Xp pro SP1 file share and browsing (detailed)

[Txl]

Hello, here's the summary of my problem :

PC1(Called JC) cannot enter PC2(Called DEBORAH) and DEBORAH can only see
"selected" (ie non system) folders of JC.


Details are as follows.

From JC when I go to show computers in network I can see JC and DEBORAH
but I cannot enter DEBORAH I get the "no rights" message
From DEBORAH I can enter C-root in JC but I cannot enter any "system"
folder, I can browse all "non-system" folders, for example I cannot enter
"windows" "program files" or "documents and settings" but I can enter
"downloads" and all the subdirectories.
On both machine the "guest" account (it's a french XP so it's "invité") is
activated and simple file share is disabled.


JC Config

JC is the internet gateway (internet runs on both machines fine) with IP
of 192.168.0.1 and user "JC" group "BUGG"
nbtstat -n gives me :

JC <00> UNIQUE OK
BUGG <00> Group OK
JC <20> UNIQUE OK
BUGG <1E> Group OK
BUGG <1D> Group OK
...__MSBROWSE__. <01> Group OK

Ping is wroking on both IP and name of PC2



DEBORAH Config

Internet OK, Ping OK on both IP and name, IP 192.168.0.2 and user
"DEBORAH" group "BUGG"

nbtstat -n gives

DEBORAH <00> UNIQUE OK
BUGG <00> Group OK
DEBORAH <20> UNIQUE OK
BUGG <1E> Group OK

So compared to JC I have no BUGG <1D> and no MSBROWSE <01> although the
guest (invité) account is active as I can see by doing a NET USER command.

Thanks for the help

 

[Chuck]

Hello, here's the summary of my problem :

PC1(Called JC) cannot enter PC2(Called DEBORAH) and DEBORAH can only see
"selected" (ie non system) folders of JC.


Details are as follows.

From JC when I go to show computers in network I can see JC and DEBORAH
but I cannot enter DEBORAH I get the "no rights" message
From DEBORAH I can enter C-root in JC but I cannot enter any "system"
folder, I can browse all "non-system" folders, for example I cannot enter
"windows" "program files" or "documents and settings" but I can enter
"downloads" and all the subdirectories.
On both machine the "guest" account (it's a french XP so it's "invité") is
activated and simple file share is disabled.


JC Config

JC is the internet gateway (internet runs on both machines fine) with IP
of 192.168.0.1 and user "JC" group "BUGG"
nbtstat -n gives me :

JC <00> UNIQUE OK
BUGG <00> Group OK
JC <20> UNIQUE OK
BUGG <1E> Group OK
BUGG <1D> Group OK
..__MSBROWSE__. <01> Group OK

Ping is wroking on both IP and name of PC2



DEBORAH Config

Internet OK, Ping OK on both IP and name, IP 192.168.0.2 and user
"DEBORAH" group "BUGG"

nbtstat -n gives

DEBORAH <00> UNIQUE OK
BUGG <00> Group OK
DEBORAH <20> UNIQUE OK
BUGG <1E> Group OK

So compared to JC I have no BUGG <1D> and no MSBROWSE <01> although the
guest (invité) account is active as I can see by doing a NET USER command.

Thanks for the help

Txl,

Since you say you have disabled Simple File Sharing, I presume that you have XP
Pro computers?

Remember the Guest (Invite) account is NOT an admin account, that would explain
DEBORAH access to "non-system" folders only on JC.

With XP Pro, if SFS is disabled, check the Local Security Policy (Control Panel
- Administrative Tools). Under Local Policies - Security Options, look at
"Network access: Sharing and security model", and ensure it's set to "Classic -
local users authenticate as themselves".

With XP Pro, if you set the Local Security Policy to "Guest only", make sure
that the Guest account is enabled, and has an identical, non-blank, password on
all computers. If "Classic", setup and use a common account with identical,
non-blank, password on all computers.

For XP Pro with Simple File Sharing enabled, make sure that the Guest account is
enabled, with identical, non-blank passwords, on each computer.

Here's a Microsoft article that explains it all:
<http://www.microsoft.com/downloads/...db-aef8-4bef-925e-7ac9be791028&DisplayLang=en>

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Txl]

Txl,

Since you say you have disabled Simple File Sharing, I presume that you
have XP
Pro computers?

Remember the Guest (Invite) account is NOT an admin account, that would
explain
DEBORAH access to "non-system" folders only on JC.

So besides creating an account JC on the DEBORAH machine and an account
DEBORAH on the JC machine what can i do ?

With XP Pro, if SFS is disabled, check the Local Security Policy
(Control Panel
- Administrative Tools). Under Local Policies - Security Options, look
at
"Network access: Sharing and security model", and ensure it's set to
"Classic -
local users authenticate as themselves".

Done, it's set to "classic" on both machines"

With XP Pro, if you set the Local Security Policy to "Guest only", make
sure
that the Guest account is enabled, and has an identical, non-blank,
password on
all computers. If "Classic", setup and use a common account with
identical,
non-blank, password on all computers.

I didn't set that to guest only

For XP Pro with Simple File Sharing enabled, make sure that the Guest
account is
enabled, with identical, non-blank passwords, on each computer.

I don't want to have simple sharing since it's too restrictive, i'd like
to be able to do what i want but i don't know how cfor the moment...

Thanks for the help

Here's a Microsoft article that explains it all:
<http://www.microsoft.com/downloads/...db-aef8-4bef-925e-7ac9be791028&DisplayLang=en>

Got that, reading it now...