Re: Access to computer in network denied
- From: Chuck <none@xxxxxxxxxxx>
- Date: 1 Apr 2005 22:44:04 -0600
On Fri, 1 Apr 2005 19:07:02 -0800, Bayard <Bayard@xxxxxxxxxxxxxxxxxxxxxxxxx>
wrote:
>
>
>"Chuck" wrote:
>
>> On Wed, 30 Mar 2005 14:39:03 -0800, Bayard <Bayard@xxxxxxxxxxxxxxxxxxxxxxxxx>
>> wrote:
>>
>> >The message:
>> >\\Office is not accessible. You might not have permission to use this
>> >network resource. Contact the administrator of the server to find out if yu
>> >have access permissions.
>> >
>> >Access is denied.
>> >
>> >I have had up to 4 computers (2 XP Pro Desktops, 1 XP Home Laptop, 1
>> >Windows 98 SE Laptop) running both wired and wireless with one or two
>> >routers. All can be made to work OK except for one of the desktops.
>> >
>> >I have reduced the network to the XP Pro Desktop (Office) and the XP Home
>> >Laptop (Laptop) wired with a hub. Firewalls are turned off. Operation is by
>> >Administrator, with no passwords.
>> >
>> >All computers can see Office, Office can see all computers, but no computers
>> >can access Office - see above message. Office can access all computers.
>> >
>> >Ping both ways is OK
>> >
>> >Office Ipconfig:
>> >Ethernet adapter Local Area Connection:
>> > Connection-specific DNS Suffix . :
>> > IP Address. . . . . . . . . . . . : 192.168.1.10
>> > Subnet Mask . . . . . . . . . . . : 255.255.255.0
>> > Default Gateway . . . . . . . . . : 192.168.1.1
>> >
>> >Laptop Ipconfig:
>> >Ethernet adapter Local Area Connection:
>> > Connection-specific DNS Suffix . :
>> > IP Address. . . . . . . . . . . . : 192.168.1.12
>> > Subnet Mask . . . . . . . . . . . : 255.255.255.0
>> > Default Gateway . . . . . . . . . : 192.168.1.1
>> >
>> >Browstat on Office with Office as master browser:
>> >
>> >Status for domain MSHOME on transport
>> >\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
>> > Browsing is active on domain.
>> > Master browser name is: OFFICE
>> >Could not open key in registry, error = 5 Unable to determine build
>> >of browser master: 5
>> > Unable to determine server information for browser master: 5
>> > 1 backup servers retrieved from master OFFICE
>> > \\OFFICE
>> > There are 2 servers in domain MSHOME on transport
>> >\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
>> > There are 1 domains in domain MSHOME on transport
>> >\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
>> >
>> >
>> >Browstat on Laptop with Office as master browser:
>> >
>> >Status for domain MSHOME on transport
>> >\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
>> > Browsing is active on domain.
>> > Master browser name is: OFFICE
>> >Could not open key in registry, error = 5 Unable to determine build
>> >of browser master: 5
>> > Unable to determine server information for browser master: 5
>> > 1 backup servers retrieved from master OFFICE
>> > \\OFFICE
>> > There are 2 servers in domain MSHOME on transport
>> >\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
>> > There are 1 domains in domain MSHOME on transport
>> >\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
>> >
>> >
>> >Browstat on Office with Laptop as master browser:
>> >
>> >Status for domain MSHOME on transport
>> >\Device\NetBT_Tcpip_{BDF2B313-12D8-476E-9FAF-42C3A99DF92D}
>> > Browsing is active on domain.
>> > Master browser name is: LAPTOP
>> >Could not connect to registry, error = 53 Unable to determine build
>> >of browser master: 53
>> > \\\\LAPTOP . Version:05.01 Flags: 51203 NT POTENTIAL MASTER
>> > 1 backup servers retrieved from master LAPTOP
>> > \\LAPTOP
>> > There are 2 servers in domain MSHOME on transport
>> >\Device\NetBT_Tcpip_{BDF2B313-12D8-476E-9FAF-42C3A99DF92D}
>> > Unable to retrieve server list from LAPTOP: 64
>> >
>> >
>> >
>> >Browstat on Laptop with Laptop as master browser:
>> >
>> >Status for domain MSHOME on transport
>> >\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
>> > Browsing is active on domain.
>> > Master browser name is: LAPTOP
>> > Master browser is running build 2600
>> > 1 backup servers retrieved from master LAPTOP
>> > \\LAPTOP
>> > There are 2 servers in domain MSHOME on transport
>> >\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
>> > There are 1 domains in domain MSHOME on transport
>> >\Device\NetBT_Tcpip_{87586191-8740-428C-AB6C-0624CCAC7261}
>> >
>> >I have spent a week trying any combination that I know about, including many
>> >suggestions from this forum to no avail. It must be simple, but won't XP even
>> >let me access the computer?
>> >
>> >Thank you for any help you can give me!
>> >
>> >Bayard
>>
>> Bayard,
>>
>(1)
>> What firewalls are turned off?
>>
>(2)
>> On any XP Pro computer, check to see if Simple File Sharing (Control Panel -
>> Folder Options - View - Advanced settings) is enabled or disabled. With XP Pro,
>> you need to have SFS properly set on each computer.
>>
>(3)
>> On XP Pro with SFS disabled, check the Local Security Policies (Control Panel -
>> Administrative Tools). Under Local Policies - Security Options, look at
>> "Network access: Sharing and security model", and ensure it's set to "Classic -
>> local users authenticate as themselves".
>>
>(4)
>> On XP Pro with SFS disabled, if you set the above Local Security Policy to
>> "Guest only", enable the Guest account, using Start - Run - "cmd" - type "net
>> user guest /active:yes" in the command window. If "Classic", setup and use a
>> common non-Guest account on all computers. Whichever account is used, give it
>> an identical, non-blank password on all computers.
>>
>(5)
>> On XP Pro with Simple File Sharing enabled, make sure that the Guest account is
>> enabled, on each computer. Enable Guest, with Start - Run - "cmd", then type
>> "net user guest /active:yes" in the command window. Ensure that the password
>> for Guest is blank, with Start - Run - "control userpasswords2"; select Guest,
>> click Reset Password, click OK without entering a new password.
>>
>(6)
>> On XP Pro, if you're going to use Guest authentication, check your Local
>> Security Policy (Control Panel - Administrative Tools) - User Rights Assignment,
>> on the XP Pro computer, and look at "Deny access to this computer from the
>> network". Make sure Guest is not in the list. Look at "Access this computer
>> from the network", and make sure that Everyone is in this list.
>>
>> --
>> Cheers,
>> Chuck
>> Paranoia comes from experience - and is not necessarily a bad thing.
>> My email is AT DOT
>> actual address pchuck sonic net.
>
>Thanks for the reply, Chuck.
>To simplfy matters as much as possible, the two computers that I am now
>using are the inaccessable desktop (OFFICE) XP Pro SP2 and another desktop
>(DESKTOP) also running XP Pro SP2. Checks with Ipconfig and Browstat are
>comparable with LAPTOP used for previous data. As mentioned before, all four
>computers see and communicate with each other in several configerations,
>except OFFICE can not be accessed on the network.
>
>In response to your instructions, I have numbered them and give the results
>of the actions below:
>
>(1) Both computers use Windows Firewall and they are disabled.
>
>(2) Both computers normally use Simple File Sharing. Tests were run with
>both enabled and both disabled. No access either way.
>
>(3) Set up per directions and verified. No access
>
>(4) I did not perform this since it requires setting up passwords (which I
>don't use and perfer not to, and dosent seem to be required. Will do so if
>critical.
>
>(5) Set up per directions and verified. No access
>
>(6) Set up, verified, and exercised a number of permutations. No access
>
>Is there any command that resets all (most) registry, et.al. to default
>values?
>All of my other systems have worked "out of the box", but reinstalling SP2,
>and I suspect even XP Pro doesn't reset the problem parameters. I hope
>reformating isn't my only option!!
Bayard,
How did you disable Windows Firewall? Was it thru the Security Center applet,
or by disabling the WF service? Its essential to disable WF thru the SC applet,
never by disabling the service. Better still to enable it, and enable the File
and Printer Sharing exception for the LAN.
There is no command that I know of that resets all (most) registry et al to
default values. There are a lot of values, you have to set them yourself, and
know what you're doing.
You're making a lot of changes, rapidly, one at a time, and testing after each
change. You need to make your changes systematically, and for a reason. You've
been studying some of the other cases here, which is good, but you've been
trying to fix your problem by imitating what we've done in those other cases.
This is not good. It's like going to the pharmacy and getting medicine because
your cough sounds like your neighbors, and his doctor told him to treat it so.
With XP Pro, Simple File Sharing disabled, and Classic network access selected,
you can access a computer thru the network using an administrative account, but
you need an identical, non-blank password on both computers. With XP Home, or
with XP Pro with SFS enabled, you'll have to enable the Guest account (see my
previous instructions), but that will not give you administrative access. With
SFS, anything but the Guest account is useless for network access. This
includes browstat, when the master browser is the other computer.
We need to start with the browstat displays. The browser requires anonymous
access, so look at registry key [HKLM\System\CurrentControlSet\Control\Lsa],
value restrictanonymous on Laptop and Office.
<http://www.microsoft.com/windows2000/techinfo/reskit/en-us/default.asp?url=/windows2000/techinfo/reskit/en-us/regentry/46688.asp>
<http://www.jsifaq.com/subf/tip2600/rh2625.htm>
http://support.microsoft.com/?id=246261
http://support.microsoft.com/?id=296403
The above articles refer to Windows 2000. Remember WinXP is NT V5.1, and Win2K
is NT V5.0.
Have you used the Registry Editor before? If not, it's a scary tool, but it's
pretty simple once you get used to it. Here are a couple articles that might
help:
<http://www.microsoft.com/windowsxp/home/using/productdoc/en/default.asp?url=/windowsxp/home/using/productdoc/en/tools_regeditors.asp>
<http://www.annoyances.org/exec/show/registry>
Just remember to backup the key (create a registry patch) for
[HKLM\System\CurrentControlSet\Control\Lsa] before making any changes, if
appropriate.
After you check / reset restrictanonymous, power both Laptop and Office down.
Once both are powered down, power Office back up. Once Office is powered up,
power Laptop up. Then rerun browstat on each, and let's see the results.
Once you make Office be the master browser, disable SFS, select Classic network
access, AND use a non-Guest account with identical non-blank passwords on both
Laptop and Office, the "error = 5" messages should go away. Then we will look
at the rest of your problems. But make one change at a time, please.
--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
My email is AT DOT
actual address pchuck sonic net.
.
- Follow-Ups:
- Re: Access to computer in network denied
- From: Bayard
- Re: Access to computer in network denied
- References:
- Access to computer in network denied
- From: Bayard
- Re: Access to computer in network denied
- From: Chuck
- Re: Access to computer in network denied
- From: Bayard
- Access to computer in network denied
- Prev by Date: Permissions for network computers don't work
- Next by Date: Re: DHCP Intermittent loss of connection
- Previous by thread: Re: Access to computer in network denied
- Next by thread: Re: Access to computer in network denied
- Index(es):
Relevant Pages
|
Loading
