File sharing problems

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I have been setting up a network for a small office. I have 5 client
computers that need to share files.

I have set up:
1) Simple file sharing on all the machines
2) Put local users to match the computers on all the other machines
3) Put all the users in the Power Users group
4) Created a new share in the Microsoft Management Console (MMC) which
allows Power Users

Now two computers recognize the file with no problem, they login with the
password that I have set up for them. The others get an error message which
states that the user doesn't have access privileges to view them. The only
way that they are able to see the folder is if I allow access to the super
group "everyone". Unfortunately, this completely defeats the purpose of file
security. The only thing that I notice is that when I look into the Shares
folder in the MMC it registers different computers as guests. There is a
column with a heading of Guest; anyone who has a "Yes" by their account has
this problem. The two computers that register "No" work fine.



I did not install the OS onto the machines. So I don't know if that would
affect anything.

I don't have access to the Domain or Active Directory Services due to the
building that we are located in has an IT Department that manages the Domain.

The guest user is disabled.

The things that I have tried are:
1) Delete and re-establish the Workgroup
2) Delete and re-establish the Users
3) Delete and re-establish the Shares
4) Checked the Patch Console, Hub, and Switch
5) Tested physical connectivity
6) Ran some commands in the Command Prompt on local machines trying to
establish connections and making sure that the settings were correct. I
couldn't see anything that specifically said anything about GUEST.

The commands that I ran were as follows:
PING – Returned fine
NETSTAT – Returned values were fine
NBTSTAT – All unique types were registered
NSLOOKUP – Could see others fine
TRACERT – One hop no drops
IPCONFIG – Registered values were fine
NET – Checked all the sub actions in NET, everything looks fine
Click to expand...

I set up all the computers on the network and the first one worked
perfectly. I followed the same steps in the other machines but they only
communicate one way. That is that my computer can access their machines but
they don't have access to the folders on my machine which I am trying to
share.

I need help please...............
 
I have been setting up a network for a small office. I have 5 client
computers that need to share files.

I have set up:
1) Simple file sharing on all the machines
2) Put local users to match the computers on all the other machines
3) Put all the users in the Power Users group
4) Created a new share in the Microsoft Management Console (MMC) which
allows Power Users

Now two computers recognize the file with no problem, they login with the
password that I have set up for them. The others get an error message which
states that the user doesn't have access privileges to view them. The only
way that they are able to see the folder is if I allow access to the super
group "everyone". Unfortunately, this completely defeats the purpose of file
security. The only thing that I notice is that when I look into the Shares
folder in the MMC it registers different computers as guests. There is a
column with a heading of Guest; anyone who has a "Yes" by their account has
this problem. The two computers that register "No" work fine.



I did not install the OS onto the machines. So I don't know if that would
affect anything.

I don't have access to the Domain or Active Directory Services due to the
building that we are located in has an IT Department that manages the Domain.

The guest user is disabled.

The things that I have tried are:
1) Delete and re-establish the Workgroup
2) Delete and re-establish the Users
3) Delete and re-establish the Shares
4) Checked the Patch Console, Hub, and Switch
5) Tested physical connectivity
6) Ran some commands in the Command Prompt on local machines trying to
establish connections and making sure that the settings were correct. I
couldn't see anything that specifically said anything about GUEST.

The commands that I ran were as follows:

I set up all the computers on the network and the first one worked
perfectly. I followed the same steps in the other machines but they only
communicate one way. That is that my computer can access their machines but
they don't have access to the folders on my machine which I am trying to
share.

I need help please...............
Click to expand...

Aaron,

Simple File Sharing uses the Guest account for file sharing. Period.

On XP Home, and on XP Pro with Simple File Sharing enabled, make sure that the
Guest account is enabled, on each computer. Enable Guest, with Start - Run -
"cmd", then type "net user guest /active:yes" in the command window. Ensure
that the password for Guest is blank, with Start - Run - "control
userpasswords2"; select Guest, click Reset Password, click OK without entering a
new password.

And on XP Pro, if you're going to use Guest authentication (either SFS, or AFS
with Guest authentication), check your Local Security Policy (Control Panel -
Administrative Tools) - User Rights Assignment, on the XP Pro computer, and look
at "Deny access to this computer from the network". Make sure Guest is not in
the list. Look at "Access this computer from the network", and make sure that
Everyone is in this list.

When you use SFS, you are defeating file security. Every file available to
anybody will be available to everybody. Simple File Sharing is just that, and
no more.

Please make these changes, then see what problems you still have. We'll go from
there.

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
My email is AT DOT
actual address pchuck sonic net.
 
I have been setting up a network for a small office. I have 5 client
computers that need to share files.

I have set up:
1) Simple file sharing on all the machines
2) Put local users to match the computers on all the other machines
3) Put all the users in the Power Users group
4) Created a new share in the Microsoft Management Console (MMC) which
allows Power Users

Now two computers recognize the file with no problem, they login with the
password that I have set up for them. The others get an error message which
states that the user doesn't have access privileges to view them. The only
way that they are able to see the folder is if I allow access to the super
group "everyone". Unfortunately, this completely defeats the purpose of file
security. The only thing that I notice is that when I look into the Shares
folder in the MMC it registers different computers as guests. There is a
column with a heading of Guest; anyone who has a "Yes" by their account has
this problem. The two computers that register "No" work fine.



I did not install the OS onto the machines. So I don't know if that would
affect anything.

I don't have access to the Domain or Active Directory Services due to the
building that we are located in has an IT Department that manages the Domain.

The guest user is disabled.

The things that I have tried are:
1) Delete and re-establish the Workgroup
2) Delete and re-establish the Users
3) Delete and re-establish the Shares
4) Checked the Patch Console, Hub, and Switch
5) Tested physical connectivity
6) Ran some commands in the Command Prompt on local machines trying to
establish connections and making sure that the settings were correct. I
couldn't see anything that specifically said anything about GUEST.

The commands that I ran were as follows:

I set up all the computers on the network and the first one worked
perfectly. I followed the same steps in the other machines but they only
communicate one way. That is that my computer can access their machines but
they don't have access to the folders on my machine which I am trying to
share.

I need help please...............
Click to expand...

Aaron,

Please see my reply to your other post.

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
My email is AT DOT
actual address pchuck sonic net.
 
I have an almost identical problem with my home network (consisting of my
laptop running XP pro and a desktop running XP home) and have tried following
your suggestions to the letter... well almost!

I think the problem is that in the 'User Rights Assignment' the 'Access this
computer from the network' doesn't list the desktop computer. The problem I
have is that when I try to change the setting, by including the desktop
computer, I get a 'Failed to save Local Policy Database' error. This doesn't
occur if I include the laptop computer via it's network address, but the
Security Setting value appears corrupted when I shut down the Local Security
Policy manager and then reopen it.

Does anyone know if there is anyway to fix this problem without having to
reinstall all of Windows? I'm trying to avoid having to do this, as it's a
rather drastic and time consuming measure to have to take!

Apologies for slightly high-jacking the thread...

James
 
On Mon, 11 Apr 2005 13:40:02 -0700, James Hoskisson <James
I have an almost identical problem with my home network (consisting of my
laptop running XP pro and a desktop running XP home) and have tried following
your suggestions to the letter... well almost!

I think the problem is that in the 'User Rights Assignment' the 'Access this
computer from the network' doesn't list the desktop computer. The problem I
have is that when I try to change the setting, by including the desktop
computer, I get a 'Failed to save Local Policy Database' error. This doesn't
occur if I include the laptop computer via it's network address, but the
Security Setting value appears corrupted when I shut down the Local Security
Policy manager and then reopen it.

Does anyone know if there is anyway to fix this problem without having to
reinstall all of Windows? I'm trying to avoid having to do this, as it's a
rather drastic and time consuming measure to have to take!

Apologies for slightly high-jacking the thread...

James
Click to expand...

James,

It would be in your best interest if you didn't hijack the thread, even
slightly. Just start another, with a unique and descriptive subject.

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
My email is AT DOT
actual address pchuck sonic net.
 
Chuck said:
James,

It would be in your best interest if you didn't hijack the thread, even
slightly. Just start another, with a unique and descriptive subject.
Click to expand...

Fair enough - point taken. Reading through the other threads I would say
that 'unique and descriptive' is something that is generally lacking though!
;-)

James
 
Back
Top