Re: Host Computer with ICS cannot be accessed

From: Chuck (none_at_example.net)
Date: 10/22/04


Date: 22 Oct 2004 14:42:08 -0500

On Fri, 22 Oct 2004 11:47:02 -0700, "Kass" <Kass@discussions.microsoft.com>
wrote:

>Chuck,
>
>I have the Main (Host) computer with XP SP1 which is the ICS computer on a
>dial up connection. The second computer is Randal (Client), has XP SP2 and
>accesses the Internet through ICS on Main. Both computers can access and
>share Internet access solely or simultaneously just fine.
>
>When I am at Main, go to My Network Places, I see the Main shared files and
>Randy (shared files on Randal). I can double click Randy and see and utilize
>the files. Randy was shared by dragging it into the Shared Files folder.
>However, on the flip side, when I am at Randal computer, go to My Network
>Places, I only see the Randy folder. If I click on View Workgroup Computers
>in the Network Tasks pane, I can see both Randal and Main. I can double
>click Randal and see the shared files, etc. But when I double click on the
>Main icon, I get the hated "....no permissions.... see administrator (which
>is me)... access denied" message. Also, if I right click Start, go to
>Explore to view the computer details, I can get into the Workgroup on each
>computer.... when on Main both Main and Randal will fold out to reveal
>contents...when on Randal, Randal will fold out, Main has a plus sign, but
>when you click on it, it will not fold out. If you double click on it you
>get the dreaded access denied message. I am not trying to access either
>program files or windows... just My Documents on each so far. I can get to
>the printer on Main, but I had to go the long way and on Randal request to
>Add a Printer and then tell it to find Printer on Main. That worked. Now
>I'm just down to getting into My Documents on Main (whcih was also shared by
>dragging it into the Shared Folder).
>
>
>
>I just don't see any third party firewalls... I have CA Ez-Antivirus at home
>and no problem with that on my network... I am certain third party firewall
>is not an issue with the CA software (whcih is what Main has). Randal
>computer has a trial version of Norton Antivirus. I don't think it has
>firewall settings, not that I've found so far, but I'll keep looking. Would
>firewall on Randal affect access from Randal to Main anyway?
>
>I tried Start:Run: \\main on both computers as you suggested. When on the
>Main computer, it accesses Main showing the shared printer, shared Docs,
>Printer and Faxes, and Scheduled Tasks folder. When I tried that from
>Randal, I get the dreaded access denied message. When on Randal, \\randal
>will give me the printer, shared Randy folder, Printer and Faxes icon and
>Scheduled Tasks icon.
>
>Chuck, I'm not sure what you meant on "Try mapping a share on Main, from
>Main. Can you open a file, From the Share setup on itself?" If you mean
>doing the \\main from Start:Run.... yes I can access My Documents from Main.
>If you mean something else, I'm being dense.
>
>One quick question on security...just for my peace of mind on my home
>network. Does a router provide all the necessary security?
>
>Thanks again for your diligence!
>
>Kass

Kass,

Improperly configured, and otherwise malfunctioning, firewalls can cause
problems in many different ways. I've seen so many different symptoms resolved
by un installing firewalls.

In some cases, you have to totally un install related software from the
manufacturer. In one case, Norton Personal Firewall (part of Norton Internet
Security) was malfunctioning, and we couldn't get file sharing working until
Norton AntiVirus was also un installed.

The "...access denied..." error can be caused by several different problems.
The browser (on the LAN) provides the display of shares that you see. When you
try to access one of those shares, the computer name in the share has to be
resolved to an address. There could be no problem with the browser (one
component of file sharing), but name resolution (another component) could be
broken, causing the error.

Let's try something else. Just as you did "\\Main" then "\\Randall" from both
computers, do "\\192.168.0.1" then "192.168.0.235". Let's see what happens when
we bypass name resolution.

When I suggested that you "Try mapping a share on Main, from Main. Can you open
a file, From the Share setup on itself?" I was having you treat Main as a server
for itself.

With file sharing, you have a Server (running File and Printer Sharing for
Microsoft Networks (FPSMN), aka lanmanserver) and a Client (running Client for
Microsoft Networks (CMN), aka lanmanworkstation). If either one of those
services is broken, file sharing won't work.

If Main (as a client) can access Randall (server), then you know that both CMN
on Main, and FPSMN on Randal, are operational. If Randal (client) can't access
Main (server), then either CMN on Randal, or FPSMN on Main could be broken. How
do you tell which one is broken?

The best way is to test Main from itself. You know CMN on Main works (other
test), so if you test Mains ability to share with itself, you are only testing
FPSMN on Main.

So I tell you to setup a share on Main, then try and reference that share from
Main. And see what happens.

Your question about security from a router does not have an easy answer. A NAT
router (which is what you buy at Best Buy) provides good protection against
incoming hostile traffic. But it's only ONE ESSENTIAL component in a layered
protection strategy, which is what you absolutely need today.

If you could see your way to using a router (the cost is absolutely worth it!),
we'd both be better off. Is your dialup service PPP compatible?

I'll discuss security in detail after this is over.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.



Relevant Pages

  • Re: [SLE] net monitor
    ... On Tuesday 21 February 2006 8:19 am, Randall R Schulz wrote: ... I need small network monitor, which resides on taskbar and show ... Check the headers for your unsubscription address ... Also check the archives at http://lists.suse.com ...
    (SuSE)
  • Re: No access to SATA drives thru LAN network. Something to do with security?
    ... On my desktop I have 4 SATA drives which I cannot access from my laptop: Windows says I have no permission. ... Run the Network Setup Wizard on all computers, making sure to enable File & Printer Sharing, and reboot. ... If you aren't running a third-party firewall or have an antivirus with "Internet Worm Protection" which acts as a firewall, ... If you need Pro's ability to set fine-grained permissions, turn off Simple File Sharing and create identical user accounts/passwords on all computers. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Host Computer with ICS cannot be accessed
    ... You read my mind on the router thing. ... My home network is a piece of cake... ... >>firewall settings, not that I've found so far, but I'll keep looking. ... and we couldn't get file sharing working until ...
    (microsoft.public.windowsxp.network_web)
  • Re: Printer sharing
    ... Then I have a laptop which connects wirelessly to the router. ... Problems sharing files between computers on a network are generally caused by 1) a misconfigured firewall; or 2) inadvertently running two firewalls such as the built-in Windows Firewall and a third-party firewall; and/or 3) not having identical user accounts and passwords on all Workgroup machines; 4) trying to create shares where the operating system does not permit it. ... If you need Pro's ability to set fine-grained permissions, turn off Simple File Sharing and create identical user accounts/passwords on all computers. ...
    (microsoft.public.windowsxp.general)
  • Re: Home Network
    ... I do have all 3 stations receiving internet now, but, can't get my network set up right. ... I'm using only Windows Firewall. ... Simple File Sharing and create identical user ...
    (microsoft.public.windowsxp.network_web)