WIn XP pro hosting a share: not accessible

  • Thread starter Thread starter Titus van Houwelingen
  • Start date Start date
T

Titus van Houwelingen

I have a problem sharing on a Windows XP professional machine.

When I give for a share to a specific user (share permissions and/or ntfs
permissions),I get no access at all.
Only when I include 'everyone' I can get access. Or when I connect using an
administrator account.
Let's call the user: john

Information:
Server machine is Windows XP professional SP2, last patched with automatic
updates beginning of may 2006.
File and printer sharing is enabled on the server
Share access: john has full control
NTFS access: john has full control
John belongs to the usergroup 'users' which do have the user right 'Access
this computer from the network'.
John does NOT have an empty password.
Guest account is disabled (which should not be relevant here)
John is the only one connecting, so the limit of 10 concurrent connections
is not the problem.

I connect from a client, logged on as john with the same password as defined
on the 'server': no access. Even when mapping the share: no access (the
mapping itself succeeds though).

With the above information I would expect the connection to work.
When I give access to the group everyone I do have access (but only with the
rights given to the everyone group not the rights given to john.)

By the way: when I remember correctly, 'everyone' should not have given john
access if the server did not know the account john, as the guest account was
disabled. Appearently the server DOES know john but why doesn't he get the
apporpriate rights.

I suspect that the cause of this problem (windows error or me being a stupid
@%%#$@) is the same which prevents me from sharing the printer on that
server.


Another strange thing: When I right click the share from the client and add
the everyone group, a popup askes me to login as a user which is allowed to
do such changes. When I CANCEL without entering enything, the everyone group
is added in the list and after "ok" I actually CAN access the share!

This last issue is weird but not a problem for me. Not having access is, and
I would sincerely hope someone has a solution for me.

Am I being a fool here or is it a flaw in Windows?

Thanx a lot in advance,
Titus
 
I have a problem sharing on a Windows XP professional machine.

When I give for a share to a specific user (share permissions and/or ntfs
permissions),I get no access at all.
Only when I include 'everyone' I can get access. Or when I connect using an
administrator account.
Let's call the user: john

Information:
Server machine is Windows XP professional SP2, last patched with automatic
updates beginning of may 2006.
File and printer sharing is enabled on the server
Share access: john has full control
NTFS access: john has full control
John belongs to the usergroup 'users' which do have the user right 'Access
this computer from the network'.
John does NOT have an empty password.
Guest account is disabled (which should not be relevant here)
John is the only one connecting, so the limit of 10 concurrent connections
is not the problem.

I connect from a client, logged on as john with the same password as defined
on the 'server': no access. Even when mapping the share: no access (the
mapping itself succeeds though).

With the above information I would expect the connection to work.
When I give access to the group everyone I do have access (but only with the
rights given to the everyone group not the rights given to john.)

By the way: when I remember correctly, 'everyone' should not have given john
access if the server did not know the account john, as the guest account was
disabled. Appearently the server DOES know john but why doesn't he get the
apporpriate rights.

I suspect that the cause of this problem (windows error or me being a stupid
@%%#$@) is the same which prevents me from sharing the printer on that
server.


Another strange thing: When I right click the share from the client and add
the everyone group, a popup askes me to login as a user which is allowed to
do such changes. When I CANCEL without entering enything, the everyone group
is added in the list and after "ok" I actually CAN access the share!

This last issue is weird but not a problem for me. Not having access is, and
I would sincerely hope someone has a solution for me.

Am I being a fool here or is it a flaw in Windows?

Thanx a lot in advance,
Titus

Titus,

Is the server (the Win XP Pro) computer running Simple, or Advanced, File
Sharing? If Simple, you need Guest properly activated.
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Simple>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Simple
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Activate>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Activate

If you run Advanced File Sharing, you can use either Guest, or a non-Guest
account (again, properly activated). But now, you have to understand Sharing vs
Security Permissions.
<http://nitecruzr.blogspot.com/2005/09/server-access-authorisation.html>
http://nitecruzr.blogspot.com/2005/09/server-access-authorisation.html
 
From Help and Support Center; "If you remove the Every Group from the NTFS
permission, you cannot access the share folder over the network." (I am sure
it should read "Everyone Group"). Few thoughts: Share permissions are
applied during network access - not local - NTFS permissions applied during
local and network access. Also when both a share and NTFS permission are
applied the effective permission is the most restrictive of both.
 
Hi AJR,

The NTFS and the share permissions both give john full access.
I do not want to give every one the same access as john.

The config I described worked when the server was a W2K "real" server.

Also when trying this all from another pc it does work. Now I am convinced
that the configuration of the server is fine.

Now I have tu figure out what the heck is going on with the refusing
client...

Regards,
Titus
 
Hi Chuck,

Thanks for your reply.

It is running advance sharing. Which should enable non guest sharing.
Both the sharing and ntfs permissions are full control for this user.

Now the strange thing happens: from another system it DOES work. So the
'server' config must be fine.
I only do not understand why it does work on client A and not on client B.

Regards,
Titus
 
Hi Chuck,

Thanks for your reply.

It is running advance sharing. Which should enable non guest sharing.
Both the sharing and ntfs permissions are full control for this user.

Now the strange thing happens: from another system it DOES work. So the
'server' config must be fine.
I only do not understand why it does work on client A and not on client B.

Regards,
Titus

Good analysis, Titus. Maybe we need to step back and start over. Take a look
at "browstat status", "ipconfig /all", "net config server", and "net config
workstation", from each computer. Read this article, and linked articles, and
follow instructions precisely (download browstat!):
<http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html#AskingForHelp>
http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html#AskingForHelp
 
Back
Top