Re: Host Computer with ICS cannot be accessed

From: Kass (Kass_at_discussions.microsoft.com)
Date: 10/22/04


Date: Fri, 22 Oct 2004 11:49:06 -0700

Chuck,

I have the Main (Host) computer with XP SP1 which is the ICS computer on a
dial up connection. The second computer is Randal (Client), has XP SP2 and
accesses the Internet through ICS on Main. Both computers can access and
share Internet access solely or simultaneously just fine.

When I am at Main, go to My Network Places, I see the Main shared files and
Randy (shared files on Randal). I can double click Randy and see and utilize
the files. Randy was shared by dragging it into the Shared Files folder.
However, on the flip side, when I am at Randal computer, go to My Network
Places, I only see the Randy folder. If I click on View Workgroup Computers
in the Network Tasks pane, I can see both Randal and Main. I can double
click Randal and see the shared files, etc. But when I double click on the
Main icon, I get the hated "....no permissions.... see administrator (which
is me)... access denied" message. Also, if I right click Start, go to
Explore to view the computer details, I can get into the Workgroup on each
computer.... when on Main both Main and Randal will fold out to reveal
contents...when on Randal, Randal will fold out, Main has a plus sign, but
when you click on it, it will not fold out. If you double click on it you
get the dreaded access denied message. I am not trying to access either
program files or windows... just My Documents on each so far. I can get to
the printer on Main, but I had to go the long way and on Randal request to
Add a Printer and then tell it to find Printer on Main. That worked. Now
I'm just down to getting into My Documents on Main (whcih was also shared by
dragging it into the Shared Folder).

I just don't see any third party firewalls... I have CA Ez-Antivirus at home
and no problem with that on my network... I am certain third party firewall
is not an issue with the CA software (whcih is what Main has). Randal
computer has a trial version of Norton Antivirus. I don't think it has
firewall settings, not that I've found so far, but I'll keep looking. Would
firewall on Randal affect access from Randal to Main anyway?

I tried Start:Run: \\main on both computers as you suggested. When on the
Main computer, it accesses Main showing the shared printer, shared Docs,
Printer and Faxes, and Scheduled Tasks folder. When I tried that from
Randal, I get the dreaded access denied message. When on Randal, \\randal
will give me the printer, shared Randy folder, Printer and Faxes icon and
Scheduled Tasks icon.

Chuck, I'm not sure what you meant on "Try mapping a share on Main, from
Main. Can you open a file, From the Share setup on itself?" If you mean
doing the \\main from Start:Run.... yes I can access My Documents from Main.
If you mean something else, I'm being dense.

One quick question on security...just for my peace of mind on my home
network. Does a router provide all the necessary security?

Thanks again for your diligence!

Kass

"Chuck" wrote:

> On Fri, 22 Oct 2004 06:57:02 -0700, "Kass" <Kass@discussions.microsoft.com>
> wrote:
>
> >Chuck,
> >
> >Sorry I took so long to get back. First, I tried "net view" on the Host
> >computer again, and sorry for being such a dweeb, but I think I did it wrong
> >the first time, cuz this time I didn't get any errors and the Host shows that
> >the printer and My Docs are shared (but unlike the Client who showed that
> >"Randal", the Host did not show "Main". I'm at home working today, but can
> >send you those results if you like). I've also suspected firewall issues
> >from the git-go, but I think I've disabled all possible, I even tried the
> >dial up connection. The Host computer is running XP HE w/SP1.... the Client
> >is a new set up running XP HE w/SP2. These are computers at work and are on
> >a dial up connection. I have a DSL/router set up at home and no problems. I
> >think it is ICS! Anyway, the Client w/ SP2 makes it easier to get to
> >firewall settings. On the Host w/ SP1, when I look at the dial up
> >connection, I can check or uncheck the firewall setting to allow others on
> >the internet access to my files, etc... but, on the LAN connection, when I
> >try to look at firewall settings, it isn't checked to not let others see your
> >files, but it is grayed out and I can't get to it. I've wondered from the
> >beginning if there is a firewall setting deep somewhere I can't get to, even
> >to reset.
> >
> >I do web sites on the side and you know how the server gives you access to
> >certain files? Is there a way I can tell my Host server to allow the Client
> >access? Like the Client has a set IP, can you tell the Host to accept that
> >computer only or something?
> >
> >Also, I tried all the other stuff you sent (I really appreciate your time,
> >cuz from all the others out there with problems, you are a busy guy! Also,
> >you explain things well so I can accomplish the goal. Some other postings
> >I've read, the techs aren't very explicit, so THANKS!) I made sure both
> >computers have files Client for MS Networks, file and printer sharing (I even
> >tried the dial up on Host which is a big no no). Both have NetBIOS over
> >TCP/IP checked. Both have Computer Browser and TCP/IP NetBIOS Helper status
> >= started. The Client computer has a trial version of Norton Antivirus. I
> >couldn't find any firewall settings there. The Host has CA EZ-Antivirus. CA
> >has a firewall software, but we don't have that and I don't think
> >EZ-Antivirus has any firewall settings.
> >
> >On the security concerns, since crackers can get your IP, would it be wise
> >to password, and if so, do I have to do individual files or can I password
> >the Host and Client computers by name. Like, to access Randal, you'd have to
> >log in or enter a password? I'm not so concerned abt my home network, for
> >I'm under the assumption that the router will keep others out (is that
> >true?), but I don't not want the work computers breached. I know people at
> >work are spending more and more time on the net leaving that dial up
> >connection wide open, so I'd like to know access is secure.... got any ideas?
> >
> >Man, what a book! Sorry!
> >
> >Kass
>
> Kass,
>
> You've got a lot of questions. That's good - some folks just want to get
> everything working, and leave the details (like protecting themselves properly)
> til later. Or never.
>
> Let's see what we know so far.
>
> You have two computers - Main and Randal, both running XP Home. Main has a
> dialup connection to the internet, and shares internet service with Randal using
> ICS. No prob with internet from either comp.
>
> We don't think any third party firewalls are installed on either computer (but
> keep looking).
>
> You can access shared files on Randal from Main, but can't access shared files
> on Main from Randal. When trying to access Main, you get "...not
> accessible...may not have permission to use the resourse (sic)... access
> denied...".
>
> The "access denied" error can be caused by several things.
> 1) Explicit non-permission on share (not possible for XP Home - except for
> "c"\program files" and "c:\windows").
> 2) Name resolution problem (inability to determine physical address of Main
> when attempting to open a share).
> 3) A firewall explicitly blocking share access, or preventing name resolution.
>
> Have I asked these questions before (forgive me if so):
> - What SP level is on Main and Randal?
> - You are trying to access something other than "c:\program files" or
> "c:\windows" on Main, from Randal, right?
> - What Error Number is presented with the "...access denied..." error?
> - Precisely what action are you taking when "the Client try's to access the
> Host computer"? What program are you in at the time? Be as descriptive as
> possible.
>
> Try mapping a share on Main, from Main. Can you open a file, From The Share
> setup on itself?
>
> From each computer, Start - Run - "\\main" - What happens?
>
> Your security concerns are very valid. Crackers (using deployed botnets) can
> pound on your system (and thousands of others) from a distance. Any weakness
> that you have can be exploited.
>
> Unfortunately, WinXP Home (and Simple File Sharing) doesn't provide you with
> share security, as does WinXP Pro / Win2000 (Advanced File Sharing). If a
> folder / file is shared, it's shared, to everybody who otherwise has access.
>
> With WinXP Home, the best you can do is use a firewall, and a robust armada of
> security software. If you have XP SP2, Windows Firewall will offer you decent
> protection against hostile incoming traffic, but provides no protection against
> installed malware sending outgoing traffic.
>
> With XP pre SP2, Internet Connection Firewall is practically useless. You can
> only disable ICF, disable NBT on your dialup, and install a decent third party
> firewall.
>
> But first, let's get your file sharing working. We can get back to protecting
> yourself (I can rant on that all day) later.
>
> Cheers,
> Chuck
> Paranoia comes from experience - and is not necessarily a bad thing.
>



Relevant Pages

  • Re: Bug with W2K3, SP1, Windows Firewall and FTP
    ... I have firewall enable and I can connect fine. ... the port 21 connection for some reasons. ... The client then gets the ... the FTP sessions (using the command ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: Understanding NAT, Firewalls, TCP/IP
    ... If you have some client behind ... >>a NAT which initiates a connection it shouldn't be a problem. ... They may have a home router firewall, ...
    (comp.lang.java.programmer)
  • Re: setting up RD without a VPN connection ?
    ... >> IP address as seen by the host is the same IP address as seen by going to: ... >>> The client cannot connect to the host. ... Remote Desktop is enabled in the remote tab of the system control panel. ... The host has the windows firewall turned off. ...
    (microsoft.public.windowsxp.work_remotely)
  • Re: is sbs2003 setting up my clients firewall, greyed out
    ... You could look there and see if remote access is enabled and if the user ... configures the Windows Firewall appropriately. ... the client could not connect to the remote computer. ... basically log onto the vpn connection. ...
    (microsoft.public.windows.server.sbs)
  • Re: REMOTE DESKTOP NOT WORKING ANY LONGER PLEASE HELP!
    ... My PC is configured through the firewall as well ... host that has disabled remote desktop function. ... "This computer can't connect to the remote computer. ... Also that same day I noticed an X on my network connection icon ...
    (microsoft.public.windows.terminal_services)