Re: "Logon Error" Networking 2 XP Computers

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Chuck (none_at_example.net)
Date: 01/04/05 

Date: 4 Jan 2005 16:16:08 -0600

On Tue, 4 Jan 2005 19:59:24 -0000, "J.R." <SpamtrapSargent@Gmail.com> wrote:

>Hello all,
>
>My situation is as follows. I have two machines running Windows XP
>Professional Service Pack 2. I am running both through a router which in
>turn connects to the Internet via a static IP (I must use this configuration
>in order to have two computers connected to the internet at once in college
>halls). I have set my router to assign 192.168.1.2 to one computer, and
>192.168.1.3 to the other computer, using their MAC addresses. The router
>itself has address 192.168.1.1.
>
>I have run the Network Setup wizard on both computers. One is called
>JOHN-DESKTOP and the other is called JOHN-LAPTOP. When I used the wizard,
>both were connected to the router and I used the name HALLS for my network.
>
>On my laptop machine, when I click VIEW WORKGROUP COMPUTERS, I can see both
>my desktop and laptop. What's more, I can browse my desktop's shared files.
>
>On my desktop machine, when I click VIEW WORKGROUP COMPUTERS, I can see both
>my desktop and laptop. However, when I double click my laptop icon, I get
>the following error:
>
>"\\John-laptop is not accessible. You might not have permission to use this
>network resource. Contact the administrator of this server to find out if
>you have access permissions. Logon failure: the user has not been granted
>the requested logon type at this computer."
>
>I have checked Local Area Connection properties for both just to make sure
>everything is identical and it is so, so I do not know why I can share files
>one way but not the other. Any advice is appreciated.
>
>I have also tried JSI Tip 5336: Your Windows XP computer cannot browse
>computers in the workgroup or access shared folders?:
>http://www.jsiinc.com/SUBK/tip5300/rh5336.htm
>
>but it does not work. Any advice is appreciated. In fact, after trying the
>JSI Tip 5336, I could not access files both ways. :-(
>
>Thanks in advance,
>John
>Replace Spamtrap with my name to e-mail me

John,

Start by making sure the browser service is running on one computer. Control
Panel - Administrative Tools - Services. Verify that the Computer Browser, and
the TCP/IP NetBIOS Helper, services both show with Status = Started. Disable
the browser on other computer.

After checking / disabling / enabling as above, power all computers off to reset
the browser settings on each. Then power both computers on again.

The Microsoft Browstat program will show us what browsers (I'm not talking about
Internet Explorer here) you have in your domain / workgroup, at any time.
http://support.microsoft.com/?id=188305

You can download Browstat from either:
<http://www.dynawell.com/reskit/microsoft/win2000/browstat.zip>
<http://rescomp.stanford.edu/staff/manual/rcc/tools/browstat.zip>

Browstat is very small (40K), and needs no install. Just unzip the downloaded
file, copy browstat.exe to any folder in the Path, and run it from a command
window, by "browstat status". Make sure all computers give the same result.

For more information about the browser subsystem (very intricate), see:
http://support.microsoft.com/?id=188001
http://support.microsoft.com/?id=188305
<http://www.microsoft.com/technet/prodtechnol/winntas/deploy/prodspecs/ntbrowse.mspx>

Next, look at registry key [HKLM\System\CurrentControlSet\Control\Lsa], value
restrictanonymous.
<http://www.microsoft.com/windows2000/techinfo/reskit/en-us/default.asp?url=/windows2000/techinfo/reskit/en-us/regentry/46688.asp>
<http://www.jsifaq.com/subf/tip2600/rh2625.htm>
http://support.microsoft.com/?id=246261
http://support.microsoft.com/?id=296403

The above articles refer to Windows 2000. Remember WinXP is NT V5.1, and Win2K
is NT V5.0.

Have you used the Registry Editor before? If not, it's a scary tool, but it's
pretty simple once you get used to it. Here are a couple articles that might
help:
<http://www.microsoft.com/windowsxp/home/using/productdoc/en/default.asp?url=/windowsxp/home/using/productdoc/en/tools_regeditors.asp>
<http://www.annoyances.org/exec/show/registry>

Just remember to backup the key (create a registry patch) for
[HKLM\System\CurrentControlSet\Control\Lsa] before making any changes, if
appropriate.

>From the Annoyances article:
You can create a Registry patch by opening the Registry Editor, selecting a
branch, and choosing Export from the File menu. Then, specify a filename, and
press OK. You can then view the Registry patch file by opening it in Notepad
(right-click on it and select Edit). Again, just double-click on a Registry
patch file (or use Import in the Registry Editor's File menu) to apply it to the
registry.

Finally, check your file sharing setup.

On any XP Pro computer, check to see if Simple File Sharing (Control Panel -
Folder Options - View - Advanced settings) is enabled or disabled. With XP Pro,
you need to have SFS consistently set on each computer.

On XP Pro with SFS disabled, check the Local Security Policies (Control Panel -
Administrative Tools). Under Local Policies - Security Options, look at
"Network access: Sharing and security model", and ensure it's set to "Classic -
local users authenticate as themselves".

On XP Pro with SFS disabled, if you set the above Local Security Policy to
"Guest only", enable the Guest account, using Start - Run - "cmd" - type "net
user guest /active:yes" in the command window. If "Classic", setup and use a
common non-Guest account on all computers. Whichever account is used, give it
an identical, non-blank password on all computers.

On XP Pro, if you're going to use Guest authentication, check your Local
Security Policy (Control Panel - Administrative Tools) - User Rights Assignment,
on the XP Pro computer, and look at "Deny access to this computer from the
network". Make sure Guest is not in the list. Look at "Access this computer
from the network", and make sure that Everyone is in this list.
        
Do any of the computers have a software firewall (ICF / WF, or third party)? If
so, you need to configure them for file sharing. Firewall configurations are a
very common cause of (network) browser, and file sharing, problems. 

-- 
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

Relevant Pages

  • Re: OT udp port 138 BROWSER traffic
    ... > policy is just to drop all ms browser traffic. ... >>router but that is all I know about it. ... send or receive any public network traffic from them. ... issues that are interfering with my connection at their end. ...
    (comp.os.linux.security)
  • Re: Cant access shared files or browse computers in the workgroup.
    ... I’m trying to set up a two-machine network. ... The first thing is you may want to turn the browser off on the notebook. ... Have you used the Registry Editor before? ... You can create a Registry patch by opening the Registry Editor, ...
    (microsoft.public.windowsxp.network_web)
  • Re: WindowsXP network setup problem
    ... >have permission to use this network resource. ... Make sure the browser service is running on one computer. ... Have you used the Registry Editor before? ... You can create a Registry patch by opening the Registry Editor, ...
    (microsoft.public.windowsxp.network_web)
  • Re: Computers cannot see each other
    ... They are connected through a wired network ... The general recommendation is 1 computer with the browser running, ... Have you used the Registry Editor before? ... You can create a Registry patch by opening the Registry Editor, ...
    (microsoft.public.windowsxp.network_web)
  • Re: RISCOS 4 basic networking
    ... > Yes this puzzles me too as a long time Ant User. ... > Given a RiscPC running 4.02 and a broadband router, ... All you have to do is use the Universal Boot and, in the Network config: ... If you can't get the browser to work, ...
    (comp.sys.acorn.networking)