFICE can not be accessed on the network.

In response to your instructions, I have numbered them and give the results
of the actions below:

(1) Both computers use Windows Firewall and they are disabled.

(2) Both computers normally use Simple File Sharing. Tests were run with
both enabled and both disabled. No access either way.

(3) Set up per directions and verified. No access

(4) I did not perform this since it requires setting up passwords (which I
don't use and perfer not to, and dosent seem to be required. Will do so if
critical.

(5) Set up per directions and verified. No access

(6) Set up, verified, and exercised a number of permutations. No access

Is there any command that resets all (most) registry, et.al. to default
values?
All of my other systems have worked "out of the box", but reinstalling SP2,
and I suspect even XP Pro doesn't reset the problem parameters. I hope
reformating isn't my only option!!

Bayard,

How did you disable Windows Firewall? Was it thru the Security Center applet,
or by disabling the WF service? Its essential to disable WF thru the SC applet,
never by disabling the service. Better still to enable it, and enable the File
and Printer Sharing exception for the LAN.

There is no command that I know of that resets all (most) registry et al to
default values. There are a lot of values, you have to set them yourself, and
know what you're doing.

You're making a lot of changes, rapidly, one at a time, and testing after each
change. You need to make your changes systematically, and for a reason. You've
been studying some of the other cases here, which is good, but you've been
trying to fix your problem by imitating what we've done in those other cases.
This is not good. It's like going to the pharmacy and getting medicine because
your cough sounds like your neighbors, and his doctor told him to treat it so.

With XP Pro, Simple File Sharing disabled, and Classic network access selected,
you can access a computer thru the network using an administrative account, but
you need an identical, non-blank password on both computers. With XP Home, or
with XP Pro with SFS enabled, you'll have to enable the Guest account (see my
previous instructions), but that will not give you administrative access. With
SFS, anything but the Guest account is useless for network access. This
includes browstat, when the master browser is the other computer.

We need to start with the browstat displays. The browser requires anonymous
access, so look at registry key [HKLM\System\CurrentControlSet\Control\Lsa],
value restrictanonymous on Laptop and Office.
<http://www.microsoft.com/windows200...2000/techinfo/reskit/en-us/regentry/46688.asp>
<http://www.jsifaq.com/subf/tip2600/rh2625.htm>
http://support.microsoft.com/?id=246261
http://support.microsoft.com/?id=296403

The above articles refer to Windows 2000. Remember WinXP is NT V5.1, and Win2K
is NT V5.0.

Have you used the Registry Editor before? If not, it's a scary tool, but it's
pretty simple once you get used to it. Here are a couple articles that might
help:
<http://www.microsoft.com/windowsxp/...home/using/productdoc/en/tools_regeditors.asp>
<http://www.annoyances.org/exec/show/registry>

Just remember to backup the key (create a registry patch) for
[HKLM\System\CurrentControlSet\Control\Lsa] before making any changes, if
appropriate.

After you check / reset restrictanonymous, power both Laptop and Office down.
Once both are powered down, power Office back up. Once Office is powered up,
power Laptop up. Then rerun browstat on each, and let's see the results.

Once you make Office be the master browser, disable SFS, select Classic network
access, AND use a non-Guest account with identical non-blank passwords on both
Laptop and Office, the "error = 5" messages should go away. Then we will look
at the rest of your problems. But make one change at a time, please.

Thank you Chuck, you are right!

Since I have always avoided passwords, would you please detail the proper
procedure to eatablish a non-Guest account with identical non-blank passwords.

Thanks again,

Bayard

Bayard,

Control Panel - Administrative Tools - Computer Management. Local Users and
Groups - Users. Right click on one, and select Set Password. Follow
instructions.

Be sure to disable the Browser on the Windows 98 computer!
http://cms.simons-rock.edu/faq_by_subtopic/node138.html
http://www.compudentsystems.com/documentation/win98.html

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
My email is AT DOT
actual address pchuck sonic net.

 

[Guest]

:

The message:
\\Office is not accessible. You might not have permission to use this
network resource. Contact the administrator of the server to find out if yu
have access permissions.

Access is denied.

I have had up to 4 computers (2 XP Pro Desktops, 1 XP Home Laptop, 1
Windows 98 SE Laptop) running both wired and wireless with one or two
routers. All can be made to work OK except for one of the desktops.

I have reduced the network to the XP Pro Desktop (Office) and the XP Home
Laptop (Laptop) wired with a hub. Firewalls are turned off. Operation is by
Administrator, with no passwords.

All computers can see Office, Office can see all computers, but no computers
can access Office - see above message. Office can access all computers.

Ping both ways is OK

Office Ipconfig:
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 192.168.1.10
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1

Laptop Ipconfig:
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 192.168.1.12
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1

Browstat on Office with Office as master browser:

Status for domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
Browsing is active on domain.
Master browser name is: OFFICE
Could not open key in registry, error = 5 Unable to determine build
of browser master: 5
Unable to determine server information for browser master: 5
1 backup servers retrieved from master OFFICE
\\OFFICE
There are 2 servers in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
There are 1 domains in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}


Browstat on Laptop with Office as master browser:

Status for domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
Browsing is active on domain.
Master browser name is: OFFICE
Could not open key in registry, error = 5 Unable to determine build
of browser master: 5
Unable to determine server information for browser master: 5
1 backup servers retrieved from master OFFICE
\\OFFICE
There are 2 servers in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
There are 1 domains in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}


Browstat on Office with Laptop as master browser:

Status for domain MSHOME on transport
\Device\NetBT_Tcpip_{BDF2B313-12D8-476E-9FAF-42C3A99DF92D}
Browsing is active on domain.
Master browser name is: LAPTOP
Could not connect to registry, error = 53 Unable to determine build
of browser master: 53
\\\\LAPTOP . Version:05.01 Flags: 51203 NT POTENTIAL MASTER
1 backup servers retrieved from master LAPTOP
\\LAPTOP
There are 2 servers in domain MSHOME on transport
\Device\NetBT_Tcpip_{BDF2B313-12D8-476E-9FAF-42C3A99DF92D}
Unable to retrieve server list from LAPTOP: 64



Browstat on Laptop with Laptop as master browser:

Status for domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
Browsing is active on domain.
Master browser name is: LAPTOP
Master browser is running build 2600
1 backup servers retrieved from master LAPTOP
\\LAPTOP
There are 2 servers in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
There are 1 domains in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}

I have spent a week trying any combination that I know about, including many
suggestions from this forum to no avail. It must be simple, but won't XP even
let me access the computer?

Thank you for any help you can give me!

Bayard

Bayard,

(1)
What firewalls are turned off?

(2)
On any XP Pro computer, check to see if Simple File Sharing (Control Panel -
Folder Options - View - Advanced settings) is enabled or disabled. With XP Pro,
you need to have SFS properly set on each computer.

(3)
On XP Pro with SFS disabled, check the Local Security Policies (Control Panel -
Administrative Tools). Under Local Policies - Security Options, look at
"Network access: Sharing and security model", and ensure it's set to "Classic -
local users authenticate as themselves".

(4)
On XP Pro with SFS disabled, if you set the above Local Security Policy to
"Guest only", enable the Guest account, using Start - Run - "cmd" - type "net
user guest /active:yes" in the command window. If "Classic", setup and use a
common non-Guest account on all computers. Whichever account is used, give it
an identical, non-blank password on all computers.

(5)
On XP Pro with Simple File Sharing enabled, make sure that the Guest account is
enabled, on each computer. Enable Guest, with Start - Run - "cmd", then type
"net user guest /active:yes" in the command window. Ensure that the password
for Guest is blank, with Start - Run - "control userpasswords2"; select Guest,
click Reset Password, click OK without entering a new password.

(6)
On XP Pro, if you're going to use Guest authentication, check your Local
Security Policy (Control Panel - Administrative Tools) - User Rights Assignment,
on the XP Pro computer, and look at "Deny access to this computer from the
network". Make sure Guest is not in the list. Look at "Access this computer
from the network", and make sure that Everyone is in this list.

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
My email is AT DOT
actual address pchuck sonic net.

Thanks for the reply, Chuck.
To simplfy matters as much as possible, the two computers that I am now
using are the inaccessable desktop (OFFICE) XP Pro SP2 and another desktop
(DESKTOP) also running XP Pro SP2. Checks with Ipconfig and Browstat are
comparable with LAPTOP used for previous data. As mentioned before, all four
computers see and communicate with each other in several configerations,
except OFFICE can not be accessed on the network.

In response to your instructions, I have numbered them and give the results
of the actions below:

(1) Both computers use Windows Firewall and they are disabled.

(2) Both computers normally use Simple File Sharing. Tests were run with
both enabled and both disabled. No access either way.

(3) Set up per directions and verified. No access

(4) I did not perform this since it requires setting up passwords (which I
don't use and perfer not to, and dosent seem to be required. Will do so if
critical.

(5) Set up per directions and verified. No access

(6) Set up, verified, and exercised a number of permutations. No access

Is there any command that resets all (most) registry, et.al. to default
values?
All of my other systems have worked "out of the box", but reinstalling SP2,
and I suspect even XP Pro doesn't reset the problem parameters. I hope
reformating isn't my only option!!

Bayard,

How did you disable Windows Firewall? Was it thru the Security Center applet,
or by disabling the WF service? Its essential to disable WF thru the SC applet,
never by disabling the service. Better still to enable it, and enable the File
and Printer Sharing exception for the LAN.

There is no command that I know of that resets all (most) registry et al to
default values. There are a lot of values, you have to set them yourself, and
know what you're doing.

You're making a lot of changes, rapidly, one at a time, and testing after each
change. You need to make your changes systematically, and for a reason. You've
been studying some of the other cases here, which is good, but you've been
trying to fix your problem by imitating what we've done in those other cases.
This is not good. It's like going to the pharmacy and getting medicine because
your cough sounds like your neighbors, and his doctor told him to treat it so.

With XP Pro, Simple File Sharing disabled, and Classic network access selected,
you can access a computer thru the network using an administrative account, but
you need an identical, non-blank password on both computers. With XP Home, or
with XP Pro with SFS enabled, you'll have to enable the Guest account (see my
previous instructions), but that will not give you administrative access. With
SFS, anything but the Guest account is useless for network access. This
includes browstat, when the master browser is the other computer.

We need to start with the browstat displays. The browser requires anonymous
access, so look at registry key [HKLM\System\CurrentControlSet\Control\Lsa],
value restrictanonymous on Laptop and Office.
<http://www.microsoft.com/windows200...2000/techinfo/reskit/en-us/regentry/46688.asp>
<http://www.jsifaq.com/subf/tip2600/rh2625.htm>
http://support.microsoft.com/?id=246261
http://support.microsoft.com/?id=296403

The above articles refer to Windows 2000. Remember WinXP is NT V5.1, and Win2K
is NT V5.0.

Have you used the Registry Editor before? If not, it's a scary tool, but it's
pretty simple once you get used to it. Here are a couple articles that might
help:
<http://www.microsoft.com/windowsxp/...home/using/productdoc/en/tools_regeditors.asp>
<http://www.annoyances.org/exec/show/registry>

Just remember to backup the key (create a registry patch) for
[HKLM\System\CurrentControlSet\Control\Lsa] before making any changes, if
appropriate.

After you check / reset restrictanonymous, power both Laptop and Office down.
Once both are powered down, power Office back up. Once Office is powered up,
power Laptop up. Then rerun browstat on each, and let's see the results.

Once you make Office be the master browser, disable SFS, select Classic network
access, AND use a non-Guest account with identical non-blank passwords on both
Laptop and Office, the "error = 5" messages should go away. Then we will look
at the rest of your problems. But make one change at a time, please.

Thank you Chuck, you are right!

Since I have always avoided passwords, would you please detail the proper
procedure to eatablish a non-Guest account with identical non-blank passwords.

Thanks again,

Bayard

Bayard,

Control Panel - Administrative Tools - Computer Management. Local Users and
Groups - Users. Right click on one, and select Set Password. Follow
instructions.

Be sure to disable the Browser on the Windows 98 computer!
http://cms.simons-rock.edu/faq_by_subtopic/node138.html
http://www.compudentsystems.com/documentation/win98.html

Chuck,
Works for the desktop with XP Pro, but not laptop with XP Home.
Next step?
Thanks,
Bayard

 

[Chuck]

:

:

The message:
\\Office is not accessible. You might not have permission to use this
network resource. Contact the administrator of the server to find out if yu
have access permissions.

Access is denied.

I have had up to 4 computers (2 XP Pro Desktops, 1 XP Home Laptop, 1
Windows 98 SE Laptop) running both wired and wireless with one or two
routers. All can be made to work OK except for one of the desktops.

I have reduced the network to the XP Pro Desktop (Office) and the XP Home
Laptop (Laptop) wired with a hub. Firewalls are turned off. Operation is by
Administrator, with no passwords.

All computers can see Office, Office can see all computers, but no computers
can access Office - see above message. Office can access all computers.

Ping both ways is OK

Office Ipconfig:
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 192.168.1.10
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1

Laptop Ipconfig:
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 192.168.1.12
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1

Browstat on Office with Office as master browser:

Status for domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
Browsing is active on domain.
Master browser name is: OFFICE
Could not open key in registry, error = 5 Unable to determine build
of browser master: 5
Unable to determine server information for browser master: 5
1 backup servers retrieved from master OFFICE
\\OFFICE
There are 2 servers in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
There are 1 domains in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}


Browstat on Laptop with Office as master browser:

Status for domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
Browsing is active on domain.
Master browser name is: OFFICE
Could not open key in registry, error = 5 Unable to determine build
of browser master: 5
Unable to determine server information for browser master: 5
1 backup servers retrieved from master OFFICE
\\OFFICE
There are 2 servers in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
There are 1 domains in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}


Browstat on Office with Laptop as master browser:

Status for domain MSHOME on transport
\Device\NetBT_Tcpip_{BDF2B313-12D8-476E-9FAF-42C3A99DF92D}
Browsing is active on domain.
Master browser name is: LAPTOP
Could not connect to registry, error = 53 Unable to determine build
of browser master: 53
\\\\LAPTOP . Version:05.01 Flags: 51203 NT POTENTIAL MASTER
1 backup servers retrieved from master LAPTOP
\\LAPTOP
There are 2 servers in domain MSHOME on transport
\Device\NetBT_Tcpip_{BDF2B313-12D8-476E-9FAF-42C3A99DF92D}
Unable to retrieve server list from LAPTOP: 64



Browstat on Laptop with Laptop as master browser:

Status for domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
Browsing is active on domain.
Master browser name is: LAPTOP
Master browser is running build 2600
1 backup servers retrieved from master LAPTOP
\\LAPTOP
There are 2 servers in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
There are 1 domains in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}

I have spent a week trying any combination that I know about, including many
suggestions from this forum to no avail. It must be simple, but won't XP even
let me access the computer?

Thank you for any help you can give me!

Bayard

Bayard,

(1)
What firewalls are turned off?

(2)
On any XP Pro computer, check to see if Simple File Sharing (Control Panel -
Folder Options - View - Advanced settings) is enabled or disabled. With XP Pro,
you need to have SFS properly set on each computer.

(3)
On XP Pro with SFS disabled, check the Local Security Policies (Control Panel -
Administrative Tools). Under Local Policies - Security Options, look at
"Network access: Sharing and security model", and ensure it's set to "Classic -
local users authenticate as themselves".

(4)
On XP Pro with SFS disabled, if you set the above Local Security Policy to
"Guest only", enable the Guest account, using Start - Run - "cmd" - type "net
user guest /active:yes" in the command window. If "Classic", setup and use a
common non-Guest account on all computers. Whichever account is used, give it
an identical, non-blank password on all computers.

(5)
On XP Pro with Simple File Sharing enabled, make sure that the Guest account is
enabled, on each computer. Enable Guest, with Start - Run - "cmd", then type
"net user guest /active:yes" in the command window. Ensure that the password
for Guest is blank, with Start - Run - "control userpasswords2"; select Guest,
click Reset Password, click OK without entering a new password.

(6)
On XP Pro, if you're going to use Guest authentication, check your Local
Security Policy (Control Panel - Administrative Tools) - User Rights Assignment,
on the XP Pro computer, and look at "Deny access to this computer from the
network". Make sure Guest is not in the list. Look at "Access this computer
from the network", and make sure that Everyone is in this list.

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
My email is AT DOT
actual address pchuck sonic net.

Thanks for the reply, Chuck.
To simplfy matters as much as possible, the two computers that I am now
using are the inaccessable desktop (OFFICE) XP Pro SP2 and another desktop
(DESKTOP) also running XP Pro SP2. Checks with Ipconfig and Browstat are
comparable with LAPTOP used for previous data. As mentioned before, all four
computers see and communicate with each other in several configerations,
except OFFICE can not be accessed on the network.

In response to your instructions, I have numbered them and give the results
of the actions below:

(1) Both computers use Windows Firewall and they are disabled.

(2) Both computers normally use Simple File Sharing. Tests were run with
both enabled and both disabled. No access either way.

(3) Set up per directions and verified. No access

(4) I did not perform this since it requires setting up passwords (which I
don't use and perfer not to, and dosent seem to be required. Will do so if
critical.

(5) Set up per directions and verified. No access

(6) Set up, verified, and exercised a number of permutations. No access

Is there any command that resets all (most) registry, et.al. to default
values?
All of my other systems have worked "out of the box", but reinstalling SP2,
and I suspect even XP Pro doesn't reset the problem parameters. I hope
reformating isn't my only option!!

Bayard,

How did you disable Windows Firewall? Was it thru the Security Center applet,
or by disabling the WF service? Its essential to disable WF thru the SC applet,
never by disabling the service. Better still to enable it, and enable the File
and Printer Sharing exception for the LAN.

There is no command that I know of that resets all (most) registry et al to
default values. There are a lot of values, you have to set them yourself, and
know what you're doing.

You're making a lot of changes, rapidly, one at a time, and testing after each
change. You need to make your changes systematically, and for a reason. You've
been studying some of the other cases here, which is good, but you've been
trying to fix your problem by imitating what we've done in those other cases.
This is not good. It's like going to the pharmacy and getting medicine because
your cough sounds like your neighbors, and his doctor told him to treat it so.

With XP Pro, Simple File Sharing disabled, and Classic network access selected,
you can access a computer thru the network using an administrative account, but
you need an identical, non-blank password on both computers. With XP Home, or
with XP Pro with SFS enabled, you'll have to enable the Guest account (see my
previous instructions), but that will not give you administrative access. With
SFS, anything but the Guest account is useless for network access. This
includes browstat, when the master browser is the other computer.

We need to start with the browstat displays. The browser requires anonymous
access, so look at registry key [HKLM\System\CurrentControlSet\Control\Lsa],
value restrictanonymous on Laptop and Office.
<http://www.microsoft.com/windows200...2000/techinfo/reskit/en-us/regentry/46688.asp>
<http://www.jsifaq.com/subf/tip2600/rh2625.htm>
http://support.microsoft.com/?id=246261
http://support.microsoft.com/?id=296403

The above articles refer to Windows 2000. Remember WinXP is NT V5.1, and Win2K
is NT V5.0.

Have you used the Registry Editor before? If not, it's a scary tool, but it's
pretty simple once you get used to it. Here are a couple articles that might
help:
<http://www.microsoft.com/windowsxp/...home/using/productdoc/en/tools_regeditors.asp>
<http://www.annoyances.org/exec/show/registry>

Just remember to backup the key (create a registry patch) for
[HKLM\System\CurrentControlSet\Control\Lsa] before making any changes, if
appropriate.

After you check / reset restrictanonymous, power both Laptop and Office down.
Once both are powered down, power Office back up. Once Office is powered up,
power Laptop up. Then rerun browstat on each, and let's see the results.

Once you make Office be the master browser, disable SFS, select Classic network
access, AND use a non-Guest account with identical non-blank passwords on both
Laptop and Office, the "error = 5" messages should go away. Then we will look
at the rest of your problems. But make one change at a time, please.

--
Cheers,
Chuck

Thank you Chuck, you are right!

Since I have always avoided passwords, would you please detail the proper
procedure to eatablish a non-Guest account with identical non-blank passwords.

Thanks again,

Bayard

Bayard,

Control Panel - Administrative Tools - Computer Management. Local Users and
Groups - Users. Right click on one, and select Set Password. Follow
instructions.

Be sure to disable the Browser on the Windows 98 computer!
http://cms.simons-rock.edu/faq_by_subtopic/node138.html
http://www.compudentsystems.com/documentation/win98.html

Chuck,
Works for the desktop with XP Pro, but not laptop with XP Home.
Next step?
Thanks,
Bayard

Bayard,

With XP Home and Simple File Sharing, you only use the Guest account. Make sure
that the Guest account is enabled, on each computer. Enable Guest, with Start -
Run - "cmd", then type "net user guest /active:yes" in the command window.
Ensure that the password for Guest is blank, with Start - Run - "control
userpasswords2"; select Guest, click Reset Password, click OK without entering a
new password.

Remember Guest won't give you administrative access across the network.

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
My email is AT DOT
actual address pchuck sonic net.

 

[Guest]

:

:

The message:
\\Office is not accessible. You might not have permission to use this
network resource. Contact the administrator of the server to find out if yu
have access permissions.

Access is denied.

I have had up to 4 computers (2 XP Pro Desktops, 1 XP Home Laptop, 1
Windows 98 SE Laptop) running both wired and wireless with one or two
routers. All can be made to work OK except for one of the desktops.

I have reduced the network to the XP Pro Desktop (Office) and the XP Home
Laptop (Laptop) wired with a hub. Firewalls are turned off. Operation is by
Administrator, with no passwords.

All computers can see Office, Office can see all computers, but no computers
can access Office - see above message. Office can access all computers.

Ping both ways is OK

Office Ipconfig:
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 192.168.1.10
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1

Laptop Ipconfig:
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 192.168.1.12
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1

Browstat on Office with Office as master browser:

Status for domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
Browsing is active on domain.
Master browser name is: OFFICE
Could not open key in registry, error = 5 Unable to determine build
of browser master: 5
Unable to determine server information for browser master: 5
1 backup servers retrieved from master OFFICE
\\OFFICE
There are 2 servers in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
There are 1 domains in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}


Browstat on Laptop with Office as master browser:

Status for domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
Browsing is active on domain.
Master browser name is: OFFICE
Could not open key in registry, error = 5 Unable to determine build
of browser master: 5
Unable to determine server information for browser master: 5
1 backup servers retrieved from master OFFICE
\\OFFICE
There are 2 servers in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
There are 1 domains in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}


Browstat on Office with Laptop as master browser:

Status for domain MSHOME on transport
\Device\NetBT_Tcpip_{BDF2B313-12D8-476E-9FAF-42C3A99DF92D}
Browsing is active on domain.
Master browser name is: LAPTOP
Could not connect to registry, error = 53 Unable to determine build
of browser master: 53
\\\\LAPTOP . Version:05.01 Flags: 51203 NT POTENTIAL MASTER
1 backup servers retrieved from master LAPTOP
\\LAPTOP
There are 2 servers in domain MSHOME on transport
\Device\NetBT_Tcpip_{BDF2B313-12D8-476E-9FAF-42C3A99DF92D}
Unable to retrieve server list from LAPTOP: 64



Browstat on Laptop with Laptop as master browser:

Status for domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
Browsing is active on domain.
Master browser name is: LAPTOP
Master browser is running build 2600
1 backup servers retrieved from master LAPTOP
\\LAPTOP
There are 2 servers in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
There are 1 domains in domain MSHOME on transport
\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}

I have spent a week trying any combination that I know about, including many
suggestions from this forum to no avail. It must be simple, but won't XP even
let me access the computer?

Thank you for any help you can give me!

Bayard

Bayard,

(1)
What firewalls are turned off?

(2)
On any XP Pro computer, check to see if Simple File Sharing (Control Panel -
Folder Options - View - Advanced settings) is enabled or disabled. With XP Pro,
you need to have SFS properly set on each computer.

(3)
On XP Pro with SFS disabled, check the Local Security Policies (Control Panel -
Administrative Tools). Under Local Policies - Security Options, look at
"Network access: Sharing and security model", and ensure it's set to "Classic -
local users authenticate as themselves".

(4)
On XP Pro with SFS disabled, if you set the above Local Security Policy to
"Guest only", enable the Guest account, using Start - Run - "cmd" - type "net
user guest /active:yes" in the command window. If "Classic", setup and use a
common non-Guest account on all computers. Whichever account is used, give it
an identical, non-blank password on all computers.

(5)
On XP Pro with Simple File Sharing enabled, make sure that the Guest account is
enabled, on each computer. Enable Guest, with Start - Run - "cmd", then type
"net user guest /active:yes" in the command window. Ensure that the password
for Guest is blank, with Start - Run - "control userpasswords2"; select Guest,
click Reset Password, click OK without entering a new password.

(6)
On XP Pro, if you're going to use Guest authentication, check your Local
Security Policy (Control Panel - Administrative Tools) - User Rights Assignment,
on the XP Pro computer, and look at "Deny access to this computer from the
network". Make sure Guest is not in the list. Look at "Access this computer
from the network", and make sure that Everyone is in this list.

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
My email is AT DOT
actual address pchuck sonic net.

Thanks for the reply, Chuck.
To simplfy matters as much as possible, the two computers that I am now
using are the inaccessable desktop (OFFICE) XP Pro SP2 and another desktop
(DESKTOP) also running XP Pro SP2. Checks with Ipconfig and Browstat are
comparable with LAPTOP used for previous data. As mentioned before, all four
computers see and communicate with each other in several configerations,
except OFFICE can not be accessed on the network.

In response to your instructions, I have numbered them and give the results
of the actions below:

(1) Both computers use Windows Firewall and they are disabled.

(2) Both computers normally use Simple File Sharing. Tests were run with
both enabled and both disabled. No access either way.

(3) Set up per directions and verified. No access

(4) I did not perform this since it requires setting up passwords (which I
don't use and perfer not to, and dosent seem to be required. Will do so if
critical.

(5) Set up per directions and verified. No access

(6) Set up, verified, and exercised a number of permutations. No access

Is there any command that resets all (most) registry, et.al. to default
values?
All of my other systems have worked "out of the box", but reinstalling SP2,
and I suspect even XP Pro doesn't reset the problem parameters. I hope
reformating isn't my only option!!

Bayard,

How did you disable Windows Firewall? Was it thru the Security Center applet,
or by disabling the WF service? Its essential to disable WF thru the SC applet,
never by disabling the service. Better still to enable it, and enable the File
and Printer Sharing exception for the LAN.

There is no command that I know of that resets all (most) registry et al to
default values. There are a lot of values, you have to set them yourself, and
know what you're doing.

You're making a lot of changes, rapidly, one at a time, and testing after each
change. You need to make your changes systematically, and for a reason. You've
been studying some of the other cases here, which is good, but you've been
trying to fix your problem by imitating what we've done in those other cases.
This is not good. It's like going to the pharmacy and getting medicine because
your cough sounds like your neighbors, and his doctor told him to treat it so.

With XP Pro, Simple File Sharing disabled, and Classic network access selected,
you can access a computer thru the network using an administrative account, but
you need an identical, non-blank password on both computers. With XP Home, or
with XP Pro with SFS enabled, you'll have to enable the Guest account (see my
previous instructions), but that will not give you administrative access. With
SFS, anything but the Guest account is useless for network access. This
includes browstat, when the master browser is the other computer.

We need to start with the browstat displays. The browser requires anonymous
access, so look at registry key [HKLM\System\CurrentControlSet\Control\Lsa],
value restrictanonymous on Laptop and Office.
<http://www.microsoft.com/windows200...2000/techinfo/reskit/en-us/regentry/46688.asp>
<http://www.jsifaq.com/subf/tip2600/rh2625.htm>
http://support.microsoft.com/?id=246261
http://support.microsoft.com/?id=296403

The above articles refer to Windows 2000. Remember WinXP is NT V5.1, and Win2K
is NT V5.0.

Have you used the Registry Editor before? If not, it's a scary tool, but it's
pretty simple once you get used to it. Here are a couple articles that might
help:
<http://www.microsoft.com/windowsxp/...home/using/productdoc/en/tools_regeditors.asp>
<http://www.annoyances.org/exec/show/registry>

Just remember to backup the key (create a registry patch) for
[HKLM\System\CurrentControlSet\Control\Lsa] before making any changes, if
appropriate.

After you check / reset restrictanonymous, power both Laptop and Office down.
Once both are powered down, power Office back up. Once Office is powered up,
power Laptop up. Then rerun browstat on each, and let's see the results.

Once you make Office be the master browser, disable SFS, select Classic network
access, AND use a non-Guest account with identical non-blank passwords on both
Laptop and Office, the "error = 5" messages should go away. Then we will look
at the rest of your problems. But make one change at a time, please.

--
Cheers,
Chuck

Thank you Chuck, you are right!

Since I have always avoided passwords, would you please detail the proper
procedure to eatablish a non-Guest account with identical non-blank passwords.

Thanks again,

Bayard

Bayard,

Control Panel - Administrative Tools - Computer Management. Local Users and
Groups - Users. Right click on one, and select Set Password. Follow
instructions.

Be sure to disable the Browser on the Windows 98 computer!
http://cms.simons-rock.edu/faq_by_subtopic/node138.html
http://www.compudentsystems.com/documentation/win98.html

Chuck,
Works for the desktop with XP Pro, but not laptop with XP Home.
Next step?
Thanks,
Bayard

Bayard,

With XP Home and Simple File Sharing, you only use the Guest account. Make sure
that the Guest account is enabled, on each computer. Enable Guest, with Start -
Run - "cmd", then type "net user guest /active:yes" in the command window.
Ensure that the password for Guest is blank, with Start - Run - "control
userpasswords2"; select Guest, click Reset Password, click OK without entering a
new password.

Remember Guest won't give you administrative access across the network.

Chuck,
All is now working smoothly!
Many thanks for your patience and consideration!!
Bayard

 

[Chuck]

Chuck,
All is now working smoothly!
Many thanks for your patience and consideration!!
Bayard

Bayard,

That's great news! Thanks for the feedback!

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
My email is AT DOT
actual address pchuck sonic net.