Windows XP Home Networking Permissions

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi. Two questions.

1. I have two computers. One laptop, one desktop, both wired to a router.
When i set up the network, the laptop can see and access the desktop no
problems, but the desktop cannot access the laptop. Why? When I try to access
it from the
'view network computers', it says "you do not have permission". I can't
figure out what is on this laptop that is any different. The laptop has a
Firewall and virus protection, so I assume this might be why, but I can't
figure out how to set it to work (i've tried turning the firewall off
completely and it still doesn't work).

2. Both the computers are my own, and I want to set them up with full access
to one another, without limitations. I am concerned though, about security.
Will the router provide enough security to prevent anyone hacking in through
the broadband internet?

Thanks, Allison
 
XP home uses "Guest" file-sharing.

If the remote username trying to access a share doesn't have an equivalent
user-account on the machine hosting the share, then the user is connected as
Guest. If a matching account DOES exist, then they are connected as their own
username.

The password-issue arises in that where there is no account-match, the Guest
password must be supplied. (assuming there is one, of course, by default it's
blank)

However, if there IS a matching account on the host computer, then the Guest
password won't be accepted - not even if it's correctly given - only the
password for the matching account will do.

When I say 'Guest' I don't mean the Guest option on the Welcome Screen by
the way. There is a real user-account called Guest, this is what's
referred-to here.

Hope this helps, it should now be apparent where to look for the
authentication-failure.
 
Hi. Two questions.

1. I have two computers. One laptop, one desktop, both wired to a router.
When i set up the network, the laptop can see and access the desktop no
problems, but the desktop cannot access the laptop. Why? When I try to access
it from the
'view network computers', it says "you do not have permission". I can't
figure out what is on this laptop that is any different. The laptop has a
Firewall and virus protection, so I assume this might be why, but I can't
figure out how to set it to work (i've tried turning the firewall off
completely and it still doesn't work).

2. Both the computers are my own, and I want to set them up with full access
to one another, without limitations. I am concerned though, about security.
Will the router provide enough security to prevent anyone hacking in through
the broadband internet?

Thanks, Allison
Click to expand...

Two very interesting questions, Allison!

1. To make sure that a firewall program on the laptop isn't blocking
access, un-install (don't just disable) the firewall program. Note
that recent antivirus programs from Norton and PC-cillin include
firewall components.

Once you're sure that a firewall isn't causing the access problem,
making these settings on the laptop should fix it:

A. Enable the Guest account for network access by typing this line at
a command prompt:

net user guest /active:yes

B. Remove any network password from the Guest account:

B1. Click Start | Run.
B2. Type "control userpasswords2" in the box and click OK:
B3. Click Guest.
B4. Click Reset Password.
B5. Click OK without entering a new password.

2. Yes, the router provides enough security. It assigns private IP
addresses to your computers, and those addresses are inaccessible by
other people on the Internet. It only lets through Internet traffic
that you've requested. No one can hack into your computers through
your broadband Internet connection, even if you un-install firewall
programs, as I suggested, during troubleshooting.
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com
 
Ian said:
XP home uses "Guest" file-sharing.

If the remote username trying to access a share doesn't have an equivalent
user-account on the machine hosting the share, then the user is connected as
Guest. If a matching account DOES exist, then they are connected as their own
username.

The password-issue arises in that where there is no account-match, the Guest
password must be supplied. (assuming there is one, of course, by default it's
blank)

However, if there IS a matching account on the host computer, then the Guest
password won't be accepted - not even if it's correctly given - only the
password for the matching account will do.

When I say 'Guest' I don't mean the Guest option on the Welcome Screen by
the way. There is a real user-account called Guest, this is what's
referred-to here.

Hope this helps, it should now be apparent where to look for the
authentication-failure.
Click to expand...

Ian, I've tried, but I can't duplicate the behavior that you describe
when accessing an XP Home computer over a network.

In my testing, XP Home requests a password from a user on another
computer if, and only if:

1. The Guest account on XP Home is disabled for network access. In
that case, no password can satisfy the request.

or:

2. The Guest account on XP home is enabled for network access and has
a non-blank network password. In that case, only the network password
for the Guest account can satisfy the request.

I can't find any case in which the password for any other user account
can satisfy the request.

Here's how I think it works. XP Home always validates an access
request from a user on another computer as if it came from the Guest
account, regardless of the requester's actual account name. XP Home
doesn't look for matching accounts and passwords. Accounts on the
computer that's requesting access have no role in XP Home's
authentication process. It makes no difference whether there are
matching account names on the two computers. If there are matching
account names, it makes no difference whether either of them has a
password, or whether the passwords match.

Please comment on the above. If you can give a list of steps that
produce the behavior that you describe, I'll be happy to test them on
my computers. There's a registry value called "ForceGuest" that might
be relevant, but I think that it only applies in XP Pro. That value,
which can also be changed in Local Security Settings in XP Pro, is in
this registry key:

HLM\System\CurrentControlSet\Control\Lsa
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com
 
Back
Top