Trouble adding user or group

Ok, on two of my Home Lan nodes (one is a desktop and other a laptop)
Both running WinXP pro sp3.
I have the following done on BOTH:
1. Created logon passwords for each (desktop & laptop) owner user account.
2. Set simple file sharing OFF, i.e open Explore-Tools-Folder-View
and scrolled down to Use Simple File Sharing and UNCHECKED this.
3. Made sure these two were installed
Client for MS Networks
File & Print Sharing for MS Networks
Did this by going to
NetworkPlaces-ViewNetworkConnections-MyNetworkConnection
and right clicked- chose properties
4. Rebooted both machines
5. Now when I am booted and logged onto the desktop I can direct my filehandler
to the Network\\SharedFolder location on my Laptop and it does in fact the
pop up and ask me my Laptop password and I can then see the folder contents.
That much works.
HOWEVER, if I log in on my laptop and try to goto the Network\\SharedFolder
location on my desktop I get two scenarios,
1. if I click on the plus + sign of the SharedFolderName I get an
Access Denied msg.
2. if I click on the actual SharedFolderName I get this big long msg that say
"The credentials supplied conflict with an existing set of credentials. Try to close all
network paths and disconnect all network drives connected to the specified server.
Then try to connect this network path again."
Which I do but it does not help. I can tell you one thing that is different on my laptop,
When I go to the user accts-myUserAcct-MangagePasswords (off to the left)
it will not let me add the desktop, in fact it won't let me add anything all the headings
are grayed out ????????????
Got any ideas .

RB wrote:

Ok, on two of my Home Lan nodes (one is a desktop and other a laptop)
Both running WinXP pro sp3.
I have the following done on BOTH:
1. Created logon passwords for each (desktop & laptop) owner user account.
2. Set simple file sharing OFF, i.e open Explore-Tools-Folder-View
and scrolled down to Use Simple File Sharing and UNCHECKED this.
3. Made sure these two were installed
Client for MS Networks
File & Print Sharing for MS Networks
Did this by going to
NetworkPlaces-ViewNetworkConnections-MyNetworkConnection
and right clicked- chose properties
4. Rebooted both machines
5. Now when I am booted and logged onto the desktop I can direct my filehandler
to the Network\\SharedFolder location on my Laptop and it does in fact the
pop up and ask me my Laptop password and I can then see the folder contents.
That much works.
HOWEVER, if I log in on my laptop and try to goto the Network\\SharedFolder
location on my desktop I get two scenarios,
1. if I click on the plus + sign of the SharedFolderName I get an
Access Denied msg.
2. if I click on the actual SharedFolderName I get this big long msg that say
"The credentials supplied conflict with an existing set of credentials. Try to close all
network paths and disconnect all network drives connected to the specified server.
Then try to connect this network path again."
Which I do but it does not help. I can tell you one thing that is different on my laptop,
When I go to the user accts-myUserAcct-MangagePasswords (off to the left)
it will not let me add the desktop, in fact it won't let me add anything all the headings
are grayed out ????????????
Got any ideas .

Make sure both hosts are in the same-named workgroup (doesn't sound like
your hosts are in a domain). See http://support.microsoft.com/kb/307874.
Although it says being in the same workgroup is necessary when using simple
sharing, and despite that you say that you have turned off simple sharing,
this is a troubleshooting step since it is often not necessary to have your
own intranet hosts in different workgroups.

Disabling the Guest account also disables some MS network services; see:

http://technet.microsoft.com/en-us/l.../bb418978.aspx

When not participating in a domain, protection is afforded for the resources
offered by the remote host by using the Guest account because it is NOT an
administrator-level account. The Guest account is also described in the
Microsoft KB article at http://support.microsoft.com/kb/300489. Here they
conflict with their advice above by recommending to NOT disable the Guest
account. However, almost every security scanner checking for hardness of
your host will tell you to disable this account because of default of not
having a password to login. They tell you to create a normal user account
(i.e., a limited user account) instead of using the Guest account. The real
problem is have a Guest account with no password. If you trust your own
intranet hosts that are not on a domain and want to share files between
them, and especially if those intranet hosts are behind a router with NAT
(which has its own firewall), then you don't need to be concern about
possible hacking into your intranet hosts as long as the Guest account has a
password on it.

"Tips for creating a strong password"
http://windowshelp.microsoft.com/Win...3db571033.mspx
(just one scheme for strong passwords; other schemes are also viable)

Also read:
http://windowsitpro.com/article/arti...practices.html
http://www.ghacks.net/2007/12/03/dis...unt-correctly/
http://www.lockergnome.com/windows/2...rs-holy-grail/

Until I read the above, I couldn't figure out why file sharing ceased to
function between my host OS and a guest OS in a virtual machine (and I had
to resort to using VirtualPC's shared folder feature which is part of the VM
Additions install). If you decide to enable the Guest account and turn it
on, be sure to set a STRONG password on it.

Make sure both hosts are in the same-named workgroup

They are in the same workgroup (by previous setup )

Disabling the Guest account also disables some MS network services; see:

Well I checked and the guest acct was not disabled. So I tried to give it
a password but that capability does not show up in it's window (like is does
in my owner acct window) . So then I disabled the guest acct since I
cannot seem to get the lan access going anyhow.
This really is disappointing and at this point I just don't really know what
else to do except go back to unsecure simple file sharing.

RB wrote:

Make sure both hosts are in the same-named workgroup

They are in the same workgroup (by previous setup )

Disabling the Guest account also disables some MS network services; see:

Well I checked and the guest acct was not disabled. So I tried to give it
a password but that capability does not show up in it's window (like is does
in my owner acct window) . So then I disabled the guest acct since I
cannot seem to get the lan access going anyhow.
This really is disappointing and at this point I just don't really know what
else to do except go back to unsecure simple file sharing.

In the Windows Firewall, did you enable the "file & printer sharing"
exclusion? If using a 3rd party firewall (or some other security product
that might regulate network connections), you'll have to find out how to
configure it to allow the proper ports and listening processes on them.

RB wrote:
Ok, on two of my Home Lan nodes (one is a desktop and other a laptop)
Both running WinXP pro sp3.
I have the following done on BOTH:
1. Created logon passwords for each (desktop & laptop) owner user account.
2. Set simple file sharing OFF, i.e open Explore-Tools-Folder-View
and scrolled down to Use Simple File Sharing and UNCHECKED this.
3. Made sure these two were installed
Client for MS Networks
File & Print Sharing for MS Networks
Did this by going to
NetworkPlaces-ViewNetworkConnections-MyNetworkConnection
and right clicked- chose properties
4. Rebooted both machines
5. Now when I am booted and logged onto the desktop I can direct my filehandler
to the Network\\SharedFolder location on my Laptop and it does in fact the
pop up and ask me my Laptop password and I can then see the folder contents.
That much works.
HOWEVER, if I log in on my laptop and try to goto the Network\\SharedFolder
location on my desktop I get two scenarios,
1. if I click on the plus + sign of the SharedFolderName I get an
Access Denied msg.
2. if I click on the actual SharedFolderName I get this big long msg that say
"The credentials supplied conflict with an existing set of credentials. Try to close all
network paths and disconnect all network drives connected to the specified server.
Then try to connect this network path again."
Which I do but it does not help. I can tell you one thing that is different on my laptop,
When I go to the user accts-myUserAcct-MangagePasswords (off to the left)
it will not let me add the desktop, in fact it won't let me add anything all the headings
are grayed out ????????????
Got any ideas .

Sounds to me like you might have a persistent connection to the resource
under a different name or password. You might try issuing the following
commands at the command prompt and then see if you can connect to the
resource with your credentials:

net use /persistent:no
net use * /d

(Answer Yes to disconnect from the resource(s), then try with your
credentials again).

John

In the Windows Firewall, did you enable the "file & printer sharing"
exclusion?

Yes, I did this, but it did not make any difference.

RB wrote:

In the Windows Firewall, did you enable the "file & printer sharing"
exclusion?

Yes, I did this, but it did not make any difference.

Are these hosts connected through a switch? Or through a router?

If a router, some of them permit restricting access to some intranet hosts
by other intranet hosts. That is, just because, for example, everyone in
your family is using the same ISP doesn't mean you trust all those hosts to
let them have access to yours. To that end, you can let the intranet hosts
have Internet access but not to other hosts connected to that router.
Check your router's settings, especially its firewall settings. Or just
reset the router and then power cycle it and retest.

Well everything is run through my linksys router which connects to the cable modem.
So I have a basic NAT as I understand it running with the router being the dhcp host.
But I have changed nothing in the router, it is the same as it was for sometime when
all the nodes were on Simple File Sharing (all nodes could see shared folders then
with no password) . My goal was to implement pswd control on all shared folders
(on all nodes) but my laptop will not allow me the change to type in a pswd but
rather says Access Denied". I did look into the router setup after you wrote this
and did not see anything to that effect. I assume you are talking about where
certain MACs or IPs are blocked (or allowed), but the router setup has none blocked
and allows a "range" of IPs that encompasses all of my dhcp IPs shown. In the
past I had thought of only allowing my MACs till I read that MACs can be cloned
so what good would that do.
Anyhow I still have been unable to implement pswd control on shared items.
I added some "net" return data in my reply to John (this thread) if you would look
at it and comment it would be appreciated.


"VanguardLH" wrote in message ...
RB wrote:

In the Windows Firewall, did you enable the "file & printer sharing"
exclusion?

Yes, I did this, but it did not make any difference.

Are these hosts connected through a switch? Or through a router?

If a router, some of them permit restricting access to some intranet hosts
by other intranet hosts. That is, just because, for example, everyone in
your family is using the same ISP doesn't mean you trust all those hosts to
let them have access to yours. To that end, you can let the intranet hosts
have Internet access but not to other hosts connected to that router.
Check your router's settings, especially its firewall settings. Or just
reset the router and then power cycle it and retest.

RB wrote:

Well everything is run through my linksys router which connects to the cable modem.
So I have a basic NAT as I understand it running with the router being the dhcp host.
But I have changed nothing in the router, it is the same as it was for sometime when
all the nodes were on Simple File Sharing (all nodes could see shared folders then
with no password) . My goal was to implement pswd control on all shared folders
(on all nodes) but my laptop will not allow me the change to type in a pswd but
rather says Access Denied". I did look into the router setup after you wrote this
and did not see anything to that effect. I assume you are talking about where
certain MACs or IPs are blocked (or allowed), but the router setup has none blocked
and allows a "range" of IPs that encompasses all of my dhcp IPs shown. In the
past I had thought of only allowing my MACs till I read that MACs can be cloned
so what good would that do.

No, what you describe is whether or not a particular host can even use the
switch component of the router (i.e., whether it can connect to the Internet
and to other intranet hosts). Not all routers have the feature that I
described where you can decide which intranet hosts could access other
intranet hosts. I had this feature in a D-Link router. When that fried, I
replaced it with a Linksys router but lost that feature.

On host A, you want to have it access a shared folder on host B. Does host
B have a password that you use to login under the account where you elected
to share the folder?

What are the permissions (i.e., which groups are listed) for the shared
folder? Is the Everyone group included and what permissions do they have on
that folder? Are those permissions copied onto the child files & folders?
See http://support.microsoft.com/kb/277644.

Is File and Printer Sharing enabled on both computers?

Yes but SimpleFile&PrintSharing is off

Please disable all the firewalls while you troubleshoot the LAN problems,

The windows firewall has always been disabled. The only reason I referred to the
filewall was the note of the HP drivers being in the exceptions list along with
File and Printer Sharing I could try disabling the
Bitdefender firewall but it has never given me a problem under SimpleFile&PrintSharing
since it allows a ip range of allowed Local Lan address.

Forgot to add to make sure that the Workstation service is running.

I'm wondering if I could just scrap windows networking and buy Laplink for Windows
would that be a secure option ?

RB wrote:
Is File and Printer Sharing enabled on both computers?

Yes but SimpleFile&PrintSharing is off

Please disable all the firewalls while you troubleshoot the LAN problems,

The windows firewall has always been disabled. The only reason I referred to the
filewall was the note of the HP drivers being in the exceptions list along with
File and Printer Sharing I could try disabling the
Bitdefender firewall but it has never given me a problem under SimpleFile&PrintSharing
since it allows a ip range of allowed Local Lan address.

Forgot to add to make sure that the Workstation service is running.

I'm wondering if I could just scrap windows networking and buy Laplink for Windows
would that be a secure option ?

You didn't confirm the all very important status of the Workstation
service. Make sure that the service is set to Automatic start.

Laplink for Windows? You gotta be kidding?!?! I just got a flashback
to DOS and the 1980's!

John

John John wrote:
Please disable all the firewalls while you troubleshoot the LAN problems,

RB wrote:
The windows firewall has always been disabled. The only reason I referred to the
filewall was the note of the HP drivers being in the exceptions list along with
File and Printer Sharing I could try disabling the
Bitdefender firewall but it has never given me a problem under SimpleFile&PrintSharing
since it allows a ip range of allowed Local Lan address.

I repeat, Please disable *ALL* firewalls while you troubleshoot the
problem, that includes the Bitdefender firewall! You have all kinds of
confusing errors and trying to troubleshoot this with firewalls in the
way is not the way to proceed!

John

What error message(s) are you now getting when you try to access the share?

The same, (no difference ) "Access Denied" This is all I have ever gotten
the entire spectrum of attempts I have tried in all scenarios with the exception of
the one "first" try (can't remember the "conflicting" msg but it is one of the previous replies back).
It has never occurred since, but Access Denied is 100% reliable on my laptop everytime
since, and in fact was part of the first scenario in that if I first clicked the plus + sign
prior to clicking the actual sharename I got that one time "conflicting....." msg, but then
if I clicked the actual sharename I also got the Access Denied. But since that one
and only first time I have never gotten anything but Access Denied, sometimes now
if I click the + sign I get nothing (as in nothing happens or shows) and sometimes
when I click the + sign I will get the Access Denied, But "always" when I click the
actual sharename I "always" get the Access Denied.
My Laptop is cursed.

RB wrote:
What error message(s) are you now getting when you try to access the share?

The same, (no difference ) "Access Denied" This is all I have ever gotten
the entire spectrum of attempts I have tried in all scenarios with the exception of
the one "first" try (can't remember the "conflicting" msg but it is one of the previous replies back).
It has never occurred since, but Access Denied is 100% reliable on my laptop everytime
since, and in fact was part of the first scenario in that if I first clicked the plus + sign
prior to clicking the actual sharename I got that one time "conflicting....." msg, but then
if I clicked the actual sharename I also got the Access Denied. But since that one
and only first time I have never gotten anything but Access Denied, sometimes now
if I click the + sign I get nothing (as in nothing happens or shows) and sometimes
when I click the + sign I will get the Access Denied, But "always" when I click the
actual sharename I "always" get the Access Denied.
My Laptop is cursed.

This message:?

"\\Desktop\DesktopSharedFolder is not accessible. You might not have
permission to use this network resource. Contact the administrator of
this server to find out if you have access permissions.
Access is Denied"

Sorry to ask for these confirmations but there are all kinds of network
error messages and subtle differences in the messages can make all the
difference in the world when trouble shooting the network.

I think that your problems are NetBIOS or Master Browser related or that
the permissions on the share are not properly set. Please look in the
Event Log and see if there are Master Browser errors recorded.

1- Make sure that NetBIOS over TCP/IP is enabled (on the network
adapter) on both machines:

Go to Network Connections:
- Right click the local area network connection and click Properties.
- Double click Internet Protocol (TCP/IP).
- Click Advanced.
- Click WINS.
- Click the Enable NetBIOS Over TCP/IP button.

2- Make sure that the TCP/IP NetBIOS Helper service is running on both
machines.

3- Make sure that the Browser service is running on at least one machine.

An almost surefire way of determining if the problem is NetBIOS or
Browser related is to try to connect to the network resource by its IP
address instead of its NetBIOS name. Try connecting to the resource in
the Start Menu Run box, example:

\\192.168.x.x\ShareName\FolderName


Finally, please run this command and give us the results:

net view desktop


John

This message:?

"\\Desktop\DesktopSharedFolder is not accessible. You might not have
permission to use this network resource. Contact the administrator of
this server to find out if you have access permissions.
Access is Denied"

Well you get the above msg if you click on the plus + sign, but if you click
on the actual shared folder name you just only get "Access Denied"

I got this from a command shell, and wondered if it meant anything
|||||||||||||||||||||||||||||||||||||||||||||||||| |||||||||||||||||||||||
net use \\Desktop1\Desktop1Shared

Local name
Remote name \\Desktop1\Desktop1Shared
Resource type Disk
Status Ok
#Opens 0
#Connections 1
The command completed successfully.

|||||||||||||||||||||||||||||||||||||||||||||||||| |||||||||||||||||||||||

I think that your problems are NetBIOS or Master Browser related or that the permissions on the share are not properly set.
Please look in the Event Log and see if there are Master Browser errors recorded.

What or where is that log ? In my Security Log settings it is configured for a log
named C:\WINDOWS\pfirewall.log , but there is no file by that name when I look /

1- Make sure that NetBIOS over TCP/IP is enabled (on the network adapter) on both machines:

Go to Network Connections:
- Right click the local area network connection and click Properties.
- Double click Internet Protocol (TCP/IP).
- Click Advanced.
- Click WINS.
- Click the Enable NetBIOS Over TCP/IP button.

2- Make sure that the TCP/IP NetBIOS Helper service is running on both machines.

Well I did this and tried acces again same Denied msgs (as before)
Maybe I need to reboot both machines (I will try that after I send this)
I checked the Enable Netbios over TCP/IP as you said on both nodes,
before it had the Default checked which was
Use NetBIOS setting from the DHCP server (which would be my router)
Still more of what you asked for below

3- Make sure that the Browser service is running on at least one machine.

I don't know what this is ?

An almost surefire way of determining if the problem is NetBIOS or Browser related is to try to connect to the network resource by
its IP address instead of its NetBIOS name. Try connecting to the resource in the Start Menu Run box, example:
\\192.168.x.x\ShareName\FolderName

I did this and got the below:
start-run \\192.168.1.1\\Desktop\DesktopShared
returns :
\\192.168.1.1 \\Desktop\DesktopShared
The network path was not found
|||||||||||||||||||||||||||||||||||||||||||||||||| |||||||||||||||||||||||||||||||||||||||||||
Finally, please run this command and give us the results:

net view desktop
returns:
Shared resources at Desktop
Share name Type Used as Comment
DesktopShared Disk UNC
HP-C-6180 Print HP Photosmart C6100 series
The command completed successfully
|||||||||||||||||||||||||||||||||||||||||||||||||| |||||||||||||||||||
I have a minor separate question, I read somewhere in the past that
NetBIOS was not a secure protocol. Why would that statement be
said ? I surmise that all of my security depends on my password in this case.