Re: Just a few networking questions.

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Kal525 (Kal525_at_discussions.microsoft.com)
Date: 07/24/04


Date: Fri, 23 Jul 2004 22:21:03 -0700

Yeah, i figured out that the administrator password had to be the same, because it worked when i logged in without a password, since the administrator account on my computer does not have a password (probably time to disable that account).

What doesn't make sense to me is why I don't even get the login option from the FAMILY computer. It just gives me access denied right away without even letting me attempt to login. Even though the FAMILY pc has no password I should still be given an option to login with an account that exists on the share PC, especially since "Limit local account use of blank passwords to console login only" is set to disabled. What does happen though when I look at the session info on the share pc, it says that FAMILY is connected with 0 folders open and under "guest" it says yes. I'm not sure what that means since i definitely wasn't allowed access. This happens to any computer that gets denied access to the share folder, kind of odd.
The only time I WAS able to access the share pc from the FAMILY pc is when I gave Guest NTFS permissions on the share folder so it looks like the FAMILY pc is trying to authenticate as Guest no matter what. Is there a way to turn this off? Simple file sharing is not enabled on the FAMILY pc either. I just tried setting a password on the FAMILY pc and it didn't make a difference, it still tries to authenticate as Guest. It is running Windows XP pro not home.

The last thing i'd like to know is how to deny access to users I create for network access, locally. I don't want them to be able to login into my computer from the console, only if they're accessing the share folder. Is this possible?

Thanks.

"Doug Sherman [MVP]" wrote:

> If the Administrator account on Server has a password, then the
> Administrator account on NAME must have the same password.
>
> Whatever user account/password is used to logon to FAMILY must have a
> duplicate user account/password on NAME.
>
> If you want to become familiar with security, use passwords.
>
> Doug Sherman
> MCSE Win2k/NT4.0, MCSA, MCP+I, MVP
>
> "Kal525" <Kal525@discussions.microsoft.com> wrote in message
> news:59686F4B-EF46-410E-A3C9-82D206A37CA3@microsoft.com...
> > I'm trying to become familiar with Windows XP Pro networking permissions
> and security and I think I have a pretty good understanding except for a few
> things I was hoping someone could shed some light on.
> >
> > The share folder is on my main pc, call it NAME, and I also have a laptop
> (NAME2), a webserver(NAME-SERVER), and another PC (FAMILY).
> >
> > The share folder has share permissions for "Everyone" and read access.
> The NTFS file permissions are at their default.
> >
> > I am able to access the main PC (NAME) from the laptop without entering
> any login or password information because both the laptop and main pc are
> logged in locally with the same username and password. However, when trying
> to connect to the main pc from the server, it prompts me for a login and
> password, even though I'm logged in as an Administrator with a password and
> the share pc has Administrators as part of the NTFS permissions and is
> included in the everyone ACL permissions. Also "Limit local account use of
> blank passwords to console login only" is set to disabled because I have not
> created a password for the administrator account on the share pc. The only
> way I can log into the share pc from the server is by using the same
> username and password that I use to log onto the share pc locally(NAME) and
> the laptop locally. Also trying to loginto the share with Guest and no
> password denies me access for some reason.
> >
> >
> > Aditionally, the FAMILY pc is not even presented with a login/password
> option, I just get a denied access message. The FAMILY pc does not have a
> password, but that should not matter with the "Limit local account use..."
> option I have enabled.
> >
> >
> > Any ideas would be much appreciated, Thanks.
>
>
>



Relevant Pages

  • Re: Problems with some programs now Ive adopted a non-administrative account
    ... the PDF995 documentation does make it clear what permissions are ... > ## PH, London ... >> If you are a home user go ahead and use your administrator account. ...
    (microsoft.public.security)
  • Re: Basic Authentication + IIS 5 + Windows 2000 + Frontpage 2002 = failure?
    ... administrator account -- we should have no problems at least browsing to ... server. ... | authentication dialog box. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Administrator in XP/Home?
    ... that the option for an Administrator account there, ... login seems redundant -- since the OS enables any reboot to start ... The name of the last user who was logged on may be showing in the username field if the option to show the last logged user on is enabled in the registry. ... Also note that this does not work on XP Home, to login with the Administrator account on XP Home you have to logon in Safe Mode. ...
    (microsoft.public.windowsxp.basics)
  • Re: The user has not be granted the requested logon type at this machine
    ... I agree that the user is missing the interactive login portion of the ... As it turns out the Domain Users Group has been added to the Local users ... I did run through the NTFS Permissions with no luck. ... > The only difference I can find is: after you add the account to ...
    (microsoft.public.inetserver.iis.security)
  • Domain Login failure
    ... this login simply ... machine's administrator account. ... My domain username fails. ... anything with the WORK/a.user account and haven't set-up the LOCAL/a.user ...
    (microsoft.public.windowsxp.security_admin)