Re: Login failed for Server\Guest

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Sue Hoegemeier (Sue_H_at_nomail.please)
Date: 02/15/05 

Date: Tue, 15 Feb 2005 06:41:33 -0700

No problem...I just didn't want the poster or anyone
following to get confused! As I posted back, the issue hit
the second time around would be different as the login
failed for Administrator not guest. Even though it wasn't
explained which version of XP was used on the second case,
it would likely have been XP Pro without simple file sharing
enabled and consequently more likely related to security
settings.

-Sue

On Tue, 15 Feb 2005 04:13:27 GMT,
petery@online.microsoft.com (Peter Yang [MSFT]) wrote:

>Hello Sue,
>
>I agree with you that WinXP home has this issue because of simple file
>sharing. I mean that it is not a limitation in Win2000. It shall work the
>same as WinXP pro based on my test. Sorry for the confustion brought. :-)
>
>Best Regards,
>
>Peter Yang
>MCSE2000/2003, MCSA, MCDBA
>Microsoft Online Partner Support
>
>When responding to posts, please "Reply to Group" via your newsreader so
>that others may learn and benefit from your issue.
>
>=====================================================
>
>This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
>
>
>--------------------
>| From: Sue Hoegemeier <Sue_H@nomail.please>
>| Subject: Re: Login failed for Server\Guest
>| Date: Mon, 14 Feb 2005 07:44:48 -0700
>| Message-ID: <c6e111poj51vkc5a37vs1kjbq92c46f2g6@4ax.com>
>| References: <esy#R5JCFHA.3592@TK2MSFTNGP11.phx.gbl>
><k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@4ax.com>
><#5wLGfLCFHA.1296@TK2MSFTNGP10.phx.gbl>
><gg8001d3s2nhf3kjd1i61srhmh5264arvc@4ax.com>
><eUzy8D9DFHA.936@TK2MSFTNGP12.phx.gbl>
><pgtqGQmEFHA.3900@TK2MSFTNGXA01.phx.gbl>
>| X-Newsreader: Forte Agent 2.0/32.652
>| MIME-Version: 1.0
>| Content-Type: text/plain; charset=us-ascii
>| Content-Transfer-Encoding: 7bit
>| Newsgroups: microsoft.public.sqlserver.connect
>| NNTP-Posting-Host: 0-2pool82-42.nas33.thornton1.co.us.da.qwest.net
>67.4.82.42
>| Lines: 1
>| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
>| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.sqlserver.connect:3422
>| X-Tomcat-NG: microsoft.public.sqlserver.connect
>|
>| Peter,
>| Not necessarily. In your testing, I would guess you are
>| using XP Pro and do not have simple file sharing enabled.
>| There are scenarios with XP where you are authenticated as
>| guest and the use of the same account/password does not
>| work. Refer to the following knowledge base article:
>| SQL Server clients are authenticated as guests if Simple
>| File Sharing is enabled
>| http://support.microsoft.com/?id=831133
>|
>| -Sue
>|
>| On Mon, 14 Feb 2005 07:08:38 GMT,
>| petery@online.microsoft.com (Peter Yang [MSFT]) wrote:
>|
>| >Hello Maer,
>| >
>| >I think it is not a limitation in Windows 2000. Based on my test, I
>could
>| >access SQL server on Win2000 server by using Windows authenctication if
>I
>| >use same password for Administrator account on both Win2000 and WinXP
>| >computers. I suggest that you check security policy settings on both
>| >computers to see if they match:
>| >
>| >1. Run gpedit.msc
>| >
>| >2. Check Computer configuration->Windows settings->Security
>Settings->Local
>| >Policies->Security Options and make sure the following settings:
>| >
>| >Digitally sign client communication (always) Not defined
>| >
>| >Digitally sign client communication (when possible) Not defined
>| >
>| >Digitally sign server communication (always) Not defined
>| >
>| >Digitally sign server communication (when possible) Not defined
>| >
>| >LAN Manager Authentication Level Not defined
>| >
>| >Secure channel: Digitally encrypt or sign secure channel data (always)
>Not
>| >defined
>| >
>| >Secure channel: Digitally encrypt secure channel data (when possible)
>Not
>| >defined
>| >
>| >Secure channel: Digitally sign secure channel data (when possible) Not
>| >defined
>| >
>| >Secure channel: Require strong (Windows 2000 or later) session key Not
>| >defined
>| >
>| >3. Check Computer configuration->Windows settings->Security
>Settings->Local
>| >Policies->User Rights assigment, and make sure Deny access this computer
>| >from network is not configured.
>| >
>| >Thanks & Regards,
>| >
>| >Peter Yang
>| >MCSE2000/2003, MCSA, MCDBA
>| >Microsoft Online Partner Support
>| >
>| >When responding to posts, please "Reply to Group" via your newsreader so
>| >that others may learn and benefit from your issue.
>| >
>| >=====================================================
>| >
>| >This posting is provided "AS IS" with no warranties, and confers no
>rights.
>| >
>| >
>| >
>| >
>| >--------------------
>| >| From: "Maer" <maer@auditleverage.com>
>| >| References: <esy#R5JCFHA.3592@TK2MSFTNGP11.phx.gbl>
>| ><k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@4ax.com>
>| ><#5wLGfLCFHA.1296@TK2MSFTNGP10.phx.gbl>
>| ><gg8001d3s2nhf3kjd1i61srhmh5264arvc@4ax.com>
>| >| Subject: Re: Login failed for Server\Guest
>| >| Date: Thu, 10 Feb 2005 19:33:17 -0500
>| >| Lines: 87
>| >| X-Priority: 3
>| >| X-MSMail-Priority: Normal
>| >| X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>| >| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>| >| X-RFC2646: Format=Flowed; Original
>| >| Message-ID: <eUzy8D9DFHA.936@TK2MSFTNGP12.phx.gbl>
>| >| Newsgroups: microsoft.public.sqlserver.connect
>| >| NNTP-Posting-Host: pcp08367474pcs.lndsd201.pa.comcast.net 68.42.29.253
>| >| Path:
>|
>>TK2MSFTNGXA01.phx.gbl!cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP1
>2
>| >phx.gbl
>| >| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.sqlserver.connect:3409
>| >| X-Tomcat-NG: microsoft.public.sqlserver.connect
>| >|
>| >| Thank you, Sue. Your suggestion seems to be the way to go.
>| >|
>| >| I have noticed that when I try to log in using Windows
>Authentication
>| >to
>| >| a Windows 2000 machine from my XP machine, it tries to log me in as
>| >| "Server\Administrator" and, of course, fails. My account is part of
>the
>| >| Administrator's group. However, the other way around (from Win 2000 to
>| >XP)
>| >| works fine.
>| >|
>| >| Is there a limitation in Windows 2000 too?
>| >|
>| >| Thanks again,
>| >| Maer
>| >|
>| >|
>| >|
>| >| "Sue Hoegemeier" <Sue_H@nomail.please> wrote in message
>| >| news:gg8001d3s2nhf3kjd1i61srhmh5264arvc@4ax.com...
>| >| > Hi Maer,
>| >| > You can enable the guest account but that's a security risk
>| >| > - especially if exposed to the outside world. For SQL
>| >| > Server, although Windows Authentication is more secure than
>| >| > SQL Authentication, I'd probably use that option instead of
>| >| > enabling the guest account. Make sure to turn on security
>| >| > audits, limit the number of SQL logins and make sure all SQL
>| >| > logins have strong passwords - mixed case, alpha numeric
>| >| > with special characters, no known words, etc.
>| >| >
>| >| > -Sue
>| >| >
>| >| > On Tue, 1 Feb 2005 18:44:54 -0500, "Maer"
>| >| > <maer@auditleverage.com> wrote:
>| >| >
>| >| >> Thank you, Sue!
>| >| >>
>| >| >> That clarifies so much! Would I be right in assuming that using
>| >| >> windows
>| >| >>authentication is not an option when logging in remotely to Xp Home
>| >since
>| >| >>it
>| >| >>always uses Guest? Is there a work-around?
>| >| >>
>| >| >> Maer
>| >| >>
>| >| >>
>| >| >>"Sue Hoegemeier" <Sue_H@nomail.please> wrote in message
>| >| >>news:k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@4ax.com...
>| >| >>> With XP home, authentication is done using the guest account
>| >| >>> as simple file sharing is always enabled on XP Home. Refer
>| >| >>> to the following for more info:
>| >| >>> SQL Server clients are authenticated as guests if Simple
>| >| >>> File Sharing is enabled
>| >| >>> http://support.microsoft.com/?id=831133
>| >| >>>
>| >| >>> -Sue
>| >| >>>
>| >| >>> On Tue, 1 Feb 2005 15:42:45 -0500, "Maer"
>| >| >>> <maer@auditleverage.com> wrote:
>| >| >>>
>| >| >>>> Hi - I have two computers, one running Xp Pro and one Xp Home.
>I
>| >| >>>> created
>| >| >>>>a windows user account on both machines with the same password. I
>| >added
>| >| >>>>those accounts to SQL Server on both machines and I want to be
>able to
>| >| >>>>connect to each other using a trusted connection.
>| >| >>>>
>| >| >>>> If I try to remotely connect to the Xp Pro machine from the
>Home
>| >| >>>> machine
>| >| >>>>using windows authentication, everything works fine. But, if I try
>to
>| >| >>>>remotely connect to the Home machine it says that login failed for
>| >| >>>>Server\Guest. My understanding is that it tries to log in as guest
>if
>| >| >>>>the
>| >| >>>>windows account is not found.
>| >| >>>>
>| >| >>>> Why does it work on one computer but not the other? Is it
>because
>| >it
>| >| >>>> is
>| >| >>>>Home edition? Is there something else I need to do?
>| >| >>>>
>| >| >>>> BTW, standard authentication works fine on both machines and
>the
>| >| >>>> Guest
>| >| >>>>account is turned off.
>| >| >>>>
>| >| >>>> Thanks,
>| >| >>>> Maer
>| >| >>>>
>| >| >>>
>| >| >>
>| >| >
>| >|
>| >|
>| >|
>|
>|