Newbie XP/2K Drive Mapping Issue

  • Thread starter Thread starter bonehead
  • Start date Start date
B

bonehead

Greetings,

I've recently set up one XP Pro machine and added it to a Workgroup in
which all the other machines are still running Win2K. I wanted to copy
some install files from some of my 2K machines to install apps like
Eudora etc., so I went into Windows Exploder on the XP machine and just
went "Tools | Map Network Drive..." like normal.

What's wierd is that some of the machines gave me a password prompt like
normal, but other machines threw me an error, "Network path could not be
found." or, "You do not have sufficient rights to connect to this
device. Contact your system administrator."

I haven't had this issue at all between any of the Win2K machines.

Suggestions?
 
Greetings,

I've recently set up one XP Pro machine and added it to a Workgroup in
which all the other machines are still running Win2K. I wanted to copy
some install files from some of my 2K machines to install apps like
Eudora etc., so I went into Windows Exploder on the XP machine and just
went "Tools | Map Network Drive..." like normal.

What's wierd is that some of the machines gave me a password prompt like
normal, but other machines threw me an error, "Network path could not be
found." or, "You do not have sufficient rights to connect to this
device. Contact your system administrator."

I haven't had this issue at all between any of the Win2K machines.

Suggestions?

On an XP Pro computer, check to see if Simple File Sharing (Control Panel -
Folder Options - View - Advanced settings) is enabled or disabled. With XP Pro,
you need to have SFS properly set on each computer.

On XP Pro, and with SFS disabled, check the Local Security Policies (Control
Panel - Administrative Tools). Under Local Policies - Security Options, look at
"Network access: Sharing and security model", and ensure it's set to "Classic -
local users authenticate as themselves".

On XP Pro, and with SFS disabled, if you set the above Local Security Policy to
"Guest only", enable the Guest account, using Start - Run - "cmd" - type "net
user guest /active:yes" in the command window. If "Classic", setup and use a
common non-Guest account on all computers. Whichever account is used, give it
an identical, non-blank password on all computers.

Windows 2000 uses Advanced File Sharing, which looks for a matching non-Guest
account, then tries the Guest account.

<http://www.microsoft.com/downloads/...db-aef8-4bef-925e-7ac9be791028&DisplayLang=en>

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
 
Okay, it hasn't gotten wierd enough yet. I suspect that there is some
firewall setting on the XP machine that is preventing drive mapping.

Here's the situation thus far:

To recap, I want to map a network drive between an XPPro machine and a
2KPro machine.

The machines are part of the same Workgroup.

The XP machine has Simple File Sharing disabled.

The XP machine has Local Policies | Security Options | Network Access:
Sharing and Security Model set to "Classic".

Both machines have an account which is a member of Administrators only,
with the same username/password.

On the XP machine, in My Network Places | View Workgroup Computers, I
can see the 2K machine.

Likewise on the 2K machine, in My Network Places | Computers Near Me, I
can see the XP machine.

However, neither machine can ping the other.

PS The two machines in question are in the same subnet and are even
plugged into two directly adjacent network ports in the same wall jack.

PPS There are six other 2K Pro machines in the same workgroup and subnet
which I *can* ping and map from the XP machine.

The IPs for the two machines are:

aaa.aaa.aa.149 and aaa.aaa.aa.208

where a=a on both machines.
 
Okay, it hasn't gotten wierd enough yet. I suspect that there is some
firewall setting on the XP machine that is preventing drive mapping.

Here's the situation thus far:

To recap, I want to map a network drive between an XPPro machine and a
2KPro machine.

The machines are part of the same Workgroup.

The XP machine has Simple File Sharing disabled.

The XP machine has Local Policies | Security Options | Network Access:
Sharing and Security Model set to "Classic".

Both machines have an account which is a member of Administrators only,
with the same username/password.

On the XP machine, in My Network Places | View Workgroup Computers, I
can see the 2K machine.

Likewise on the 2K machine, in My Network Places | Computers Near Me, I
can see the XP machine.

However, neither machine can ping the other.

PS The two machines in question are in the same subnet and are even
plugged into two directly adjacent network ports in the same wall jack.

PPS There are six other 2K Pro machines in the same workgroup and subnet
which I *can* ping and map from the XP machine.

The IPs for the two machines are:

aaa.aaa.aa.149 and aaa.aaa.aa.208

where a=a on both machines.

Can the 2K computer in question also ping the other 2K computers?

What firewalls are on the two computers? Is the XP computer SP2, or pre-SP2?

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
 
Thanks for replying
Can the 2K computer in question also ping the other 2K computers?

Yes, all the 2K computers in the workgroup can ping and map each other.
What firewalls are on the two computers?

There are no third party firewall products on any of the machines.

Is the XP computer SP2, or pre-SP2?

Pre-SP2
 
Thanks for replying


Yes, all the 2K computers in the workgroup can ping and map each other.


There are no third party firewall products on any of the machines.

Is the XP computer SP2, or pre-SP2?

Pre-SP2

OK Bonehead,

So we're only talking about ICF on the XP computer as being a possible problem.
If that. Try disabling ICF then and see if that presents any improvement.

If the XP computer CAN however ping and access the other 2K computers, and we're
only talking about ICF on ONE computer, which AFAIK, does not filter by ip
address, or filter outgoing packets, I have trouble believing that your entire
problem is caused by one firewall setting.

Any chance you have IPSec setup on the 2K computer?
<http://www.microsoft.com/windows2000/techinfo/planning/security/ipsecsteps.asp>

Make sure the browser service is running on each computer. Control Panel -
Administrative Tools - Services. Verify that the Computer Browser, and the
TCP/IP NetBIOS Helper, services both show with Status = Started.

When you say "can't ping" or "can't access shares", have you tried pinging /
accessing shares using ip address, not name? Like try mapping a share as
\\aaa.aaa.aa.149\ShareName? Pinging aaa.aaa.aa.149?

Name resolution problems can cause "Network path not found ... insufficient
rights" errors.

Check Node Type in ipconfig listings for the two problem computers, and for one
of the known good 2K computers. What values do you have?

Do an anal retentive test between 3 computers.
1) The XP computer.
2) The problem 2K computer.
3) Any one of the non problem 2K computers.

From each of the 3 chosen computers:
1) "Ping" Computer 1 by name and ip address.
2) "Ping" Computer 2 by name and ip address.
3) "Ping" Computer 3 by name and ip address.
4) "Net view" Computer 1 by name and ip address.
5) "Net view" Computer 2 by name and ip address.
6) "Net view" Computer 3 by name and ip address.

Post successful tests and exact text of any error messages. Please be precise.

BTW, Bonehead, "here [DOT] org", believe it or not, is an actual existing
domain. Learn to munge your email address properly, to keep yourself a bit
safer when posting to open forums. Protect yourself and the rest of the
internet - read this article.
http://www.mailmsg.com/SPAM_munging.htm

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
 
I suppose I should note at the top that I don't have a Windows server in
this environment, therefore I don't have a domain controller set up. But
I'm not sure that would explain why I can ping and drive map from the XP
to some of the 2Ks but not others, especially since all the machines are
in the same Workgroup and can all see each other in My Network Places.
OK Bonehead,

Any chance you have IPSec setup on the 2K computer?
<http://www.microsoft.com/windows2000/techinfo/planning/security/ipsecsteps.asp>

IPSEC is turned off on *all* 2K machines *and* the XP machine.
Make sure the browser service is running on each computer. Control Panel -
Administrative Tools - Services. Verify that the Computer Browser, and the
TCP/IP NetBIOS Helper, services both show with Status = Started.

Both Services are turned on on both trouble 2K machines and the XP machine.
When you say "can't ping" or "can't access shares", have you tried pinging /
accessing shares using ip address, not name? Like try mapping a share as
\\aaa.aaa.aa.149\ShareName? Pinging aaa.aaa.aa.149?

Tried it both ways, thinking as well that it might be a
(case-sensitive?) name resolution problem. Still got "Network path now
found...insufficient rights"
Check Node Type in ipconfig listings for the two problem computers, and for one
of the known good 2K computers. What values do you have?

All 2K machines are set to Node Type "Broadcast"...however, the XP
machine is set to "Hybrid". Just out of curiosity, how would I change
the XP's nod type?
Do an anal retentive test between 3 computers.
1) The XP computer.
2) The problem 2K computer.
3) Any one of the non problem 2K computers.

From each of the 3 chosen computers:
1) "Ping" Computer 1 by name and ip address.
2) "Ping" Computer 2 by name and ip address.
3) "Ping" Computer 3 by name and ip address.
4) "Net view" Computer 1 by name and ip address.
5) "Net view" Computer 2 by name and ip address.
6) "Net view" Computer 3 by name and ip address.
Post successful tests and exact text of any error messages. Please
be precise.

Yeah, this was one of the things I tried over the weekend. Here it is:

From XP to self:
ping ip: reply successful
ping name: reply successful
net view ip: The command completed successfully
net view name: The command completed successfully

From XP to trouble 2K
ping ip: request timed out
ping name: could not find host (bear in mind that the trouble machine
*is* listed under Windows Explorer | My Network Places | Entire Network
| Microsoft Windows Network | MyWorkgroupName |)
net view ip: System error 53 has occurred. The network path was not found
net view name: System error 53 has occurred. The network path was not found

From XP to non problem 2K:
ping ip: reply successful
ping name: could not find host
net view ip: System error 5 has occurred. Access is denied.
net view name: there are no entries on the list

From problem 2K machine to self:
ping ip: reply successful
ping name: reply successful
net view ip: There are no entries on the list
net view name: There are no entries on the list

From problem 2K machine to XP:
ping ip: request timed out
ping name: unknown host
net view ip: System error 53 has occurred. The network path wea not found.
net view name: System error 53 has occurred. The network path wea not found.

From problem 2K machine to non problem 2K machine:
ping ip: reply successful
ping name: reply successful
net view ip: System error 1326 has occurred. Logon failure: unknown
username or password.
net view name: System 5 error has occurred. Access is denied.

From non problem 2K machine to self:
ping ip: reply successful
ping name: reply successful
net view ip: System error 1707: network address invalid
net view name: System error 53: network path not found

From non problem 2K machine to XP:
ping ip: reply successful
ping name: reply successful
net view ip: The command was successful
net view name: The command was successful

From non problem 2K machine to problem 2K machine:
ping ip: reply successful
ping name: reply successful
net view ip: System error 1326: Logon failure: unknown username or password.
net view name: System 5 error has occurred. Access is denied.
BTW, Bonehead, "here [DOT] org", believe it or not, is an actual existing
domain. Learn to munge your email address properly, to keep yourself a bit
safer when posting to open forums. Protect yourself and the rest of the
internet - read this article.
http://www.mailmsg.com/SPAM_munging.htm

Hmmm....eight years doing it that way, who knew...the article does
definitely make sense though.
 
I suppose I should note at the top that I don't have a Windows server in
this environment, therefore I don't have a domain controller set up. But
I'm not sure that would explain why I can ping and drive map from the XP
to some of the 2Ks but not others, especially since all the machines are
in the same Workgroup and can all see each other in My Network Places.

<http://www.microsoft.com/windows2000/techinfo/planning/security/ipsecsteps.asp>

IPSEC is turned off on *all* 2K machines *and* the XP machine.


Both Services are turned on on both trouble 2K machines and the XP machine.


Tried it both ways, thinking as well that it might be a
(case-sensitive?) name resolution problem. Still got "Network path now
found...insufficient rights"


All 2K machines are set to Node Type "Broadcast"...however, the XP
machine is set to "Hybrid". Just out of curiosity, how would I change
the XP's nod type?

<SNIP>

Here are Microsoft article discussing node types:
<http://support.microsoft.com/?id=314053>
<http://support.microsoft.com/?id=160177>

I think you have at least two problems. Or one problem with multiple effects.

Let's start with the ping problems. Ping by ip address works between all
computers - except between the problem computer, and the XP computer. Neither
can ping the other, but both can ping the third, non-problem computer.

The ping process is very low level - it requires only the TCP/IP protocol,
running on top of a physical network. These computers with this problem have no
problem pinging other computers - both can ping the non-problem 2K computer. My
experience is that selective ping problems like this can only be caused by one
thing - a firewall.

Is ICF active on the XP computer? Have there ever been any third party
firewalls or any other security product active on either computer?

While you're considering that issue, let's look at net view by ip address
between the two 2K computers. Both claiming unknown username / bad password
when one tries enumeration of the other.

You've got a diverse LAN. If you're going to deploy Windows XP computers on a
LAN containing 2K computers, you'll have to standardise your permissioning
between all computers.

Windows 2K uses Advanced File Sharing - which serves file shares to users on
other computers logged in with matching account / password. If a matching
account / password is not present, then the server will provide shares based
upon the Guest account being active and having a matching non-blank password.

So, to start, do you have an enabled Guest account on each computer? With
matching password? Remember you must enable the Guest account, using Start -
Run - "cmd" - type "net user guest /active:yes" in the command window. Or using
Local Security Manager (Control Panel - Administrative Tools - Computer
Management - Local Users and Groups. Not using User Accounts in Control Panel.

If all computers have matching properly enabled Guest accounts, check the
Registry entry restrictanonymous.

In addition to any possibilities you might find in other articles, look on each
computer, at registry key [HKLM\System\CurrentControlSet\Control\Lsa], value
restrictanonymous.
<http://www.microsoft.com/windows200...2000/techinfo/reskit/en-us/regentry/46688.asp>
<http://www.jsifaq.com/subf/tip2600/rh2625.htm>

The above articles refer to Windows 2000. Remember WinXP is NT V5.1, and Win2K
is NT V5.0.

Have you used the Registry Editor before? If not, it's a scary tool, but it's
pretty simple once you get used to it. Here are a couple articles that might
help:
<http://www.microsoft.com/windowsxp/...home/using/productdoc/en/tools_regeditors.asp>
<http://www.annoyances.org/exec/show/registry>

Just remember to backup the key (create a registry patch) for
[HKLM\System\CurrentControlSet\Control\Lsa] before making any changes, if
appropriate.

From the Annoyances article:
You can create a Registry patch by opening the Registry Editor, selecting a
branch, and choosing Export from the File menu. Then, specify a filename, and
press OK. You can then view the Registry patch file by opening it in Notepad
(right-click on it and select Edit). Again, just double-click on a Registry
patch file (or use Import in the Registry Editor's File menu) to apply it to the
registry.

Lets see if we can resolve these two issues, and see what symptoms remain
afterwards.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Back
Top