Network domain usernames and passwords

On Wed, 1 Dec 2004 08:55:03 -0700, "Matt Potter" *email_address_deleted*
wrote:

We are having a problem with xp/2k in out domain. Everything works great
except the fact that when I am logged in as me and try to access some one
else's shared folder (I want it to ask for a username and password) it just
says access denied. Security stuff has been all setup and works great. (If
you login as that user the folder is available to them). What can I do ? Iv
looked all over the place. Help me out here.

Matt,

Is your XP computer XP Pro?

On any XP Pro computer, check to see if Simple File Sharing (Control Panel -
Folder Options - View - Advanced settings) is enabled or disabled. With XP Pro,
you need to have SFS properly set on each computer.

On XP Pro with SFS disabled, check the Local Security Policies (Control Panel -
Administrative Tools). Under Local Policies - Security Options, look at
"Network access: Sharing and security model", and ensure it's set to "Classic -
local users authenticate as themselves".

On XP Pro with SFS disabled, if you set the above Local Security Policy to
"Guest only", enable the Guest account, using Start - Run - "cmd" - type "net
user guest /active:yes" in the command window. If "Classic", setup and use a
common non-Guest account on all computers. Whichever account is used, give it
an identical, non-blank password on all computers.

On XP Home, and on XP Pro with Simple File Sharing enabled, make sure that the
Guest account is enabled, on each computer. Enable Guest with Start - Run -
"cmd", then type "net user guest /active:yes" in the command window.

On XP Pro, if you're going to use Guest authentication, check your Local
Security Policy (Control Panel - Administrative Tools) - User Rights Assignment,
on the XP Pro computer, and look at "Deny access to this computer from the
network". Make sure Guest is not in the list.

Do any of the computers have a software firewall (ICF / WF, or third party)? If
so, you need to configure them for file sharing. Firewall configurations are a
very common cause of (network) browser, and file sharing, problems.

More about file sharing, between all different versions of Windows:
http://www.microsoft.com/downloads/details.aspx?FamilyID=87c0a6db-aef8-4bef-925e-7ac9be791028&DisplayLang=en

Finally, look at registry key [HKLM\System\CurrentControlSet\Control\Lsa], value
restrictanonymous.
http://www.microsoft.com/windows2000/techinfo/reskit/en-us/default.asp?url=/windows2000/techinfo/reskit/en-us/regentry/46688.asp
http://www.jsifaq.com/subf/tip2600/rh2625.htm
http://support.microsoft.com/?id=246261
http://support.microsoft.com/?id=296403

Have you used the Registry Editor before? If not, it's a scary tool, but it's
pretty simple once you get used to it. Here are a couple articles that might
help:
http://www.microsoft.com/windowsxp/home/using/productdoc/en/default.asp?url=/windowsxp/home/using/productdoc/en/tools_regeditors.asp
http://www.annoyances.org/exec/show/registry

Just remember to backup the key (create a registry patch) for
[HKLM\System\CurrentControlSet\Control\Lsa] before making any changes, if
appropriate.

From the Annoyances article:
You can create a Registry patch by opening the Registry Editor, selecting a
branch, and choosing Export from the File menu. Then, specify a filename, and
press OK. You can then view the Registry patch file by opening it in Notepad
(right-click on it and select Edit). Again, just double-click on a Registry
patch file (or use Import in the Registry Editor's File menu) to apply it to the
registry.

If no help so far, provide ipconfig information for each computer, and we'll
diagnose the problem.
Start - Run - "cmd". Type "ipconfig /all c:\ipconfig.txt" into the command
window - Open c:\ipconfig.txt in Notepad, make sure that Format - Word Wrap is
NOT checked!, copy and paste entire contents into your next post. Identify
operating system (by name, version, and SP level) with each ipconfig listing.

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

Matt Potter wrote:
We are having a problem with xp/2k in out domain. Everything works
great except the fact that when I am logged in as me and try to
access some one else's shared folder (I want it to ask for a username
and password) it just says access denied. Security stuff has been all
setup and works great. (If you login as that user the folder is
available to them). What can I do ? Iv looked all over the place.
Help me out here.

Is this a UNC path or a mapped drive? If you try to map a drive to the share
while specifying alternate credentials, does it work? What are the share
permissions, and NTFS permissions, on this folder? I'm presuming the data is
on the server as it should be...

We are having a problem with xp/2k in out domain. Everything works great
except the fact that when I am logged in as me and try to access some one
else's shared folder (I want it to ask for a username and password) it just
says access denied. Security stuff has been all setup and works great. (If
you login as that user the folder is available to them). What can I do ? Iv
looked all over the place. Help me out here.