network almost working....

[Guest]

I have looked through but cant find query that matches mine exactly.
3 pcs, D-link router/modem, Main pc wired, others wireless. All pc's running
XP Pro SP2
1.I can see all others on each machine.
2. Each machine accesses internet ok.
3.Main pc can access both other pc's.
4.Other pcs can access each other.
Problem is neither of 'other' pcs can acces Main pc.Getting message - 'logon
failure: the user has not been granted the requested logon type at this
computer'.
I would appreciate some help on this one as its driving me mad.....

 

[Chuck]

I have looked through but cant find query that matches mine exactly.
3 pcs, D-link router/modem, Main pc wired, others wireless. All pc's running
XP Pro SP2
1.I can see all others on each machine.
2. Each machine accesses internet ok.
3.Main pc can access both other pc's.
4.Other pcs can access each other.
Problem is neither of 'other' pcs can acces Main pc.Getting message - 'logon
failure: the user has not been granted the requested logon type at this
computer'.
I would appreciate some help on this one as its driving me mad.....

1. Click Start - Run, type "secpol.msc" in the box, and click OK.
2. Click Local Policies.
3. Click User Rights Assignment.
4. Check "Access this computer from the network", and make sure that the
Everyone group is included.
5. Check "Deny access to this computer from the network", and make sure that the
Everyone group is NOT included.

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
My email is AT DOT
actual address pchuck sonic net.

 

[Guest]

Thanks for replying Chuck, I think you may be on to something. The properties
box for 'access this computer' is empty and the properties box for 'deny
access' has SUPPORT_388945a0 in it. I would appreciate a walkthrough of how
to put this right if you can help.
Cheers
Baz

 

[Chuck]

Thanks for replying Chuck, I think you may be on to something. The properties
box for 'access this computer' is empty and the properties box for 'deny
access' has SUPPORT_388945a0 in it. I would appreciate a walkthrough of how
to put this right if you can help.
Cheers
Baz

Baz,

Your "Deny access" setting is right. The Support account is for remote
assistance, and is typically set manually (by removing it from the "Deny" list)
when you need remote assistance.

Your "Access this computer" is hopefully the problem. On mine, "Everyone,
Administrators, Users, Power Users, and Backup Operators" are listed. You need
to hit the "Add User or Group" button, and enter that list into the "Enter the
object names" box.

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
My email is AT DOT
actual address pchuck sonic net.

 

[Guest]

Nearly there I think Chuck, I have entered the list of users as suggested,
(btw my laptop has the same list). Still cant access Main PC but error
message has changed a little - '\\****** is not accessible. You do not have
permission to use this network resource. Contact admin of this server to find
out if you have access permissions. Access is Denied.' So near yet........
Baz

 

[Chuck]

Nearly there I think Chuck, I have entered the list of users as suggested,
(btw my laptop has the same list). Still cant access Main PC but error
message has changed a little - '\\****** is not accessible. You do not have
permission to use this network resource. Contact admin of this server to find
out if you have access permissions. Access is Denied.' So near yet........
Baz

Baz,

Windows XP is designed to be compatible with all other versions of Windows,
which means it always needs careful configuration. You just haven't finished
configuring it. Just check and change (if necessary) these settings.

On any XP Pro computer, check to see if Simple File Sharing (Control Panel -
Folder Options - View - Advanced settings) is enabled or disabled. With XP Pro,
you need to have SFS consistently set on each computer.

On XP Pro with SFS disabled, check the Local Security Policies (Control Panel -
Administrative Tools). Under Local Policies - Security Options, look at
"Network access: Sharing and security model", and ensure it's set to "Classic -
local users authenticate as themselves".

On XP Pro with SFS disabled, if you set the above Local Security Policy to
"Guest only", enable the Guest account, using Start - Run - "cmd" - type "net
user guest /active:yes" in the command window. If "Classic", setup and use a
common non-Guest account on all computers. Whichever account is used, give it
an identical, non-blank password on all computers.

On XP Home, and on XP Pro with Simple File Sharing enabled, make sure that the
Guest account is enabled, on each computer. Enable Guest, with Start - Run -
"cmd", then type "net user guest /active:yes" in the command window. Ensure
that the password for Guest is blank, with Start - Run - "control
userpasswords2"; select Guest, click Reset Password, click OK without entering a
new password.

Remember, with Simple File Sharing, you'll not be able to access "C:\Program
Files", "C:\Windows", or any of the profile related folders such as "My
Documents". All of those folders require individual user, or administrator
access, and Guest access gives you neither.

Do any of the computers have a software firewall (WF, or third party)? If so,
you need to configure them for file sharing. Firewall configurations are a very
common cause of (network) browser, and file sharing, problems.

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
My email is AT DOT
actual address pchuck sonic net.

 

[Guest]

I'd like to thank you for all your help Chuck. In the end I found (through
another post) a link to http://www.michna.com/kb/wxnet.htm XP Network Problem
Solver. There was a reference in there to changing the RestrictAnonymous
registry value;

HKEY_LOCAL_MACHINE
\SYSTEM
\CurrentControlSet
\Control
\Lsa
Value name: RestrictAnonymous
Value type: DWORD
If the value is 1 or even 2, change it to 0, reboot and retest. If the
problem is solved, leave the value at zero.

Looking at the email response they got it would appear to be a very common
problem. It worked for me too.
Thanks again for the time and effort you went to.
Baz