Accessing XP from 2000 server

[Guest]

I have installed a new XP Pro PC on our domain. We run Windows 2000 server.
The XP has a shared printer but we can not access the XP machine from the
server or other XP machines. We get the error "Logon Failure: the user has
not been granted the requested logon type at this computer." I have added the
user account on the XP machine both as a local logon and as a domain logon.
Thanks in advance.

 

[Steven L Umbach]

That means that the user trying to access does not have the user right for
access this computer from the network. On the XP Pro computer open Local
Security Policy and go to local policies/user rights and add everyone or the
groups you want to have access to the user right for access this computer
from the network. Any entries in deny access this computer from the network
will override allow entries if the user is included via explicit or group
membership in both. If you can not modify those user rights via Local
Security Policy you will have to do so in the domain/OU level Group Policy
that is enforcing that setting which can be found by running rsop.msc on the
XP Pro computer and finding that user right and applying GPO or moving the
computer into an OU that does not enforce that user right. --- Steve

 

[Guest]

Also you are not able to connet to win XP with account which has blank
password... so if you have user account on your XP machine without passwor
you are not able to connect there over network even if the account you are
using is with Administrator or any other rights

 

[Guest]

Thanks Steve,

You got me pointed in the right direction. On our network, security policies
are downloaded by the XP Pro SP2 Clients from the 2000 Server. Once I gave
rights to "access this computer on the network" to "Authenticated Users" on
the server, then rebooted the XP's so they would get the new security
policies, everything worked out fine.

Thanks again, you have saved the last few hairs I had left.

Buck711

 

[Steven L Umbach]

Cool! Glad you got it resolved and thanks for reporting back. --- Steve