Unathorized to access a share on a computer

[Alessio Sangalli]

Hi, I have a small windows network, 4 PCs. No domain, only a workgroup.
There is a windows XP computer that I'm sure it's connected to the net,
I can ping it, but it won't let you access its shares. I've shared the
whole C: drive, enabling full access and that users can modify files.

This computer cannot be accessed owever. All the other computers can see
each other and share files; this one can even access other computers
without problems or delays. Whenever I double click on this computer
from "network resources" of another PC, I *immediately* get an error
message saying I'm not authorized to access its shares.

How can I debug this problem? Any advice?

Thank you
Alessio Sangalli

 

[Malke]

Hi, I have a small windows network, 4 PCs. No domain, only a
workgroup. There is a windows XP computer that I'm sure it's connected
to the net, I can ping it, but it won't let you access its shares.
I've shared the whole C: drive, enabling full access and that users
can modify files.

This computer cannot be accessed owever. All the other computers can
see each other and share files; this one can even access other
computers without problems or delays. Whenever I double click on this
computer from "network resources" of another PC, I *immediately* get
an error message saying I'm not authorized to access its shares.

How can I debug this problem? Any advice?

Have you created identical user accounts/passwords on the problem
machine? Have you allowed lan traffic in whatever firewall it is using?
Here is an excellent network troubleshooter which you should run
through to help you narrow down the problem areas:

http://www.michna.com/kb/wxnet.htm

Malke

 

[Chuck]

Hi, I have a small windows network, 4 PCs. No domain, only a workgroup.
There is a windows XP computer that I'm sure it's connected to the net,
I can ping it, but it won't let you access its shares. I've shared the
whole C: drive, enabling full access and that users can modify files.

This computer cannot be accessed owever. All the other computers can see
each other and share files; this one can even access other computers
without problems or delays. Whenever I double click on this computer
from "network resources" of another PC, I *immediately* get an error
message saying I'm not authorized to access its shares.

How can I debug this problem? Any advice?

Thank you
Alessio Sangalli

Alessio,

Is the problem computer running XP Home or Pro? This may make a difference.

On any XP Pro computer, check to see if Simple File Sharing (Control Panel -
Folder Options - View - Advanced settings) is enabled or disabled. With XP Pro,
you need to have SFS properly set on each computer.

On XP Pro with SFS disabled, check the Local Security Policies (Control Panel -
Administrative Tools). Under Local Policies - Security Options, look at
"Network access: Sharing and security model", and ensure it's set to "Classic -
local users authenticate as themselves".

On XP Pro with SFS disabled, if you set the above Local Security Policy to
"Guest only", enable the Guest account, using Start - Run - "cmd" - type "net
user guest /active:yes" in the command window. If "Classic", setup and use a
common non-Guest account on all computers. Whichever account is used, give it
an identical, non-blank password on all computers.

On XP Home, and on XP Pro with Simple File Sharing enabled, make sure that the
Guest account is enabled, on each computer. Enable Guest, with Start - Run -
"cmd", then type "net user guest /active:yes" in the command window. Ensure
that the password for Guest is blank, with Start - Run - "control
userpasswords2"; select Guest, click Reset Password, click OK without entering a
new password.

On XP Pro, if you're going to use Guest authentication, check your Local
Security Policy (Control Panel - Administrative Tools) - User Rights Assignment,
on the XP Pro computer, and look at "Deny access to this computer from the
network". Make sure Guest is not in the list. Look at "Access this computer
from the network", and make sure that Everyone is in this list.

Do any of the computers have a software firewall (ICF / WF, or third party)? If
so, you need to configure them for file sharing. Firewall configurations are a
very common cause of (network) browser, and file sharing, problems.

If that doesn't help, provide ipconfig information for each computer, and let's
see what to check next.
Start - Run - "cmd". Type "ipconfig /all >c:\ipconfig.txt" into the command
window - Open c:\ipconfig.txt in Notepad, make sure that Format - Word Wrap is
NOT checked!, copy and paste entire contents into your next post. Identify
operating system (by name, version, and SP level) with each ipconfig listing.

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
My email is AT DOT
actual address pchuck sonic net.

 

[Alessio Sangalli]

Have you created identical user accounts/passwords on the problem
machine? Have you allowed lan traffic in whatever firewall it is using?
Here is an excellent network troubleshooter which you should run
through to help you narrow down the problem areas:

http://www.michna.com/kb/wxnet.htm

I'll check it out tomorrw at the office, thank you!


ciao
as

 

[Alessio Sangalli]

Is the problem computer running XP Home or Pro? This may make a difference.

XP Pro. The computer that needs to access it is a win2000 pro

[...]
thanks fir the very detailed explanation

Do any of the computers have a software firewall (ICF / WF, or third party)? If
so, you need to configure them for file sharing. Firewall configurations are a
very common cause of (network) browser, and file sharing, problems.

it doesn't have a firewall: the funny thing is that I discovered I'm
*able* to access the computer if I type:

\\Bono\C

I can also access the printer but I'm not able to *list* the shares when
I click on this computer's icon on network resources of another pc...


Thank you
Alessio Sangalli

 

[Chuck]

Is the problem computer running XP Home or Pro? This may make a difference.

XP Pro. The computer that needs to access it is a win2000 pro

[...]
thanks fir the very detailed explanation

Do any of the computers have a software firewall (ICF / WF, or third party)? If
so, you need to configure them for file sharing. Firewall configurations are a
very common cause of (network) browser, and file sharing, problems.

it doesn't have a firewall: the funny thing is that I discovered I'm
*able* to access the computer if I type:

\\Bono\C

I can also access the printer but I'm not able to *list* the shares when
I click on this computer's icon on network resources of another pc...


Thank you
Alessio Sangalli

Alessio,

OK, that's probably a browser issue (I'm not talking about Internet Explorer
here).

Make sure the browser service is running on only one of the computers. Control
Panel - Administrative Tools - Services. Verify that the Computer Browser, and
the TCP/IP NetBIOS Helper, services both show with Status = Started. Disable
the browser service on the other computer.

After checking / disabling / enabling as above, power all computers off to reset
the browser settings on each. Then power both back on.

The Microsoft Browstat program will show us what browsers you have in your
domain / workgroup, at any time.
http://support.microsoft.com/?id=188305

You can download Browstat from either:
<http://www.dynawell.com/reskit/microsoft/win2000/browstat.zip>
<http://rescomp.stanford.edu/staff/manual/rcc/tools/browstat.zip>

Browstat is very small (40K), and needs no install. Just unzip the downloaded
file, copy browstat.exe to any folder in the Path, and run it from a command
window, by "browstat status". Make sure all computers give the same result.

For more information about the browser subsystem (very intricate), see:
http://support.microsoft.com/?id=188001
http://support.microsoft.com/?id=188305
<http://www.microsoft.com/technet/prodtechnol/winntas/deploy/prodspecs/ntbrowse.mspx>

The browser requires anonymous access, so look at registry key
[HKLM\System\CurrentControlSet\Control\Lsa], value restrictanonymous on both
computers.
<http://www.microsoft.com/windows200...2000/techinfo/reskit/en-us/regentry/46688.asp>
<http://www.jsifaq.com/subf/tip2600/rh2625.htm>
http://support.microsoft.com/?id=246261
http://support.microsoft.com/?id=296403

The above articles refer to Windows 2000. Remember WinXP is NT V5.1, and Win2K
is NT V5.0.

Have you used the Registry Editor before? If not, it's a scary tool, but it's
pretty simple once you get used to it. Here are a couple articles that might
help:
<http://www.microsoft.com/windowsxp/...home/using/productdoc/en/tools_regeditors.asp>
<http://www.annoyances.org/exec/show/registry>

Just remember to backup the key (create a registry patch) for
[HKLM\System\CurrentControlSet\Control\Lsa] before making any changes, if
appropriate.

From the Annoyances article:
You can create a Registry patch by opening the Registry Editor, selecting a
branch, and choosing Export from the File menu. Then, specify a filename, and
press OK. You can then view the Registry patch file by opening it in Notepad
(right-click on it and select Edit). Again, just double-click on a Registry
patch file (or use Import in the Registry Editor's File menu) to apply it to the
registry.

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
My email is AT DOT
actual address pchuck sonic net.

 

[Alessio Sangalli]

OK, that's probably a browser issue (I'm not talking about Internet Explorer
here).

Yes I know

Have you used the Registry Editor before? If not, it's a scary tool, but it's
pretty simple once you get used to it. Here are a couple articles that might

Don't worry I'm a programmer. I'm not a windows systemist though

thank you
Alessio Sangalli