XP home file and printer sharing

I have networked two computers both running XP home. The main computer has
the modem (dial up) and the printers. The internet can be accessed from the
remote computer as well as the main, but I cannot get file or printer
sharing, even though I have selected both. On the main computer printer
sharing is enabled, but I cannot get access from the remorte computer. On
the remote computer file sharing is enabled, but I cannot get access from the
main computer.

Can anyone help please?

Thanks
--
Gulp

On Sun, 3 Oct 2004 09:13:03 -0700, "Gulp"
wrote:

I have networked two computers both running XP home. The main computer has
the modem (dial up) and the printers. The internet can be accessed from the
remote computer as well as the main, but I cannot get file or printer
sharing, even though I have selected both. On the main computer printer
sharing is enabled, but I cannot get access from the remorte computer. On
the remote computer file sharing is enabled, but I cannot get access from the
main computer.

Can anyone help please?

Thanks

Is this XP SP2, or pre-SP2?

Are you running both Client for Microsoft Networks, and File and Printer Sharing
for Microsoft Networks (Local Area Connection - Properties), on each computer?

Are you running NetBIOS Over TCP/IP (Local Area Connection - Properties - TCP/IP
- Properties - Advanced - WINS) on each computer?

Make sure the browser service is running on each computer. Control Panel -
Administrative Tools - Services. Verify that the Computer Browser, and the
TCP/IP NetBIOS Helper, services both show with Status = Started.

On XP Home, make sure that the Guest account is enabled, on each computer.
Enable Guest with Start - Run - "cmd" - type "net user guest /active:yes" in the
command window.

Do any of the computers have a software firewall (ICF / WF, or third party)? If
so, you need to configure them for file sharing, by opening ports TCP 139, 445
and UDP 137, 138, 445, by enabling the File and Printer Sharing exception, and /
or by identifying the other computers as present in the Local (Trusted) zone.
Firewall configurations are a very common cause of (network) browser, and file
sharing, problems.

From each computer, test shares visibility (use actual name / address of each
computer as appropriate).
Start - Run - "cmd" then type into the command window:
1) net view ThisComputerByName
2) net view ThisComputerByIPAddress
3) net view OtherComputerByName
4) net view OtherComputerByIPAddress
Report visibility of shares / exact error displayed in each test (8 tests
total).

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

this was very helpful. i am still having difficulties.one computer is home
addition the other is prof.
the net view resolves the ip address but gives error 53 on both sides when
the computer name is used.


"Chuck" wrote:

On Sun, 3 Oct 2004 09:13:03 -0700, "Gulp"
wrote:

I have networked two computers both running XP home. The main computer has
the modem (dial up) and the printers. The internet can be accessed from the
remote computer as well as the main, but I cannot get file or printer
sharing, even though I have selected both. On the main computer printer
sharing is enabled, but I cannot get access from the remorte computer. On
the remote computer file sharing is enabled, but I cannot get access from the
main computer.

Can anyone help please?

Thanks

Is this XP SP2, or pre-SP2?

Are you running both Client for Microsoft Networks, and File and Printer Sharing
for Microsoft Networks (Local Area Connection - Properties), on each computer?

Are you running NetBIOS Over TCP/IP (Local Area Connection - Properties - TCP/IP
- Properties - Advanced - WINS) on each computer?

Make sure the browser service is running on each computer. Control Panel -
Administrative Tools - Services. Verify that the Computer Browser, and the
TCP/IP NetBIOS Helper, services both show with Status = Started.

On XP Home, make sure that the Guest account is enabled, on each computer.
Enable Guest with Start - Run - "cmd" - type "net user guest /active:yes" in the
command window.

Do any of the computers have a software firewall (ICF / WF, or third party)? If
so, you need to configure them for file sharing, by opening ports TCP 139, 445
and UDP 137, 138, 445, by enabling the File and Printer Sharing exception, and /
or by identifying the other computers as present in the Local (Trusted) zone.
Firewall configurations are a very common cause of (network) browser, and file
sharing, problems.

From each computer, test shares visibility (use actual name / address of each
computer as appropriate).
Start - Run - "cmd" then type into the command window:
1) net view ThisComputerByName
2) net view ThisComputerByIPAddress
3) net view OtherComputerByName
4) net view OtherComputerByIPAddress
Report visibility of shares / exact error displayed in each test (8 tests
total).

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

On Sun, 3 Oct 2004 10:45:03 -0700, "cmedlock"
wrote:

this was very helpful. i am still having difficulties.one computer is home
addition the other is prof.
the net view resolves the ip address but gives error 53 on both sides when
the computer name is used.

The OP said two XP Home computers, you said one XP Home and one XP Pro. Your
problem could be different.

Please start a new thread, using a descriptive and unique Subject. This will
help others here find your posts, and reply to them, much easier.

Quote the entire error, not just the error number, please.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

Thanks very much for this Chuck. I have made progress and have got access to
one printer from the remote computer but not the other and still no file
sharing.

It is XP with service pack 2 on both computers.
Have checked the client for microsoft networks, NetBIOS over TCP....
Browser service and TCP/IP both show started.
Have enabled Guest.

The main computer has Norton Internet Security and when I entered the IP
address for the main compute on their configuation for network windowr the
remote computer got access to one of the printers (I have 2 on the main
computer).

I have also disabled the Microsoft firewall from both computers.

I am afraid I could not find anything about opening the ports TCP 139, 445
and UDP etc. so havn't been able to do this.

From each computer the results of the test shares are as follows. However,
I can only find a IP address for the main computer. The remote computer has
the option on th properties of "obtain IP address automatically". Is this a
problem? If it is, do I need to assign an IP address to the remote
computer? If so, how?

The results of the net view tests sumarised a

From remote computer:
1. shared resources at computername followed by a list of drives and folders
that are shared. The bottom line is "command completed successfully"
2. Cannot do this as I do not know the IP address
3. List of both printers and some folders. Finished with "command completed
successfully"
4. Exactly the same as 3.

From main computer
1. One of the printers. Folowed by some folders. End with "command
completed successfully"
2. as above
3. System error 5. Access denied
3. Cannot do as I do not know IP address for remote computer.

Thanks again for your help. It is much appreciated.



"Chuck" wrote:

On Sun, 3 Oct 2004 09:13:03 -0700, "Gulp"
wrote:

I have networked two computers both running XP home. The main computer has
the modem (dial up) and the printers. The internet can be accessed from the
remote computer as well as the main, but I cannot get file or printer
sharing, even though I have selected both. On the main computer printer
sharing is enabled, but I cannot get access from the remorte computer. On
the remote computer file sharing is enabled, but I cannot get access from the
main computer.

Can anyone help please?

Thanks

Is this XP SP2, or pre-SP2?

Are you running both Client for Microsoft Networks, and File and Printer Sharing
for Microsoft Networks (Local Area Connection - Properties), on each computer?

Are you running NetBIOS Over TCP/IP (Local Area Connection - Properties - TCP/IP
- Properties - Advanced - WINS) on each computer?

Make sure the browser service is running on each computer. Control Panel -
Administrative Tools - Services. Verify that the Computer Browser, and the
TCP/IP NetBIOS Helper, services both show with Status = Started.

On XP Home, make sure that the Guest account is enabled, on each computer.
Enable Guest with Start - Run - "cmd" - type "net user guest /active:yes" in the
command window.

Do any of the computers have a software firewall (ICF / WF, or third party)? If
so, you need to configure them for file sharing, by opening ports TCP 139, 445
and UDP 137, 138, 445, by enabling the File and Printer Sharing exception, and /
or by identifying the other computers as present in the Local (Trusted) zone.
Firewall configurations are a very common cause of (network) browser, and file
sharing, problems.

From each computer, test shares visibility (use actual name / address of each
computer as appropriate).
Start - Run - "cmd" then type into the command window:
1) net view ThisComputerByName
2) net view ThisComputerByIPAddress
3) net view OtherComputerByName
4) net view OtherComputerByIPAddress
Report visibility of shares / exact error displayed in each test (8 tests
total).

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

Try something that worked for me
On the problem computer
RUN regedit
go to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Contro l\Lsa
click on RestrictAnonymous set value to 0 if it is not already 0
Exit
Reboot

See if i helps

"Gulp" wrote:

I have networked two computers both running XP home. The main computer has
the modem (dial up) and the printers. The internet can be accessed from the
remote computer as well as the main, but I cannot get file or printer
sharing, even though I have selected both. On the main computer printer
sharing is enabled, but I cannot get access from the remorte computer. On
the remote computer file sharing is enabled, but I cannot get access from the
main computer.

Can anyone help please?

Thanks
--
Gulp

On Mon, 4 Oct 2004 12:37:07 -0700, "Gulp"
wrote:

Thanks very much for this Chuck. I have made progress and have got access to
one printer from the remote computer but not the other and still no file
sharing.

It is XP with service pack 2 on both computers.
Have checked the client for microsoft networks, NetBIOS over TCP....
Browser service and TCP/IP both show started.
Have enabled Guest.

The main computer has Norton Internet Security and when I entered the IP
address for the main compute on their configuation for network windowr the
remote computer got access to one of the printers (I have 2 on the main
computer).

I have also disabled the Microsoft firewall from both computers.

I am afraid I could not find anything about opening the ports TCP 139, 445
and UDP etc. so havn't been able to do this.

From each computer the results of the test shares are as follows. However,
I can only find a IP address for the main computer. The remote computer has
the option on th properties of "obtain IP address automatically". Is this a
problem? If it is, do I need to assign an IP address to the remote
computer? If so, how?

The results of the net view tests sumarised a

From remote computer:
1. shared resources at computername followed by a list of drives and folders
that are shared. The bottom line is "command completed successfully"
2. Cannot do this as I do not know the IP address
3. List of both printers and some folders. Finished with "command completed
successfully"
4. Exactly the same as 3.

From main computer
1. One of the printers. Folowed by some folders. End with "command
completed successfully"
2. as above
3. System error 5. Access denied
3. Cannot do as I do not know IP address for remote computer.

Thanks again for your help. It is much appreciated.

Thanks for your feedback. This is a start, but just that.

You did enable Guest using the "net user" command, right? Not from Control
Panel - User Accounts?

Please provide ipconfig information for each computer.
Start - Run - "cmd". Type "ipconfig /all c:\ipconfig.txt" into the command
window - Open c:\ipconfig.txt in Notepad, copy and paste into your next post.

With XP SP2, you need to enable the File and Printer Sharing exception. From
Control Panel - Security Center, select at bottom "Manage Security Settings for
Windows Firewall". From the Exceptions tab, select "File and Printer Sharing".
Edit the FPS exception, making its scope "subnet". If your main computer is
directly connected (dialup), not behind a router, this is very important. Don't
connect to the internet with FPS enabled globally.

With the firewall set, rerun the Net View tests for both computers. The ip
addresses you should see in the ipconfig listings.

Cheers,

Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

Thanks again. I can confirm that I did the guest from the "net user" on both
computers.

The ipconfig for the main is:


Windows IP Configuration



Host Name . . . . . . . . . . . . : Office

Primary Dns Suffix . . . . . . . :

Node Type . . . . . . . . . . . . : Unknown

IP Routing Enabled. . . . . . . . : Yes

WINS Proxy Enabled. . . . . . . . : No



Ethernet adapter Local Area Connection:



Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Desktop
Adapter

Physical Address. . . . . . . . . : 00-10-DC-FE-97-A7

Dhcp Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 192.168.0.1

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . :

The ipconfig for the remote is:
Windows IP Configuration



Host Name . . . . . . . . . . . . : breakfast

Primary Dns Suffix . . . . . . . :

Node Type . . . . . . . . . . . . : Mixed

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No

DNS Suffix Search List. . . . . . : mshome.net



Ethernet adapter Local Area Connection:



Connection-specific DNS Suffix . : mshome.net

Description . . . . . . . . . . . : Realtek RTL8139/810X Family PCI
Fast Ethernet NIC

Physical Address. . . . . . . . . : 00-E0-7D-A5-65-F1

Dhcp Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

IP Address. . . . . . . . . . . . : 192.168.0.2

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.0.1

DHCP Server . . . . . . . . . . . : 192.168.0.1

DNS Servers . . . . . . . . . . . : 192.168.0.1

Lease Obtained. . . . . . . . . . : 07 October 2004 07:37:58

Lease Expires . . . . . . . . . . : 14 October 2004 07:37:58

On the main computer the file and printer sharing exeption was set to
subnet. On the remote it was set to all, so have changed that to subnet.
Also on the remote the file and printer sharing box was not enabled so have
done this.

Hope this helps. I have not tries the thing suggested by Maury yet.



"Chuck" wrote:

On Mon, 4 Oct 2004 12:37:07 -0700, "Gulp"
wrote:

Thanks very much for this Chuck. I have made progress and have got access to
one printer from the remote computer but not the other and still no file
sharing.

It is XP with service pack 2 on both computers.
Have checked the client for microsoft networks, NetBIOS over TCP....
Browser service and TCP/IP both show started.
Have enabled Guest.

The main computer has Norton Internet Security and when I entered the IP
address for the main compute on their configuation for network windowr the
remote computer got access to one of the printers (I have 2 on the main
computer).

I have also disabled the Microsoft firewall from both computers.

I am afraid I could not find anything about opening the ports TCP 139, 445
and UDP etc. so havn't been able to do this.

From each computer the results of the test shares are as follows. However,
I can only find a IP address for the main computer. The remote computer has
the option on th properties of "obtain IP address automatically". Is this a
problem? If it is, do I need to assign an IP address to the remote
computer? If so, how?

The results of the net view tests sumarised a

From remote computer:
1. shared resources at computername followed by a list of drives and folders
that are shared. The bottom line is "command completed successfully"
2. Cannot do this as I do not know the IP address
3. List of both printers and some folders. Finished with "command completed
successfully"
4. Exactly the same as 3.

From main computer
1. One of the printers. Folowed by some folders. End with "command
completed successfully"
2. as above
3. System error 5. Access denied
3. Cannot do as I do not know IP address for remote computer.

Thanks again for your help. It is much appreciated.

Thanks for your feedback. This is a start, but just that.

You did enable Guest using the "net user" command, right? Not from Control
Panel - User Accounts?

Please provide ipconfig information for each computer.
Start - Run - "cmd". Type "ipconfig /all c:\ipconfig.txt" into the command
window - Open c:\ipconfig.txt in Notepad, copy and paste into your next post.

With XP SP2, you need to enable the File and Printer Sharing exception. From
Control Panel - Security Center, select at bottom "Manage Security Settings for
Windows Firewall". From the Exceptions tab, select "File and Printer Sharing".
Edit the FPS exception, making its scope "subnet". If your main computer is
directly connected (dialup), not behind a router, this is very important. Don't
connect to the internet with FPS enabled globally.

With the firewall set, rerun the Net View tests for both computers. The ip
addresses you should see in the ipconfig listings.

Cheers,

Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

On Wed, 6 Oct 2004 12:03:04 -0700, "Gulp"
wrote:

Thanks again. I can confirm that I did the guest from the "net user" on both
computers.

SNIP IPConfigs

On the main computer the file and printer sharing exeption was set to
subnet. On the remote it was set to all, so have changed that to subnet.
Also on the remote the file and printer sharing box was not enabled so have
done this.

Hope this helps. I have not tries the thing suggested by Maury yet.

If FPS was not enabled on Breakfast, then doing that should have definitely made
a difference.

There's nothing of interest in the IPConfigs. Both computers have appropriate
Node Type, so no name resolution problems.

And there are the ip addresses (IPConfig). So please repeat the 8 net view
tests.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

Thanks again for your help. I think enabling the FPS on breakfast did make a
differrence. On the remote (breakfast) I can now see files and folders on
the main, but cannot access them ("access is denied you may not have
permission"). I still cannot see the Canon printer from breakfast, and can
see nothing of Breakfast from the main.

Here are the results of the tests.

From Office
1.
canon i86 print Canon i865
daniel Disk
HP DeskHe Print HP DeskJet 895CXi
Lucas Arts Disk
My Documents Disk
My Files Disk
Share Docs Disk
Command completed successfully.

2. Same as 1 above

3.
System error 5 has occured
access is denied

4.
Same as 3 above.

From remote (breakfast)
1
Brian Disk
daniel Disk
Desktop Disk
Docs and settings Disk
F Disk
My documents Disk
My files Disk
My music Disk
My pictures Disk
Shared docs Disk
Command completed succesfully.

2. As 1 above.

3.
Canon i86
Daniel
HP DeskJet
Lucas Arts
My documents Disk UNC
Myfiles
Shared docs
The command completed successfully.

4. As in 3 above.

Hope this helps.

Many thanks again for your help.

"Chuck" wrote:

On Wed, 6 Oct 2004 12:03:04 -0700, "Gulp"
wrote:

Thanks again. I can confirm that I did the guest from the "net user" on both
computers.

SNIP IPConfigs

On the main computer the file and printer sharing exeption was set to
subnet. On the remote it was set to all, so have changed that to subnet.
Also on the remote the file and printer sharing box was not enabled so have
done this.

Hope this helps. I have not tries the thing suggested by Maury yet.

If FPS was not enabled on Breakfast, then doing that should have definitely made
a difference.

There's nothing of interest in the IPConfigs. Both computers have appropriate
Node Type, so no name resolution problems.

And there are the ip addresses (IPConfig). So please repeat the 8 net view
tests.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

On Sat, 9 Oct 2004 02:23:19 -0700, "Gulp"
wrote:

Thanks again for your help. I think enabling the FPS on breakfast did make a
differrence. On the remote (breakfast) I can now see files and folders on
the main, but cannot access them ("access is denied you may not have
permission"). I still cannot see the Canon printer from breakfast, and can
see nothing of Breakfast from the main.

Here are the results of the tests.

From Office
1.
canon i86 print Canon i865
daniel Disk
HP DeskHe Print HP DeskJet 895CXi
Lucas Arts Disk
My Documents Disk
My Files Disk
Share Docs Disk
Command completed successfully.

2. Same as 1 above

3.
System error 5 has occured
access is denied

4.
Same as 3 above.

From remote (breakfast)
1
Brian Disk
daniel Disk
Desktop Disk
Docs and settings Disk
F Disk
My documents Disk
My files Disk
My music Disk
My pictures Disk
Shared docs Disk
Command completed succesfully.

2. As 1 above.

3.
Canon i86
Daniel
HP DeskJet
Lucas Arts
My documents Disk UNC
Myfiles
Shared docs
The command completed successfully.

4. As in 3 above.

On each computer, from a command window:
"net view office c:\view.txt"
"net view breakfast c:\view.txt"
"net user guest c:\user.txt"
Observe the "" in the second command!!
On each computer, open Notepad, open, copy and paste contents of c:\view, then
c:\user, in turn into your next post.

There's not a lot you do to setup file and printer sharing in XP Home:
1) Setup a share.
2) Designate it accessible (and changeable) by network users.
3) Activate the Guest account.
4) Configure any firewalls.

Was the FPS exception enabled on Office?
Any third party firewall on Breakfast? Ever?

More about file sharing, for all different versions of Windows:
http://www.microsoft.com/downloads/details.aspx?FamilyID=87c0a6db-aef8-4bef-925e-7ac9be791028&DisplayLang=en

Checkout the restrictanonymous values, as Maury suggests. On both computers.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

Thanks again. Here are the results of the six tests:
From office.
1.
Shared resources at office

Brian's Office

Share name Type Used as Comment

-------------------------------------------------------------------------------
Canoni86 Print Canon i865
Daniel Disk
HPDeskJe Print HP DeskJet 895Cxi
LucasArts Disk
My Documents Disk
My Files Disk
SharedDocs Disk
The command completed successfully.

2. This did not work. Message:
System error 5 has occurred
Access is denied.

3.
User name Guest
Full Name
Comment Built-in account for guest access to the
computer/domain
User's comment
Country code 000 (System Default)
Account active Yes
Account expires Never

Password last set 10/3/2004 2:03 PM
Password expires Never
Password changeable 10/3/2004 2:03 PM
Password required No
User may change password No

Workstations allowed All
Logon script
User profile
Home directory
Last logon 10/10/2004 8:50 AM

Logon hours allowed All

Local Group Memberships *Guests
Global Group memberships *None
The command completed successfully.

FRom Breakfast:
1.
Shared resources at office

Brian's Office

Share name Type Used as Comment

-------------------------------------------------------------------------------
Canoni86 Print Canon i865
Daniel Disk
HPDeskJe Print HP DeskJet 895Cxi
LucasArts Disk
My Documents Disk
My Files Disk
SharedDocs Disk
The command completed successfully.

2.
Shared resources at breakfast

Breakfast room

Share name Type Used as Comment

-------------------------------------------------------------------------------
Brian Disk
daniel Disk
Desktop Disk
Documents and Settings Disk
F Disk
My Documents Disk
my files Disk
My Music Disk
My Pictures Disk
SharedDocs Disk
The command completed successfully.

3.
User name Guest
Full Name
Comment Built-in account for guest access to the
computer/domain
User's comment
Country code 000 (System Default)
Account active Yes
Account expires Never

Password last set 10/5/2004 1:13 AM
Password expires Never
Password changeable 10/5/2004 1:13 AM
Password required No
User may change password No

Workstations allowed All
Logon script
User profile
Home directory
Last logon 10/10/2004 8:43 PM

Logon hours allowed All

Local Group Memberships *Guests
Global Group memberships *None
The command completed successfully.

I have chcked the restrictanonymous values and both were set to 0

The FPS exeption is set on both computers.

I recently formated the drive and re-installed Windows and since then there
has never been any third party firewalls on Breakfast.

Thanks again.



"Chuck" wrote:

On Sat, 9 Oct 2004 02:23:19 -0700, "Gulp"
wrote:

Thanks again for your help. I think enabling the FPS on breakfast did make a
differrence. On the remote (breakfast) I can now see files and folders on
the main, but cannot access them ("access is denied you may not have
permission"). I still cannot see the Canon printer from breakfast, and can
see nothing of Breakfast from the main.

Here are the results of the tests.

From Office
1.
canon i86 print Canon i865
daniel Disk
HP DeskHe Print HP DeskJet 895CXi
Lucas Arts Disk
My Documents Disk
My Files Disk
Share Docs Disk
Command completed successfully.

2. Same as 1 above

3.
System error 5 has occured
access is denied

4.
Same as 3 above.

From remote (breakfast)
1
Brian Disk
daniel Disk
Desktop Disk
Docs and settings Disk
F Disk
My documents Disk
My files Disk
My music Disk
My pictures Disk
Shared docs Disk
Command completed succesfully.

2. As 1 above.

3.
Canon i86
Daniel
HP DeskJet
Lucas Arts
My documents Disk UNC
Myfiles
Shared docs
The command completed successfully.

4. As in 3 above.

On each computer, from a command window:
"net view office c:\view.txt"
"net view breakfast c:\view.txt"
"net user guest c:\user.txt"
Observe the "" in the second command!!
On each computer, open Notepad, open, copy and paste contents of c:\view, then
c:\user, in turn into your next post.

There's not a lot you do to setup file and printer sharing in XP Home:
1) Setup a share.
2) Designate it accessible (and changeable) by network users.
3) Activate the Guest account.
4) Configure any firewalls.

Was the FPS exception enabled on Office?
Any third party firewall on Breakfast? Ever?

More about file sharing, for all different versions of Windows:
http://www.microsoft.com/downloads/details.aspx?FamilyID=87c0a6db-aef8-4bef-925e-7ac9be791028&DisplayLang=en

Checkout the restrictanonymous values, as Maury suggests. On both computers.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

On Sun, 10 Oct 2004 01:11:02 -0700, "Gulp"
wrote:

Thanks again. Here are the results of the six tests:

SNIP

I have chcked the restrictanonymous values and both were set to 0

The FPS exeption is set on both computers.

I recently formated the drive and re-installed Windows and since then there
has never been any third party firewalls on Breakfast.

OK, Guest is obviously enabled on both computers. And restrictanonymous is not
the problem.

Look in Local Security Policy (Control Panel - Administrative Tools) at User
Rights Assignment policies. Is Guest included in policy "Deny access to this
computer from the network"? Check the other policies for interesting values
too.

Look in LSP at Security Options policies. What values are there for Network
Access policies "Do not allow anonymous enumeration of SAM accounts", "Do not
allow anonymous enumeration of SAM accounts and shares", and "Let Everyone
permissions apply to anonymous users"?

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

On the remote computer (breakfast) in user rights assignment policies, guest
was included in "deny access to this computer from the network". I have
removed it. Is this right?

On the security options network access policies policies the values are as
follows:
"do not allow anonymous enumeration of SAM accounts" Enabled
"do not allow anonymous enumeration of SAM accounts and shares" Disabled
"Let everyone permissions apply to anonymous users" Disabled.

Do I need to change any of these?

On the main computer I cannot find the Local Security Policy. I have looked
everywhere for it but it doesn't seem to appear.

Hope you can help.

"Chuck" wrote:

On Sun, 10 Oct 2004 01:11:02 -0700, "Gulp"
wrote:

Thanks again. Here are the results of the six tests:

SNIP

I have chcked the restrictanonymous values and both were set to 0

The FPS exeption is set on both computers.

I recently formated the drive and re-installed Windows and since then there
has never been any third party firewalls on Breakfast.

OK, Guest is obviously enabled on both computers. And restrictanonymous is not
the problem.

Look in Local Security Policy (Control Panel - Administrative Tools) at User
Rights Assignment policies. Is Guest included in policy "Deny access to this
computer from the network"? Check the other policies for interesting values
too.

Look in LSP at Security Options policies. What values are there for Network
Access policies "Do not allow anonymous enumeration of SAM accounts", "Do not
allow anonymous enumeration of SAM accounts and shares", and "Let Everyone
permissions apply to anonymous users"?

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

On Wed, 13 Oct 2004 11:09:02 -0700, "Gulp"
wrote:

On the remote computer (breakfast) in user rights assignment policies, guest
was included in "deny access to this computer from the network". I have
removed it. Is this right?

On the security options network access policies policies the values are as
follows:
"do not allow anonymous enumeration of SAM accounts" Enabled
"do not allow anonymous enumeration of SAM accounts and shares" Disabled
"Let everyone permissions apply to anonymous users" Disabled.

Do I need to change any of these?

On the main computer I cannot find the Local Security Policy. I have looked
everywhere for it but it doesn't seem to appear.

Access to Breakfast is the problem, right?

Removing Guest from the Deny list is a start. Next change the anonymous access
policies from Enabled - Disabled - Disabled to Disabled - Enabled - Enabled.

Then do a "net view breakfast" from Office.

Access to Office from Breakfast is not a problem, right?

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.