"Logon Error" Networking 2 XP Computers

[J.R.]

Hello all,

My situation is as follows. I have two machines running Windows XP
Professional Service Pack 2. I am running both through a router which in
turn connects to the Internet via a static IP (I must use this configuration
in order to have two computers connected to the internet at once in college
halls). I have set my router to assign 192.168.1.2 to one computer, and
192.168.1.3 to the other computer, using their MAC addresses. The router
itself has address 192.168.1.1.

I have run the Network Setup wizard on both computers. One is called
JOHN-DESKTOP and the other is called JOHN-LAPTOP. When I used the wizard,
both were connected to the router and I used the name HALLS for my network.

On my laptop machine, when I click VIEW WORKGROUP COMPUTERS, I can see both
my desktop and laptop. What's more, I can browse my desktop's shared files.

On my desktop machine, when I click VIEW WORKGROUP COMPUTERS, I can see both
my desktop and laptop. However, when I double click my laptop icon, I get
the following error:

"\\John-laptop is not accessible. You might not have permission to use this
network resource. Contact the administrator of this server to find out if
you have access permissions. Logon failure: the user has not been granted
the requested logon type at this computer."

I have checked Local Area Connection properties for both just to make sure
everything is identical and it is so, so I do not know why I can share files
one way but not the other. Any advice is appreciated.

I have also tried JSI Tip 5336: Your Windows XP computer cannot browse
computers in the workgroup or access shared folders?:
http://www.jsiinc.com/SUBK/tip5300/rh5336.htm

but it does not work. Any advice is appreciated. In fact, after trying the
JSI Tip 5336, I could not access files both ways. :-(

Thanks in advance,
John
Replace Spamtrap with my name to e-mail me

 

[Chuck]

Hello all,

My situation is as follows. I have two machines running Windows XP
Professional Service Pack 2. I am running both through a router which in
turn connects to the Internet via a static IP (I must use this configuration
in order to have two computers connected to the internet at once in college
halls). I have set my router to assign 192.168.1.2 to one computer, and
192.168.1.3 to the other computer, using their MAC addresses. The router
itself has address 192.168.1.1.

I have run the Network Setup wizard on both computers. One is called
JOHN-DESKTOP and the other is called JOHN-LAPTOP. When I used the wizard,
both were connected to the router and I used the name HALLS for my network.

On my laptop machine, when I click VIEW WORKGROUP COMPUTERS, I can see both
my desktop and laptop. What's more, I can browse my desktop's shared files.

On my desktop machine, when I click VIEW WORKGROUP COMPUTERS, I can see both
my desktop and laptop. However, when I double click my laptop icon, I get
the following error:

"\\John-laptop is not accessible. You might not have permission to use this
network resource. Contact the administrator of this server to find out if
you have access permissions. Logon failure: the user has not been granted
the requested logon type at this computer."

I have checked Local Area Connection properties for both just to make sure
everything is identical and it is so, so I do not know why I can share files
one way but not the other. Any advice is appreciated.

I have also tried JSI Tip 5336: Your Windows XP computer cannot browse
computers in the workgroup or access shared folders?:
http://www.jsiinc.com/SUBK/tip5300/rh5336.htm

but it does not work. Any advice is appreciated. In fact, after trying the
JSI Tip 5336, I could not access files both ways. :-(

Thanks in advance,
John
Replace Spamtrap with my name to e-mail me

John,

Start by making sure the browser service is running on one computer. Control
Panel - Administrative Tools - Services. Verify that the Computer Browser, and
the TCP/IP NetBIOS Helper, services both show with Status = Started. Disable
the browser on other computer.

After checking / disabling / enabling as above, power all computers off to reset
the browser settings on each. Then power both computers on again.

The Microsoft Browstat program will show us what browsers (I'm not talking about
Internet Explorer here) you have in your domain / workgroup, at any time.
http://support.microsoft.com/?id=188305

You can download Browstat from either:
<http://www.dynawell.com/reskit/microsoft/win2000/browstat.zip>
<http://rescomp.stanford.edu/staff/manual/rcc/tools/browstat.zip>

Browstat is very small (40K), and needs no install. Just unzip the downloaded
file, copy browstat.exe to any folder in the Path, and run it from a command
window, by "browstat status". Make sure all computers give the same result.

For more information about the browser subsystem (very intricate), see:
http://support.microsoft.com/?id=188001
http://support.microsoft.com/?id=188305
<http://www.microsoft.com/technet/prodtechnol/winntas/deploy/prodspecs/ntbrowse.mspx>

Next, look at registry key [HKLM\System\CurrentControlSet\Control\Lsa], value
restrictanonymous.
<http://www.microsoft.com/windows200...2000/techinfo/reskit/en-us/regentry/46688.asp>
<http://www.jsifaq.com/subf/tip2600/rh2625.htm>
http://support.microsoft.com/?id=246261
http://support.microsoft.com/?id=296403

The above articles refer to Windows 2000. Remember WinXP is NT V5.1, and Win2K
is NT V5.0.

Have you used the Registry Editor before? If not, it's a scary tool, but it's
pretty simple once you get used to it. Here are a couple articles that might
help:
<http://www.microsoft.com/windowsxp/...home/using/productdoc/en/tools_regeditors.asp>
<http://www.annoyances.org/exec/show/registry>

Just remember to backup the key (create a registry patch) for
[HKLM\System\CurrentControlSet\Control\Lsa] before making any changes, if
appropriate.

From the Annoyances article:
You can create a Registry patch by opening the Registry Editor, selecting a
branch, and choosing Export from the File menu. Then, specify a filename, and
press OK. You can then view the Registry patch file by opening it in Notepad
(right-click on it and select Edit). Again, just double-click on a Registry
patch file (or use Import in the Registry Editor's File menu) to apply it to the
registry.

Finally, check your file sharing setup.

On any XP Pro computer, check to see if Simple File Sharing (Control Panel -
Folder Options - View - Advanced settings) is enabled or disabled. With XP Pro,
you need to have SFS consistently set on each computer.

On XP Pro with SFS disabled, check the Local Security Policies (Control Panel -
Administrative Tools). Under Local Policies - Security Options, look at
"Network access: Sharing and security model", and ensure it's set to "Classic -
local users authenticate as themselves".

On XP Pro with SFS disabled, if you set the above Local Security Policy to
"Guest only", enable the Guest account, using Start - Run - "cmd" - type "net
user guest /active:yes" in the command window. If "Classic", setup and use a
common non-Guest account on all computers. Whichever account is used, give it
an identical, non-blank password on all computers.

On XP Pro, if you're going to use Guest authentication, check your Local
Security Policy (Control Panel - Administrative Tools) - User Rights Assignment,
on the XP Pro computer, and look at "Deny access to this computer from the
network". Make sure Guest is not in the list. Look at "Access this computer
from the network", and make sure that Everyone is in this list.

Do any of the computers have a software firewall (ICF / WF, or third party)? If
so, you need to configure them for file sharing. Firewall configurations are a
very common cause of (network) browser, and file sharing, problems.

 

[J.R.]

John,

Start by making sure the browser service is running on one computer.
Control
Panel - Administrative Tools - Services. Verify that the Computer
Browser, and
the TCP/IP NetBIOS Helper, services both show with Status = Started.
Disable
the browser on other computer.

After checking / disabling / enabling as above, power all computers off to
reset
the browser settings on each. Then power both computers on again.

The Microsoft Browstat program will show us what browsers (I'm not talking
about
Internet Explorer here) you have in your domain / workgroup, at any time.
http://support.microsoft.com/?id=188305

You can download Browstat from either:
<http://www.dynawell.com/reskit/microsoft/win2000/browstat.zip>
<http://rescomp.stanford.edu/staff/manual/rcc/tools/browstat.zip>

Browstat is very small (40K), and needs no install. Just unzip the
downloaded
file, copy browstat.exe to any folder in the Path, and run it from a
command
window, by "browstat status". Make sure all computers give the same
result.

For more information about the browser subsystem (very intricate), see:
http://support.microsoft.com/?id=188001
http://support.microsoft.com/?id=188305
<http://www.microsoft.com/technet/prodtechnol/winntas/deploy/prodspecs/ntbrowse.mspx>

Next, look at registry key [HKLM\System\CurrentControlSet\Control\Lsa],
value
restrictanonymous.
<http://www.microsoft.com/windows200...2000/techinfo/reskit/en-us/regentry/46688.asp>
<http://www.jsifaq.com/subf/tip2600/rh2625.htm>
http://support.microsoft.com/?id=246261
http://support.microsoft.com/?id=296403

The above articles refer to Windows 2000. Remember WinXP is NT V5.1, and
Win2K
is NT V5.0.

Have you used the Registry Editor before? If not, it's a scary tool, but
it's
pretty simple once you get used to it. Here are a couple articles that
might
help:
<http://www.microsoft.com/windowsxp/...home/using/productdoc/en/tools_regeditors.asp>
<http://www.annoyances.org/exec/show/registry>

Just remember to backup the key (create a registry patch) for
[HKLM\System\CurrentControlSet\Control\Lsa] before making any changes, if
appropriate.

From the Annoyances article:
You can create a Registry patch by opening the Registry Editor, selecting
a
branch, and choosing Export from the File menu. Then, specify a filename,
and
press OK. You can then view the Registry patch file by opening it in
Notepad
(right-click on it and select Edit). Again, just double-click on a
Registry
patch file (or use Import in the Registry Editor's File menu) to apply it
to the
registry.

Finally, check your file sharing setup.

On any XP Pro computer, check to see if Simple File Sharing (Control
Panel -
Folder Options - View - Advanced settings) is enabled or disabled. With
XP Pro,
you need to have SFS consistently set on each computer.

On XP Pro with SFS disabled, check the Local Security Policies (Control
Panel -
Administrative Tools). Under Local Policies - Security Options, look at
"Network access: Sharing and security model", and ensure it's set to
"Classic -
local users authenticate as themselves".

On XP Pro with SFS disabled, if you set the above Local Security Policy to
"Guest only", enable the Guest account, using Start - Run - "cmd" - type
"net
user guest /active:yes" in the command window. If "Classic", setup and
use a
common non-Guest account on all computers. Whichever account is used,
give it
an identical, non-blank password on all computers.

On XP Pro, if you're going to use Guest authentication, check your Local
Security Policy (Control Panel - Administrative Tools) - User Rights
Assignment,
on the XP Pro computer, and look at "Deny access to this computer from the
network". Make sure Guest is not in the list. Look at "Access this
computer
from the network", and make sure that Everyone is in this list.

Do any of the computers have a software firewall (ICF / WF, or third
party)? If
so, you need to configure them for file sharing. Firewall configurations
are a
very common cause of (network) browser, and file sharing, problems.

Chuck,

I am working through your set of solutions at present and am typing my
thoughts as I go along...

I've figured out what "the Path" is for Browstat but the same isn't showing
on both command windows. I have now disabled Computer Browsing on my laptop
while Starting it on my desktop, and TCP/IP NetBIOS Helper is enabled on
both. The messages are identical except for 2 things:

1. When I run it on my laptop I get: Could not open key in registry, error =
5, Unable to determine build of browser master: 5. However, the master
browser name is the same on both.

2. Also, it says there are 2 servers in domain HALLS on both my machines,
but only 1 domain...and the domain ID (code?) is different on the two
machines.

I have taken a look at the restrictanonymous value on both machines. On my
desktop it was set to 0 and on my laptop it was set to 1. I have now set my
laptop to 0 and will restart, so I'll reply more to this message as I
further progress...

 

[J.R.]

Chuck,

You have "On XP Pro with SFS disabled" twice...I'm assuming one is a typo
for enabled but I took the initiative and this is what I've done:

I've switched SFS to ENABLED on both machines. I've made sure my Sharing and
Security Model is Classic on both machines, and I'm using an identical user
name with an identical password on both machines...I think I have my bases
covered.

I've also made sure EVERYONE is included in both computer's Local Security
Policy's User Rights Assignments.

Let's restart both now and see if it works

John

 

[J.R.]

Chuck,

One or some combination of the things you asked me to do has solved the
problem and file sharing is now perfectly fine both ways. I understand a
little more (but admittedly not a lot more, the stuff really was complex,
I'm just happy I could follow instructions!) about solving network problems
and maybe can pass the knowledge on to a few more people in university halls
;-) Thanks again for your time and effort and help!

Regards,
John

 

[Chuck]

John,

Start by making sure the browser service is running on one computer.
Control
Panel - Administrative Tools - Services. Verify that the Computer
Browser, and
the TCP/IP NetBIOS Helper, services both show with Status = Started.
Disable
the browser on other computer.

After checking / disabling / enabling as above, power all computers off to
reset
the browser settings on each. Then power both computers on again.

The Microsoft Browstat program will show us what browsers (I'm not talking
about
Internet Explorer here) you have in your domain / workgroup, at any time.
http://support.microsoft.com/?id=188305

You can download Browstat from either:
<http://www.dynawell.com/reskit/microsoft/win2000/browstat.zip>
<http://rescomp.stanford.edu/staff/manual/rcc/tools/browstat.zip>

Browstat is very small (40K), and needs no install. Just unzip the
downloaded
file, copy browstat.exe to any folder in the Path, and run it from a
command
window, by "browstat status". Make sure all computers give the same
result.

For more information about the browser subsystem (very intricate), see:
http://support.microsoft.com/?id=188001
http://support.microsoft.com/?id=188305
<http://www.microsoft.com/technet/prodtechnol/winntas/deploy/prodspecs/ntbrowse.mspx>

Next, look at registry key [HKLM\System\CurrentControlSet\Control\Lsa],
value
restrictanonymous.
<http://www.microsoft.com/windows200...2000/techinfo/reskit/en-us/regentry/46688.asp>
<http://www.jsifaq.com/subf/tip2600/rh2625.htm>
http://support.microsoft.com/?id=246261
http://support.microsoft.com/?id=296403

The above articles refer to Windows 2000. Remember WinXP is NT V5.1, and
Win2K
is NT V5.0.

Have you used the Registry Editor before? If not, it's a scary tool, but
it's
pretty simple once you get used to it. Here are a couple articles that
might
help:
<http://www.microsoft.com/windowsxp/...home/using/productdoc/en/tools_regeditors.asp>
<http://www.annoyances.org/exec/show/registry>

Just remember to backup the key (create a registry patch) for
[HKLM\System\CurrentControlSet\Control\Lsa] before making any changes, if
appropriate.

From the Annoyances article:
You can create a Registry patch by opening the Registry Editor, selecting
a
branch, and choosing Export from the File menu. Then, specify a filename,
and
press OK. You can then view the Registry patch file by opening it in
Notepad
(right-click on it and select Edit). Again, just double-click on a
Registry
patch file (or use Import in the Registry Editor's File menu) to apply it
to the
registry.

Finally, check your file sharing setup.

On any XP Pro computer, check to see if Simple File Sharing (Control
Panel -
Folder Options - View - Advanced settings) is enabled or disabled. With
XP Pro,
you need to have SFS consistently set on each computer.

On XP Pro with SFS disabled, check the Local Security Policies (Control
Panel -
Administrative Tools). Under Local Policies - Security Options, look at
"Network access: Sharing and security model", and ensure it's set to
"Classic -
local users authenticate as themselves".

On XP Pro with SFS disabled, if you set the above Local Security Policy to
"Guest only", enable the Guest account, using Start - Run - "cmd" - type
"net
user guest /active:yes" in the command window. If "Classic", setup and
use a
common non-Guest account on all computers. Whichever account is used,
give it
an identical, non-blank password on all computers.

On XP Pro, if you're going to use Guest authentication, check your Local
Security Policy (Control Panel - Administrative Tools) - User Rights
Assignment,
on the XP Pro computer, and look at "Deny access to this computer from the
network". Make sure Guest is not in the list. Look at "Access this
computer
from the network", and make sure that Everyone is in this list.

Do any of the computers have a software firewall (ICF / WF, or third
party)? If
so, you need to configure them for file sharing. Firewall configurations
are a
very common cause of (network) browser, and file sharing, problems.

Chuck,

I am working through your set of solutions at present and am typing my
thoughts as I go along...

I've figured out what "the Path" is for Browstat but the same isn't showing
on both command windows. I have now disabled Computer Browsing on my laptop
while Starting it on my desktop, and TCP/IP NetBIOS Helper is enabled on
both. The messages are identical except for 2 things:

1. When I run it on my laptop I get: Could not open key in registry, error =
5, Unable to determine build of browser master: 5. However, the master
browser name is the same on both.

2. Also, it says there are 2 servers in domain HALLS on both my machines,
but only 1 domain...and the domain ID (code?) is different on the two
machines.

I have taken a look at the restrictanonymous value on both machines. On my
desktop it was set to 0 and on my laptop it was set to 1. I have now set my
laptop to 0 and will restart, so I'll reply more to this message as I
further progress...

John,

The error 5 is "access denied". You have to have administrative access to open
the registry (determine build) across the network.

To get administrative access, you have to DISABLE Simple File Sharing, for both
computers. And then check restrictanonymous for each.

Apologies for the complexity of instructions previously posted, its like trying
to describe options packs on an American built auto. ;-)

Are both computers in the same workgroup? The browser sees domain and workgroup
the same.

 

[Chuck]

Chuck,

You have "On XP Pro with SFS disabled" twice...I'm assuming one is a typo
for enabled but I took the initiative and this is what I've done:

I've switched SFS to ENABLED on both machines. I've made sure my Sharing and
Security Model is Classic on both machines, and I'm using an identical user
name with an identical password on both machines...I think I have my bases
covered.

I've also made sure EVERYONE is included in both computer's Local Security
Policy's User Rights Assignments.

Let's restart both now and see if it works

John

John,

If you're going to use non-Guest access (which you need to run browstat against
the master browser), you have to use Classic file sharing (SSM), and you have to
DISABLE SFS (enable Advanced File Sharing ala Windows 2K).

More about file sharing, between all different versions of Windows:
<http://www.microsoft.com/downloads/...db-aef8-4bef-925e-7ac9be791028&DisplayLang=en>

 

[Chuck]

Chuck,

One or some combination of the things you asked me to do has solved the
problem and file sharing is now perfectly fine both ways. I understand a
little more (but admittedly not a lot more, the stuff really was complex,
I'm just happy I could follow instructions!) about solving network problems
and maybe can pass the knowledge on to a few more people in university halls
;-) Thanks again for your time and effort and help!

Regards,
John

John,

Thant's great news! Thanks for the feedback!

Pass it on, that's the reason for this forum.