Permissions issue with remote connection

[JDub]

The Scenario:

There exists a W2K Server called Frodo, that recently has
had a Security Template applied to allow more granular
control of system services.
A connection is successfully made to Frodo from other
machines in the same domain (running W2K Server and XP
Pro and logged in as a Domain Admin) via:

Computer Management -> Connect to Another Computer

The Problem:
When attempting to check the Properties of Frodo, this
error message appears:

"Win32: Access is denied"

There is no problem accessing the Properties via Computer
Management when logged in locally to Frodo.

I cannot seem to find any setting in the 'Security
Analysis and Configuration' snap-in which may be
affecting this - 'cos I'm guessing that I must have
inadvertently changed something when applying the
Security Template (used the Basic Server one).

Please advise if you can.
Thanks

 

[Steven Umbach]

Check that remote registry service and server service [file and print sharing]
are started on the target machine . --- Steve

 

[Guest]

Both services were already Started.
There is no problem with accessing existing shares on
Frodo from remote machines.
The problem only occurs when trying to access the
Properties of Frodo (as below) remotely.

-----Original Message-----
Check that remote registry service and server service [file and print sharing]
are started on the target machine . --- Steve

The Scenario:

There exists a W2K Server called Frodo, that recently has
had a Security Template applied to allow more granular
control of system services.
A connection is successfully made to Frodo from other
machines in the same domain (running W2K Server and XP
Pro and logged in as a Domain Admin) via:

Computer Management -> Connect to Another Computer

The Problem:
When attempting to check the Properties of Frodo, this
error message appears:

"Win32: Access is denied"

There is no problem accessing the Properties via Computer
Management when logged in locally to Frodo.

I cannot seem to find any setting in the 'Security
Analysis and Configuration' snap-in which may be
affecting this - 'cos I'm guessing that I must have
inadvertently changed something when applying the
Security Template (used the Basic Server one).

Please advise if you can.
Thanks

.

 

[Steven L Umbach]

OK. I have seen that if you are trying to manage a computer remotely while
logged on as a user with the same user name but different password than what
is on the target machine which is easy to do if logged on with the
administrator account. It may help to enable auditing of logon events for
success and failure on the target machine to see if any logon failures are
reported as you try to manage it. You can also restore security settings to
default defined levels as decribed in KB below if you want, though I doubt
that is an issue if accessing computer shares is not a problem. You can also
append the /areas option if you only want to reset certain security
areas.--- Steve


http://support.microsoft.com/default.aspx?scid=kb;EN-US;313222

Both services were already Started.
There is no problem with accessing existing shares on
Frodo from remote machines.
The problem only occurs when trying to access the
Properties of Frodo (as below) remotely.

-----Original Message-----
Check that remote registry service and server service [file and print sharing]
are started on the target machine . --- Steve

The Scenario:

There exists a W2K Server called Frodo, that recently has
had a Security Template applied to allow more granular
control of system services.
A connection is successfully made to Frodo from other
machines in the same domain (running W2K Server and XP
Pro and logged in as a Domain Admin) via:

Computer Management -> Connect to Another Computer

The Problem:
When attempting to check the Properties of Frodo, this
error message appears:

"Win32: Access is denied"

There is no problem accessing the Properties via Computer
Management when logged in locally to Frodo.

I cannot seem to find any setting in the 'Security
Analysis and Configuration' snap-in which may be
affecting this - 'cos I'm guessing that I must have
inadvertently changed something when applying the
Security Template (used the Basic Server one).

Please advise if you can.
Thanks

.

 

[Guest]

Steve

I deleted my profile on Frodo to see whether it was
holding any leftover garbage that was preventing me from
authenticating remotely - no success.
I also confirmed that Logon Auditing was enabled, but
this didn't reveal anything either.
I also reset the default W2K permissions on the server
using the Defltsv.inf security template, but nothing.
One of my colleagues has suggested that it may have
something to with WMI so I'll start looking in this
direction now.

Thanks for your advice so far.

-----Original Message-----
OK. I have seen that if you are trying to manage a computer remotely while
logged on as a user with the same user name but different password than what
is on the target machine which is easy to do if logged on with the
administrator account. It may help to enable auditing of logon events for
success and failure on the target machine to see if any logon failures are
reported as you try to manage it. You can also restore security settings to
default defined levels as decribed in KB below if you want, though I doubt
that is an issue if accessing computer shares is not a problem. You can also
append the /areas option if you only want to reset certain security
areas.--- Steve


http://support.microsoft.com/default.aspx?scid=kb;EN- US;313222

Both services were already Started.
There is no problem with accessing existing shares on
Frodo from remote machines.
The problem only occurs when trying to access the
Properties of Frodo (as below) remotely.

-----Original Message-----
Check that remote registry service and server service [file and print sharing]
are started on the target machine . --- Steve


The Scenario:

There exists a W2K Server called Frodo, that

recently
has

had a Security Template applied to allow more granular
control of system services.
A connection is successfully made to Frodo from other
machines in the same domain (running W2K Server and XP
Pro and logged in as a Domain Admin) via:

Computer Management -> Connect to Another Computer

The Problem:
When attempting to check the Properties of Frodo, this
error message appears:

"Win32: Access is denied"

There is no problem accessing the Properties via Computer
Management when logged in locally to Frodo.

I cannot seem to find any setting in the 'Security
Analysis and Configuration' snap-in which may be
affecting this - 'cos I'm guessing that I must have
inadvertently changed something when applying the
Security Template (used the Basic Server one).

Please advise if you can.
Thanks


.

.

 

[Steven Umbach]

OK. Can't think of anyhting else on my end right now. Please post back if you
find the soluton. --- Steve

Steve

I deleted my profile on Frodo to see whether it was
holding any leftover garbage that was preventing me from
authenticating remotely - no success.
I also confirmed that Logon Auditing was enabled, but
this didn't reveal anything either.
I also reset the default W2K permissions on the server
using the Defltsv.inf security template, but nothing.
One of my colleagues has suggested that it may have
something to with WMI so I'll start looking in this
direction now.

Thanks for your advice so far.

-----Original Message-----
OK. I have seen that if you are trying to manage a computer remotely while
logged on as a user with the same user name but different password than what
is on the target machine which is easy to do if logged on with the
administrator account. It may help to enable auditing of logon events for
success and failure on the target machine to see if any logon failures are
reported as you try to manage it. You can also restore security settings to
default defined levels as decribed in KB below if you want, though I doubt
that is an issue if accessing computer shares is not a problem. You can also
append the /areas option if you only want to reset certain security
areas.--- Steve


http://support.microsoft.com/default.aspx?scid=kb;EN- US;313222

Both services were already Started.
There is no problem with accessing existing shares on
Frodo from remote machines.
The problem only occurs when trying to access the
Properties of Frodo (as below) remotely.
-----Original Message-----
Check that remote registry service and server service
[file and print sharing]
are started on the target machine . --- Steve


message
The Scenario:

There exists a W2K Server called Frodo, that recently
has
had a Security Template applied to allow more granular
control of system services.
A connection is successfully made to Frodo from other
machines in the same domain (running W2K Server and XP
Pro and logged in as a Domain Admin) via:

Computer Management -> Connect to Another Computer

The Problem:
When attempting to check the Properties of Frodo, this
error message appears:

"Win32: Access is denied"

There is no problem accessing the Properties via
Computer
Management when logged in locally to Frodo.

I cannot seem to find any setting in the 'Security
Analysis and Configuration' snap-in which may be
affecting this - 'cos I'm guessing that I must have
inadvertently changed something when applying the
Security Template (used the Basic Server one).

Please advise if you can.
Thanks


.

.