Re: Cannot Access Workstation or Server Shares from a SBS 2003 Ser

Hello Crina Li,

Thanks for the detailed response. I'm sure it will help get to the bottom of
this.

The registry settings did not match and I have changed them so that they now
match.

The Group Policy edits are not set to the defaults and I want to change them
per your suggestion... but when I try, the option to enable or disable is
greyed out.

Is there perhaps a policy above the policy I'm trying to change that
prevents it from being changed or do I need another regedit to enable the
option to change?

Thanks...

"Crina Li (MSFT)" wrote:

> Hi Phil,
>
> Based on my research, this issue may be caused by SMB signing policy does
> not match between DC and client computers. Please refer to the steps listed
> below:
>
> 1. In the Security Options on a SBS 2003, set the following policies:
>
> You can find the Security Options as following:
>
> 1. Type gpedit.msc in Run.
> 2. In Group Policy Object Editor, expand Computer Configuration | Windows
> Settings | Security Settings | Local Policies.
> 3. Click Security Options.
>
> The default settings of these policies are:
>
> Digitally sign client communications (always) - disabled
> Digitally sign server communications (always)- disabled
> Digitally sign server communications (when possible) - disabled
> LAN Manager Authentication Level set to Send LM and NTLM - use NTLMv2
> session security if negotiated - (default) send LM & NTLM responses
> Secure channel: Digitally encrypt or sign secure channel data (always) -
> disabled
> Secure channel: Require strong (Windows 2000 or later) session key -
> disabled
>
> For your reference, please refer to this Knowledge Base article:
>
> 281648 Error Message: The Account Is Not Authorized to Login from This
> Station
> http://support.microsoft.com/?id=281648
>
> Run the "gpupdate /force" command.
>
> Also, please check the following key:
>
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters
> \enablesecuritysignature =1
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters
> \requiresecuritysignature =0
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanworkstation\param
> eters\enablesecuritysignature =1
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanworkstation\param
> eters\requiresecuritysignature =0
>
> If the setting does not match, modify the key, restart DC.
>
> 2. WARNING: When you enable unencrypted passwords, you allow unencrypted
> (plain text) passwords to be sent across the network when you authenticate
> to an SMB server that requests this option. Anyone using a packet
> monitoring utility on your network, such as Network Monitor, can read your
> password by taking a trace of network traffic.
>
> WARNING: If you use Registry Editor incorrectly, you may cause serious
> problems that may require you to reinstall your operating system. Microsoft
> cannot guarantee that you can solve problems that result from using
> Registry Editor incorrectly. Use Registry Editor at your own risk.
>
> To enable unencrypted passwords, add the following value and data value to
> the following registry key:
> Value Name: EnablePlainTextPassword
> Data Type: REG_DWORD
> Data: 1
> Registry Key
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkStation\Param
> eters
>
> Please refer to this Knowledge Base article:
>
> 224287 Err Msg: System Error 1240 Has Occurred. The Account Is Not
> Authorized
> http://support.microsoft.com/?id=224287
>
> Also, I provide the following KB articles for your reference:
>
> 887429 Overview of Server Message Block signing
> http://support.microsoft.com/?id=887429
>
> 814112 Files on network shares open slowly, opens as read-only, or you
> receive
> http://support.microsoft.com/?id=814112
>
> Hope the information help and I look forward to your reply.
>
> Best regards,
>
> Crina Li (MSFT)
>
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
>
> =====================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> =====================================================
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
> --------------------
> | Thread-Topic: Cannot Access Workstation or Server Shares from a SBS 2003
> Ser
> From: "=?Utf-8?B?UGhpbA==?=" <Phil@xxxxxxxxxxxxxxxxxxxxxxxxx>
> | References: <A5457390-3780-489A-9BB6-3933A158CF54@xxxxxxxxxxxxx>
> <eW1G3KGeFHA.2180@xxxxxxxxxxxxxxxxxxxx>
> <7DC56704-E8E1-44C8-944E-B4C33BFF8BB9@xxxxxxxxxxxxx>
> <I2bWeKKeFHA.2656@xxxxxxxxxxxxxxxxxxxxx>
> | Subject: Re: Cannot Access Workstation or Server Shares from a SBS 2003
> Ser
> | Date: Fri, 24 Jun 2005 07:53:02 -0700
> | | Newsgroups: microsoft.public.windows.server.sbs
> | |
> | Crina Li,
> |
> | 1. Yes, Microsoft Network Client is installed
> | 2. I received system error 1240 "The account is not authorized to log in
> | from this station"
> | 3. ISA is no installed.
> |
> | - Phil
> |
>
>
.

Relevant Pages

  • Re: Writing to the Registry
    ... network, you can use text-based configuration files (e.g., ini text ... read the configuration data out of the data ... it does not support remote registry access. ... SaveSettings saves the settings to the CurrentUser section of the registry, ...
    (microsoft.public.excel.programming)
  • Re: How do YOU manage multiple networks?
    ... The ipaq 4155 ships with RESCO file explore that also has a registry editor. ... you'll setup your lan card for each network and export the ... settings associated with the network back into the registry. ... Then go back to the iPAQ WLAN Wireless Adapter and set the ...
    (microsoft.public.pocketpc)
  • Re: What are these Isass processes?
    ... Does your Registry contain this Key? ... Performance Settings, Advanced tab, Adjust for best ... Google Search on SiSoftware Sandra Agent ... I haven't removed whatever component was handling this 'network'. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Xp home netoworking woes
    ... >> I applaud your curiosity and caution, Steve. ... >> network user should make these changes to network or registry ... >> settings indiscriminately, even when there are network problems. ...
    (microsoft.public.windowsxp.network_web)
  • RE: 0x7c911e58 error
    ... was still using the registry during log off. ... Your computer was not assigned an address from the network (by the DHCP ... Server) for the Network Card with network address 000E3541722C. ...
    (microsoft.public.windowsxp.general)
Loading