Network Logon Failu User account restriction

I have two computers on my home network; let's just call
them computers A and B.

I can ping from A to B and from B to A.
I can also logon to B from A.
I can see but cannot not logon to A from computer B, I get
the error - Logon Failu User Account restriction.

The computers are in the same workgroup; why can I go one
way but not the other? I could go both ways previously and
don't recall changing any settings on either machine.

Any suggestions are appreciated.

On Sun, 15 Aug 2004 07:40:39 -0700, "BlondJeff"
wrote:

I have two computers on my home network; let's just call
them computers A and B.

I can ping from A to B and from B to A.
I can also logon to B from A.
I can see but cannot not logon to A from computer B, I get
the error - Logon Failu User Account restriction.

The computers are in the same workgroup; why can I go one
way but not the other? I could go both ways previously and
don't recall changing any settings on either machine.

Any suggestions are appreciated.

Jeff,

On any XP Pro computer, check to see if Simple File Sharing (Control Panel -
Folder Options - View - Advanced settings) is enabled or disabled. With XP Pro,
you need to have SFS properly set on each computer.

With XP Pro, if SFS is disabled, check the Local Security Policy (Control Panel
- Administrative Tools). Under Local Policies - Security Options, look at
"Network access: Sharing and security model", and ensure it's set to "Classic -
local users authenticate as themselves".

With XP Pro, if you set the Local Security Policy to "Guest only", make sure
that the Guest account is enabled, thru Local User Manager (Start - Run -
"lusrmgr.msc"), and has an identical, non-blank, password on all computers. If
"Classic", setup and use a common non-Guest account, with identical, non-blank,
password on all computers.

For XP Home, OR for XP Pro with Simple File Sharing enabled, make sure that the
Guest account is enabled (for XP Pro, thru Local User Manager (Start - Run -
"lusrmgr.msc")), on each computer.

Do either of the computers have a software firewall (ICF or third party)? If
so, you need to configure them for file sharing, by opening ports TCP 139, 445
and UDP 137, 138, 445, and / or by identifying the other computers as present in
the Local (Trusted) zone. Firewall configurations are a very common cause of
(network) browser, and file sharing, problems.

More about file sharing, between all different versions of Windows:
http://www.microsoft.com/downloads/details.aspx?FamilyID=87c0a6db-aef8-4bef-925e-7ac9be791028&DisplayLang=en

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

-----Original Message-----
On Sun, 15 Aug 2004 07:40:39 -0700, "BlondJeff"
wrote:

I have two computers on my home network; let's just call
them computers A and B.

I can ping from A to B and from B to A.
I can also logon to B from A.
I can see but cannot not logon to A from computer B, I
get
the error - Logon Failu User Account restriction.

The computers are in the same workgroup; why can I go
one
way but not the other? I could go both ways previously
and
don't recall changing any settings on either machine.

Any suggestions are appreciated.

Jeff,

On any XP Pro computer, check to see if Simple File
Sharing (Control Panel -
Folder Options - View - Advanced settings) is enabled or
disabled. With XP Pro,
you need to have SFS properly set on each computer.

With XP Pro, if SFS is disabled, check the Local Security
Policy (Control Panel
- Administrative Tools). Under Local Policies - Security
Options, look at
"Network access: Sharing and security model", and ensure
it's set to "Classic -
local users authenticate as themselves".

With XP Pro, if you set the Local Security Policy
to "Guest only", make sure
that the Guest account is enabled, thru Local User
Manager (Start - Run -
"lusrmgr.msc"), and has an identical, non-blank, password
on all computers. If
"Classic", setup and use a common non-Guest account, with
identical, non-blank,
password on all computers.

For XP Home, OR for XP Pro with Simple File Sharing
enabled, make sure that the
Guest account is enabled (for XP Pro, thru Local User
Manager (Start - Run -
"lusrmgr.msc")), on each computer.

Do either of the computers have a software firewall (ICF
or third party)? If
so, you need to configure them for file sharing, by
opening ports TCP 139, 445
and UDP 137, 138, 445, and / or by identifying the other
computers as present in
the Local (Trusted) zone. Firewall configurations are a
very common cause of
(network) browser, and file sharing, problems.

More about file sharing, between all different versions
of Windows:
http://www.microsoft.com/downloads/details.aspx?
FamilyID=87c0a6db-aef8-4bef-925e-
7ac9be791028&DisplayLang=en

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a
bad thing.
.

Chuck,

You are sharp! I had disabled the Quest account on my XP
Pro. machine for additional security. I enabled the
account and am "Networked" again.

Thanks,

Jeffrey
aka: BlondJeff

On Sun, 15 Aug 2004 15:26:30 -0700, "BlondJeff"
wrote:

Chuck,

You are sharp! I had disabled the Quest account on my XP
Pro. machine for additional security. I enabled the
account and am "Networked" again.

Thanks,

Jeffrey
aka: BlondJeff

Excellent, Jeffrey. Thanks for the update!

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

I asume that computer A is runnig Windows XP. aiaf this is the case then the
problem is the Local Security policy. Go to the Local Security policy. On the
top right pane R-click on Security Sttings and select Import policy. When the
next window opens duble click on setup security.inf This install the correct
template
and allow you to connect to computer A from computer B providing you have
the correct permissions and accounts setup on both PC's

"BlondJeff" wrote:

I have two computers on my home network; let's just call
them computers A and B.

I can ping from A to B and from B to A.
I can also logon to B from A.
I can see but cannot not logon to A from computer B, I get
the error - Logon Failu User Account restriction.

The computers are in the same workgroup; why can I go one
way but not the other? I could go both ways previously and
don't recall changing any settings on either machine.

Any suggestions are appreciated.