Just a few networking questions.

[Guest]

I'm trying to become familiar with Windows XP Pro networking permissions and security and I think I have a pretty good understanding except for a few things I was hoping someone could shed some light on.

The share folder is on my main pc, call it NAME, and I also have a laptop (NAME2), a webserver(NAME-SERVER), and another PC (FAMILY).

The share folder has share permissions for "Everyone" and read access. The NTFS file permissions are at their default.

I am able to access the main PC (NAME) from the laptop without entering any login or password information because both the laptop and main pc are logged in locally with the same username and password. However, when trying to connect to the main pc from the server, it prompts me for a login and password, even though I'm logged in as an Administrator with a password and the share pc has Administrators as part of the NTFS permissions and is included in the everyone ACL permissions. Also "Limit local account use of blank passwords to console login only" is set to disabled because I have not created a password for the administrator account on the share pc. The only way I can log into the share pc from the server is by using the same username and password that I use to log onto the share pc locally(NAME) and the laptop locally. Also trying to loginto the share with Guest and no password denies me access for some reason.


Aditionally, the FAMILY pc is not even presented with a login/password option, I just get a denied access message. The FAMILY pc does not have a password, but that should not matter with the "Limit local account use..." option I have enabled.


Any ideas would be much appreciated, Thanks.

 

[Doug Sherman [MVP]]

If the Administrator account on Server has a password, then the
Administrator account on NAME must have the same password.

Whatever user account/password is used to logon to FAMILY must have a
duplicate user account/password on NAME.

If you want to become familiar with security, use passwords.

Doug Sherman
MCSE Win2k/NT4.0, MCSA, MCP+I, MVP

I'm trying to become familiar with Windows XP Pro networking permissions

and security and I think I have a pretty good understanding except for a few
things I was hoping someone could shed some light on.

The share folder is on my main pc, call it NAME, and I also have a laptop

(NAME2), a webserver(NAME-SERVER), and another PC (FAMILY).

The share folder has share permissions for "Everyone" and read access.

The NTFS file permissions are at their default.

I am able to access the main PC (NAME) from the laptop without entering

any login or password information because both the laptop and main pc are
logged in locally with the same username and password. However, when trying
to connect to the main pc from the server, it prompts me for a login and
password, even though I'm logged in as an Administrator with a password and
the share pc has Administrators as part of the NTFS permissions and is
included in the everyone ACL permissions. Also "Limit local account use of
blank passwords to console login only" is set to disabled because I have not
created a password for the administrator account on the share pc. The only
way I can log into the share pc from the server is by using the same
username and password that I use to log onto the share pc locally(NAME) and
the laptop locally. Also trying to loginto the share with Guest and no
password denies me access for some reason.

Aditionally, the FAMILY pc is not even presented with a login/password

option, I just get a denied access message. The FAMILY pc does not have a
password, but that should not matter with the "Limit local account use..."
option I have enabled.

 

[Guest]

Yeah, i figured out that the administrator password had to be the same, because it worked when i logged in without a password, since the administrator account on my computer does not have a password (probably time to disable that account).

What doesn't make sense to me is why I don't even get the login option from the FAMILY computer. It just gives me access denied right away without even letting me attempt to login. Even though the FAMILY pc has no password I should still be given an option to login with an account that exists on the share PC, especially since "Limit local account use of blank passwords to console login only" is set to disabled. What does happen though when I look at the session info on the share pc, it says that FAMILY is connected with 0 folders open and under "guest" it says yes. I'm not sure what that means since i definitely wasn't allowed access. This happens to any computer that gets denied access to the share folder, kind of odd.
The only time I WAS able to access the share pc from the FAMILY pc is when I gave Guest NTFS permissions on the share folder so it looks like the FAMILY pc is trying to authenticate as Guest no matter what. Is there a way to turn this off? Simple file sharing is not enabled on the FAMILY pc either. I just tried setting a password on the FAMILY pc and it didn't make a difference, it still tries to authenticate as Guest. It is running Windows XP pro not home.

The last thing i'd like to know is how to deny access to users I create for network access, locally. I don't want them to be able to login into my computer from the console, only if they're accessing the share folder. Is this possible?

Thanks.

 

[Doug Sherman [MVP]]

Not sure about the trouble with FAMILY, but this and you second question may
be related. On the server computer (ie the one hosting shared resources):

Go to Administrative Tools/Local Security Policy. Expand Local Policies and
click on User Rights Assignment. Double click on Access this computer from
the network. You can add and remove users and groups from this right.
These are users and groups which exist on the server computer. In order to
access the server computer over the network, you must present logon
credentials which match those of a user or group member who has this right.

Doug Sherman
MCSE Win2k/NT4.0, MCSA, MCP+I, MVP

Yeah, i figured out that the administrator password had to be the same,

because it worked when i logged in without a password, since the
administrator account on my computer does not have a password (probably time
to disable that account).

What doesn't make sense to me is why I don't even get the login option

from the FAMILY computer. It just gives me access denied right away without
even letting me attempt to login. Even though the FAMILY pc has no password
I should still be given an option to login with an account that exists on
the share PC, especially since "Limit local account use of blank passwords
to console login only" is set to disabled. What does happen though when I
look at the session info on the share pc, it says that FAMILY is connected
with 0 folders open and under "guest" it says yes. I'm not sure what that
means since i definitely wasn't allowed access. This happens to any
computer that gets denied access to the share folder, kind of odd.

The only time I WAS able to access the share pc from the FAMILY pc is when

I gave Guest NTFS permissions on the share folder so it looks like the
FAMILY pc is trying to authenticate as Guest no matter what. Is there a way
to turn this off? Simple file sharing is not enabled on the FAMILY pc
either. I just tried setting a password on the FAMILY pc and it didn't make
a difference, it still tries to authenticate as Guest. It is running
Windows XP pro not home.

The last thing i'd like to know is how to deny access to users I create

for network access, locally. I don't want them to be able to login into my
computer from the console, only if they're accessing the share folder. Is
this possible?