No access to win XP home share

  • Thread starter Thread starter reader
  • Start date Start date
R

reader

I have a lingering problem on one Winxp home machuine on a lan with
several XP pro machines and one XP home. (also a linux samba server).

All have good connectivity thanks to recent thread with Chuck and many
visits to Pchuck.net.

The one machine remains inaccessable from the others. (except the
linux machine which has never had that problem).

These are some of the network settings:

netBT over tcp is turned on. C and D drive are setup as shares with
names. \\bjp\bjp-c \\bjp\bjp-d and are set to allow network access and
file manipulation.

All machines on the lan have common users `harry' and `reader'. Both
are admin accounts and have full access set in file sharing of above
shares.

There appears to be no `simple file sharing' switch to turn off on
WinXP home.
===================================================================

One clue is that from the subject machine (bjp). Attempting to access
any other winxp machine invokes a password exchange, and then works as
expected.

No other xp machine requires passwords when accessing a share on another
lan host.

So to summarize: Any attempt to access host bjp from any other winxp
machine on the lan receives the `no access' error.

When accessing remote local lan hosts from bjp, a password exchange is
invoked and then access is allowed.
 
I have a lingering problem on one Winxp home machuine on a lan with
several XP pro machines and one XP home. (also a linux samba server).

All have good connectivity thanks to recent thread with Chuck and many
visits to Pchuck.net.

The one machine remains inaccessable from the others. (except the
linux machine which has never had that problem).

These are some of the network settings:

netBT over tcp is turned on. C and D drive are setup as shares with
names. \\bjp\bjp-c \\bjp\bjp-d and are set to allow network access and
file manipulation.

All machines on the lan have common users `harry' and `reader'. Both
are admin accounts and have full access set in file sharing of above
shares.

There appears to be no `simple file sharing' switch to turn off on
WinXP home.
===================================================================

One clue is that from the subject machine (bjp). Attempting to access
any other winxp machine invokes a password exchange, and then works as
expected.

No other xp machine requires passwords when accessing a share on another
lan host.

So to summarize: Any attempt to access host bjp from any other winxp
machine on the lan receives the `no access' error.

When accessing remote local lan hosts from bjp, a password exchange is
invoked and then access is allowed.
Click to expand...

You can't disable Simple File Sharing in XP Home. Not permanently and reliably,
anyway.

With XP Home, and any computer running SFS, you have Guest-only access. Is
Guest Enabled for network access?
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Activate>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Activate

Are you familiar with the limitations of Guest access?
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Guest>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Guest

Mixing XP Home, XP Pro with SFS, and XP Pro with AFS is a challenge, from the
client and server sharing abilities and requirements. Look at non-Guest
authentication for instance.
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#NonGuest>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#NonGuest

--
Cheers,
Chuck, MS-MVP 2005-2007 [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My email is AT DOT
actual address pchuck mvps org.
 
Chuck said:
You can't disable Simple File Sharing in XP Home. Not permanently and reliably,
anyway.

With XP Home, and any computer running SFS, you have Guest-only access. Is
Guest Enabled for network access?
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Activate>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Activate
Click to expand...

Thanks... but I see no way to do anything concerning `Guest access' on
the computer running XP home. Using the `Sharing and Security' tab of
windows explorer on drive C: I am only able to allow network access
and manipulation or not. As noted in your above cited article. No
mention of `Guest' in any way.

Further under MyComputer/manage/shares Again there appears to be no
options concerning `Guest'

Output of the `net user guest' cmd indicates the account is already
active both on server (bjp Winxp Home) and the client (chub Win XP
pro) that is trying to access it. Also guest is turned on under
control panel/user accounts on both machines.

Any further suggestions will be most appreciated.
 
Thanks... but I see no way to do anything concerning `Guest access' on
the computer running XP home. Using the `Sharing and Security' tab of
windows explorer on drive C: I am only able to allow network access
and manipulation or not. As noted in your above cited article. No
mention of `Guest' in any way.

Further under MyComputer/manage/shares Again there appears to be no
options concerning `Guest'

Output of the `net user guest' cmd indicates the account is already
active both on server (bjp Winxp Home) and the client (chub Win XP
pro) that is trying to access it. Also guest is turned on under
control panel/user accounts on both machines.
Click to expand...

No, Control Panel controls local access.

You have to use "net user Guest /active:yes", to activate Guest for network
access.

If you're getting an "access denied" error, you likely have 1 of 4 problems:
1) No connectivity.
2) A personal firewall blocking access.
3) The Guest account isn't activated.
4) You're trying to access a file / folder that isn't Guest accessible.
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Guest>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Guest

Or try my original, comprehensive Windows Networking Troubleshooting guide:
<http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html>
http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html

--
Cheers,
Chuck, MS-MVP 2005-2007 [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My email is AT DOT
actual address pchuck mvps org.
 
Chuck said:
You have to use "net user Guest /active:yes", to activate Guest for network
access.
Click to expand...

As reported in previous post `net user guest' reports the account is
in active state.
If you're getting an "access denied" error, you likely have 1 of 4 problems:
1) No connectivity.
Click to expand...

Thats out because it works from bjp (the problem mach) to other machines.
2) A personal firewall blocking access.
Click to expand...

No firewalls throughout
3) The Guest account isn't activated.
Click to expand...

As reported ... it is.
4) You're trying to access a file / folder that isn't Guest accessible.
Click to expand...

C drive on bjp is where I'm getting denied. The share is bjp-c. It
has been available in the past at some time.

So apparently none of the nice neat problems are the cause here.
Or try my original, comprehensive Windows Networking Troubleshooting guide:
<http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html>
http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html
Click to expand...

I've been thru most of this as needed and am not finding a method to
uncover the problem.
 
As reported in previous post `net user guest' reports the account is
in active state.


Thats out because it works from bjp (the problem mach) to other machines.


No firewalls throughout


As reported ... it is.


C drive on bjp is where I'm getting denied. The share is bjp-c. It
has been available in the past at some time.

So apparently none of the nice neat problems are the cause here.


I've been thru most of this as needed and am not finding a method to
uncover the problem.
Click to expand...

I'm not saying that the above list is the only possible problems, just that it's
the currently known set of possibilities. I didn't get into the MVP program to
provide advice, I got into it to learn. Maybe you have something new that I can
learn about.

You got 4 options:
1) Live with it.
2) Pay a local professional to come over and root out the problem.
3) Pay me to fly in (not cheap).
4) Keep working on it.

I'm going with #4 right now.

Is share "\\bjp\bjp-c" permissioned to "Guest" (or "Everyone")? Are the LSPs
set properly?
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Help>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Help

Note "most of this" isn't good enough. You have to do "all of this"; what of
this you don't do will probably contain the clue that you need (whose "law"
states that?).

What's the complete and exact error message?
<http://nitecruzr.blogspot.com/2006/01/look-at-complete-detail-in-error.html>
http://nitecruzr.blogspot.com/2006/01/look-at-complete-detail-in-error.html

How recently, in the past, was share "\\bjp\bjp-c" properly accessible? What
changed about that time?

--
Cheers,
Chuck, MS-MVP 2005-2007 [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My email is AT DOT
actual address pchuck mvps org.
 
Chuck said:
Is share "\\bjp\bjp-c" permissioned to "Guest" (or "Everyone")? Are the LSPs
set properly?
Click to expand...

I see no way to permission anything on \\bjp. No LSPs appear
available either.

bjp is Windows XP home machine....is that even possible there?
Under `sharing and security' I have the opportunity to allow network
access and network manipulation of files.... thats it. Or I'm
overlooking some other way to set sharing related things.
 
Sorry In my last post I hit the send button before answering all your
questions:

Chuck said:
What's the complete and exact error message?
Click to expand...

\\bjp is not accessable. You might not have permission to use the
network resource. Contact the administrator of this server to find
out if you have access permissions.

Access is denied

Apparently and error = 5.
How recently, in the past, was share "\\bjp\bjp-c" properly accessible? What
changed about that time?
Click to expand...

Thats kind of a tough one... it may be quite a while. Possibly even
before sp/2 was installed on it.

There isn't alot of reason most of the time for the rest of the
network to talk to \\bjp.

bjp can be pinged but also the output of nbstat -a bjp from \\chub
appears to confirm it can be contacted:


C:\Documents and Settings\Harry>nbtstat -a bjp

Local Area Connection 2:
Node IpAddress: [192.168.0.1] Scope Id: []

NetBIOS Remote Machine Name Table

Name Type Status
 
Sorry In my last post I hit the send button before answering all your
questions:

Chuck said:
What's the complete and exact error message?
Click to expand...

\\bjp is not accessable. You might not have permission to use the
network resource. Contact the administrator of this server to find
out if you have access permissions.

Access is denied

Apparently and error = 5.
How recently, in the past, was share "\\bjp\bjp-c" properly accessible? What
changed about that time?
Click to expand...

Thats kind of a tough one... it may be quite a while. Possibly even
before sp/2 was installed on it.

There isn't alot of reason most of the time for the rest of the
network to talk to \\bjp.

bjp can be pinged but also the output of nbstat -a bjp from \\chub
appears to confirm it can be contacted:


C:\Documents and Settings\Harry>nbtstat -a bjp

Local Area Connection 2:
Node IpAddress: [192.168.0.1] Scope Id: []

NetBIOS Remote Machine Name Table

Name Type Status
---------------------------------------------
BJP <00> UNIQUE Registered
HOME <00> GROUP Registered
BJP <20> UNIQUE Registered
HOME <1E> GROUP Registered
Click to expand...

OK, we're back to BJP running XP Home, and using Guest access only. So you say
that you have

C:\>net user guest
User name Guest
Full Name
Comment Built-in account for guest access to the
computer/domain
User's comment
Country code 000 (System Default)
Account active Yes

With Simple File Sharing, you can't check permissions directly. So let's try
additional tools. NTRights maybe.
<http://nitecruzr.blogspot.com/2005/05/advanced-file-sharing-tweaks-in.html>
http://nitecruzr.blogspot.com/2005/05/advanced-file-sharing-tweaks-in.html

Or CACLS.
<http://nitecruzr.blogspot.com/2005/11/irregularities-in-individual-share.html>
http://nitecruzr.blogspot.com/2005/11/irregularities-in-individual-share.html

Now NBTStat tells you that you are getting NetBT name resolution for BJP
(NETBIOS Name Service). It doesn't really say that you can setup a NetBT
session though (NETBIOS Session Service). Nor that the other computers are
going to, necessarily, use NetBT when establishing a session.
<http://nitecruzr.blogspot.com/2006/07/advanced-windows-networking-using.html>
http://nitecruzr.blogspot.com/2006/07/advanced-windows-networking-using.html

--
Cheers,
Chuck, MS-MVP 2005-2007 [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My email is AT DOT
actual address pchuck mvps org.
 
Chuck said:
OK, we're back to BJP running XP Home, and using Guest access only. So you say
that you have
Click to expand...

One thing I don't quite get here. When a computer running winXP pro
tries to contact a machine running XP home (with guest networking
enabled), what happens? That is, Harry on xp pro is attempting to
access files on bjp running XP home. Harry also has an account on
bjp.


So does the incoming contact get kicked into `guest' user mode?
 
Chuck said:
OK, we're back to BJP running XP Home, and using Guest access only. So you say
that you have

C:\>net user guest
User name Guest
Full Name
Comment Built-in account for guest access to the
computer/domain
User's comment
Country code 000 (System Default)
Account active Yes
Click to expand...

Just for completelness, my output is a little different but still
shows active = yes

C:\>net user guest
User name Guest
Full Name
Comment Built-in account for guest access to the computer/d
omain
User's comment
Country code 000 (System Default)
Account active Yes
Account expires Never

Password last set 5/30/2007 6:57 PM
Password expires Never
Password changeable 5/30/2007 6:57 PM
Password required No
User may change password No

Workstations allowed All
Logon script
User profile
Home directory
Last logon 7/14/2007 7:19 AM

Logon hours allowed All

Local Group Memberships *Guests
Global Group memberships *None
The command completed successfully.
 
One thing I don't quite get here. When a computer running winXP pro
tries to contact a machine running XP home (with guest networking
enabled), what happens? That is, Harry on xp pro is attempting to
access files on bjp running XP home. Harry also has an account on
bjp.


So does the incoming contact get kicked into `guest' user mode?
Click to expand...

The mode is determined by the machine that is being accessed. Access
from any computer to a computer running XP Home uses the Guest
account.
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com
 
One thing I don't quite get here. When a computer running winXP pro
tries to contact a machine running XP home (with guest networking
enabled), what happens? That is, Harry on xp pro is attempting to
access files on bjp running XP home. Harry also has an account on
bjp.


So does the incoming contact get kicked into `guest' user mode?
Click to expand...

It's based on a combination of the client and the server. I wrote this post
section to summarise, some time ago.
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#NonGuest>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#NonGuest

--
Cheers,
Chuck, MS-MVP 2005-2007 [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My email is AT DOT
actual address pchuck mvps org.
 
Back
Top