Re: view workgroup computers--workaround
From: Terry B. (riprap1951_at_comcast.net)
Date: 10/13/04
- Next message: Terry B.: "Re: view workgroup computers--workaround"
- Previous message: John E. Carty: "Re: Net Meeting error message"
- In reply to: Chuck: "Re: view workgroup computers--workaround"
- Next in thread: Terry B.: "Re: view workgroup computers--workaround"
- Messages sorted by: [ date ] [ thread ]
Date: 12 Oct 2004 18:26:38 -0700
Chuck <none@example.net> wrote in message news:<3crmm012vf5chvtbfbka2vo8orvdir0ak0@4ax.com>...
>
> Terry,
> Are your XP computers running Simple, or Advanced (Simple disabled) File
> Sharing? Advanced File Sharing is a Windows 2000 compatibility feature, and
> uses the Guest account, as a backup to a matching non-Guest account with
> identical, non-blank password, for authentication.
>
> On any XP Pro computer, check to see if Simple File Sharing (Control Panel -
> Folder Options - View - Advanced settings) is enabled or disabled. With XP Pro,
> you need to have SFS consistently set on each computer.
>
> On XP Pro with SFS disabled, check the Local Security Policies (Control Panel -
> Administrative Tools). Under Local Policies - Security Options, look at
> "Network access: Sharing and security model", and ensure it's set to "Classic -
> local users authenticate as themselves".
>
> On XP Pro with SFS disabled, if you set the above Local Security Policy to
> "Guest only", enable the Guest account, using Start - Run - "cmd" - type "net
> user guest /active:yes" in the command window. If "Classic", setup and use a
> common non-Guest account on all computers. Whichever account is used, give it
> an identical, non-blank password on all computers.
>
> On XP Home, and on XP Pro with Simple File Sharing enabled, make sure that the
> Guest account is enabled, on each computer. Enable Guest with Start - Run -
> "cmd" - type "net user guest /active:yes" in the command window.
>
> Now, if Guest authentication is a possibility, check the Registry policy
> restrictanonymous.
>
> In addition to any possibilities you might find in other articles, look at
> registry key [HKLM\System\CurrentControlSet\Control\Lsa], value
> restrictanonymous.
> <http://www.microsoft.com/windows2000/techinfo/reskit/en-us/default.asp?url=/windows2000/techinfo/reskit/en-us/regentry/46688.asp>
> <http://www.jsifaq.com/subf/tip2600/rh2625.htm>
>
> The above articles refer to Windows 2000. Remember WinXP is NT V5.1, and Win2K
> is NT V5.0.
>
> Have you used the Registry Editor before? If not, it's a scary tool, but it's
> pretty simple once you get used to it. Here are a couple articles that might
> help:
> <http://www.microsoft.com/windowsxp/home/using/productdoc/en/default.asp?url=/windowsxp/home/using/productdoc/en/tools_regeditors.asp>
> <http://www.annoyances.org/exec/show/registry>
>
> Just remember to backup the key (create a registry patch) for
> [HKLM\System\CurrentControlSet\Control\Lsa] before making any changes, if
> appropriate.
>
> From the Annoyances article:
> You can create a Registry patch by opening the Registry Editor, selecting a
> branch, and choosing Export from the File menu. Then, specify a filename, and
> press OK. You can then view the Registry patch file by opening it in Notepad
> (right-click on it and select Edit). Again, just double-click on a Registry
> patch file (or use Import in the Registry Editor's File menu) to apply it to the
> registry.
>
> And Terry, please don't contribute to the spread and success of email address
> mining viruses. Posting your email address openly will get you more unwanted
> email, than wanted email. Learn to munge your email address properly, to keep
> yourself a bit safer when posting to open forums. Protect yourself and the rest
> of the internet - read this article.
> http://www.mailmsg.com/SPAM_munging.htm
>
> Cheers,
> Chuck
> Paranoia comes from experience - and is not necessarily a bad thing.
To Chuck,
Thanks much for your time; here's my response:
#1: My WLAN consists of 3 machines, all running xp pro, and yes,
they all routinely run with Simple File Sharing disabled.
#2: I went into Administrative Tools and drilled-down to the
"Network access sharing & security model" and its setting; on all
network machines it was already set to Classic--local users
authenticate as themselves. And yes, I've got a "common non-Guest
account on all computers" (mine), which is an administrators group
account and shares an identical password on all machines.
#3: I went into regedit & checked
HKLM\SYSTEM\CurrentControlSet\Control\LSA. On all network machines the
settings are identical ("restrictanonymous" has a DWORD value of 0)
- Next message: Terry B.: "Re: view workgroup computers--workaround"
- Previous message: John E. Carty: "Re: Net Meeting error message"
- In reply to: Chuck: "Re: view workgroup computers--workaround"
- Next in thread: Terry B.: "Re: view workgroup computers--workaround"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|