File Sharing

microsoft.public.windowsxp.network_web

12 Jun 2005 2:03 PM

Edward

Hi i have two desktops with xp pro and a laptop with xp home. i was able to
share folders with all the comps. Until yesterday when one of the xp pro
machine and the xp home machine cant connect to the main xp pro. it tells me
that i dont have access to this computer. it says the user has not been
granted the requested logon type at this computer. i've been reading other
forums and some say that i need to turn guest account on. It was working
fine before with out guest account. FYI the two xp pro machines are using
simple file sharing. the two xp pro comp can still acces the xp home
computer, and the main xp pro comp and xp home can access the other xp pro
computer.

12 Jun 2005 3:38 PM

Ron Lowe

Show quote Hide quote

"Edward" <Edw***@discussions.microsoft.com> wrote in message
news:D24BD606-8DA3-4603-9825-F71CC7F9FD71@microsoft.com...
> Hi i have two desktops with xp pro and a laptop with xp home. i was able
> to
> share folders with all the comps. Until yesterday when one of the xp pro
> machine and the xp home machine cant connect to the main xp pro. it tells
> me
> that i dont have access to this computer. it says the user has not been
> granted the requested logon type at this computer. i've been reading
> other
> forums and some say that i need to turn guest account on. It was working
> fine before with out guest account. FYI the two xp pro machines are using
> simple file sharing. the two xp pro comp can still acces the xp home
> computer, and the main xp pro comp and xp home can access the other xp
> pro
> computer.

The problem is on the machine you are trying to connect to.
Simple file sharing uses the guest account on the machine you are connecting
to.
This requires that the Guest account is:

1) Enabled; and
2) Granted permissions to log in across the network.

Starting with (1):

The option to turn the Guest account on and off from the control panel is
mis-labeled. It does not actually disable the account when you turn it off
here. It just sets an option on the account called Deny Local Logon.   What
is required is that the guest account is active behind the scenes, which is
what is required for network access.

On XP-Pro:
R-click 'My Computer' | Manage | Local Users and Groups | Users
Check the Guest account does not have a red X on it.
If it does, then double-click the Guest account and un-check 'Account is
Disabled'.

XP Home is missing some essential tools to manipulate user accounts and
permissions. So on XP-Home, we need to use a command. ( This will work on
both XP-Home and XP-Pro ) :

Go to a command prompt ( not start | run ), and type:

   net user guest

The output should contain a line like this:

   Account active               Yes

If it shows the account is not active, then type:

net user guest /active:yes

( It can remain off in the user control panel app, so long as it is enables
as per the above. )

Now, on to (2).
( This is the cause of your error. )

On XP-Pro, start | Run | secpol.msc
Local Policies | User Rights Assignments

Double-click the policy "Access this computer from the network".

Add the 'Everyone' group if it's not there:
   'Add User or group' button;
   Click 'Advanced' button;
   Click 'Find Now'
   Select 'Everyone' on the list, and OK all the way out.

Now double-click the policy "Deny access to this computer from the network".
   Remove the Guest account if it's listed there.

OK your way out of there.
That should grant the necessary permissions.

If the problem machine were XP-Home, then it becomes more difficult.
But it isn't, so I won't go down that road.

--
Best Regards
Ron Lowe
MVP - Windows Networking

12 Jun 2005 10:40 PM

Pharaoh Atem

Show quote Hide quote

Ron Lowe Wrote: > "Edward" <Edw***@discussions.microsoft.com> wrote in message
> news:D24BD606-8DA3-4603-9825-F71CC7F9FD71@microsoft.com...
> > Hi i have two desktops with xp pro and a laptop with xp home. i was > able
> > to
> > share folders with all the comps. Until yesterday when one of the xp > pro
> > machine and the xp home machine cant connect to the main xp pro. it > tells
> > me
> > that i dont have access to this computer.    it says the user has not > been
> > granted the requested logon type at this computer. i've been > reading
> > other
> > forums and some say that i need to turn guest account on. It was > working
> > fine before with out guest account. FYI the two xp pro machines are > using
> > simple file sharing. the two xp pro comp can still acces the xp > home
> > computer, and the main xp pro comp and xp home can access the   other > xp
> > pro
> > computer.
>
> The problem is on the machine you are trying to connect to.
> Simple file sharing uses the guest account on the machine you are > connecting
> to.
> This requires that the Guest account is:
>
> 1) Enabled; and
> 2) Granted permissions to log in across the network.
>
> Starting with (1):
>
> The option to turn the Guest account on and off from the control panel > is
> mis-labeled. It does not actually disable the account when you turn it > off
> here. It just sets an option on the account called Deny Local Logon. > What
> is required is that the guest account is active behind the scenes, > which is
> what is required for network access.
>
> On XP-Pro:
> R-click 'My Computer' | Manage | Local Users and Groups | Users
> Check the Guest account does not have a red X on it.
> If it does, then double-click the Guest account and un-check 'Account > is
> Disabled'.
>
> XP Home is missing some essential tools to manipulate user accounts > and
> permissions. So on XP-Home, we need to use a command. ( This will work > on
> both XP-Home and XP-Pro ) :
>
> Go to a command prompt ( not start | run ), and type:
>
> net user guest
>
> The output should contain a line like this:
>
> Account active               Yes
>
> If it shows the account is not active, then type:
>
> net user guest /active:yes
>
> ( It can remain off in the user control panel app, so long as it is > enables
> as per the above. )
>
> Now, on to (2).
> ( This is the cause of your error. )
>
> On XP-Pro, start | Run | secpol.msc
> Local Policies | User Rights Assignments
>
> Double-click the policy "Access this computer from the network".
>
> Add the 'Everyone' group if it's not there:
> 'Add User or group' button;
> Click 'Advanced' button;
> Click 'Find Now'
> Select 'Everyone' on the list, and OK all the way out.
>
> Now double-click the policy "Deny access to this computer from the > network".
> Remove the Guest account if it's listed there.
>
> OK your way out of there.
> That should grant the necessary permissions.
>
> If the problem machine were XP-Home, then it becomes more difficult.
> But it isn't, so I won't go down that road.
>
> --
> Best Regards
> Ron Lowe
> MVP - Windows Networking

Well said, Mr. Lowe.

It was your last line, though, that caused me to create this account. I have the same problem as the person who you replied to, but my machine IS an XP-Home Machine.

Going down that road is hereby requested. -- Pharaoh AtemPosted from http://www.pcreview.co.uk/ newsgroup access

13 Jun 2005 11:33 AM

Ron Lowe

Show quote Hide quote

>>> Logon failure: the user has not been granted the requested logon type at
>>> this computer

>> On XP-Pro, start | Run | secpol.msc
>> Local Policies | User Rights Assignments
>> [...]
>> If the problem machine were XP-Home, then it becomes more difficult.
>> But it isn't, so I won't go down that road.
>>

> but my machine IS an XP-Home Machine.
>
> Going down that road is hereby requested.
>

Download and install the Windows 2003 Server Resource Kit Tools:
http://www.microsoft.com/downloads/details.aspx?familyid=9d467a69-57ff-4ae7-96ee-b18c4790cffd&displaylang=en

To run it, go to:
Start | All Programs | Windows Resource Kit Tools | Command Shell.

A command prompt window will open.
Type these commands, be carefull to use capital letters exactly as shown:

   net user guest /active:yes

( this enables the guest account, necessary for XP-Home Simple File
Sharing )

   ntrights +r SeNetworkLogonRight -u Guest

( This grants the user 'Guest' the rights to log on across the network )

   ntrights -r SeDenyNetworkLogonRight -u Guest

( This ensures the Guest account is not explicitly prohibited from accessing
the machine across the network. )

Then check this worked by using these commands:

   showpriv SeNetworkLogonRight
   showpriv SeDenyNetworkLogonRight

Ensure the Guest account is listed in the first, and not in the second.

--
Ron

13 Jun 2005 9:03 PM

Pharaoh Atem

Ron Lowe Wrote: > >>> Logon failure: the user has not been granted the requested logon > type at
Show quoteHide quote

> >>> this computer
>
> >> On XP-Pro, start | Run | secpol.msc
> >> Local Policies | User Rights Assignments
> >> [...]
> >> If the problem machine were XP-Home, then it becomes more > difficult.
> >> But it isn't, so I won't go down that road.
> >>
>
> > but my machine IS an XP-Home Machine.
> >
> > Going down that road is hereby requested.
> >
>
>
> Download and install the Windows 2003 Server Resource Kit Tools:
> http://tinyurl.com/6csco
>
> To run it, go to:
> Start | All Programs | Windows Resource Kit Tools | Command Shell.
>
> A command prompt window will open.
> Type these commands, be carefull to use capital letters exactly as > shown:
>
> net user guest /active:yes
>
> ( this enables the guest account, necessary for XP-Home Simple File
> Sharing )
>
> ntrights +r SeNetworkLogonRight -u Guest
>
> ( This grants the user 'Guest' the rights to log on across the network > )
>
> ntrights -r SeDenyNetworkLogonRight -u Guest
>
> ( This ensures the Guest account is not explicitly prohibited from > accessing
> the machine across the network. )
>
> Then check this worked by using these commands:
>
> showpriv SeNetworkLogonRight
> showpriv SeDenyNetworkLogonRight
>
> Ensure the Guest account is listed in the first, and not in the > second.
>
> --
> Ron

Instructions were followed to the precision of every final letter.

I now recieve a similar Error: Access is denied.

Evidently, Logon works fine now, but Access isn't permitted for some reason. Let me know if you need me to go into greater detail. -- Pharaoh AtemPosted from http://www.pcreview.co.uk/ newsgroup access

14 Jun 2005 9:19 AM

Ron Lowe

> Instructions were followed to the precision of every final letter.
>
> I now recieve a similar Error: Access is denied.
>
> Evidently, Logon works fine now, but Access isn't permitted for some
> reason. Let me know if you need me to go into greater detail.
>
>
> --
> Pharaoh AtemPosted from http://www.pcreview.co.uk/ newsgroup access
>

Well, access denied means we've got past the hurdle of the Network Logon
Rights.

Now you just have to set the share and NTFS permissions.
That's the cause of 'Access Denied'.

These should not need adjusting on XP Home, the default permissions should
work.
But some software must be stamping all over them.

-Can I ask if you have run any form of security lockdown software? If so,
what exactly?

Again, the actual tools to check or repair this are not easily available in
XP home.
So you are left with no easy way to fix this mess.

-Can I ask which folder it is you have shared, and are getting Access Denied
from?

The easiest thing to try in the first instance would be to un-share the
folder you have shared, OK your way out, and then go ack in and re-share it.
The Simple File Sharing user interface will probably re-set the share and
NTFS permissions for you.

Let's just check a couple of things are as they should be at this point.
Re-check the guest account is active:
    Go to a command line and type the command 'net user guest'.
Check that Simple File Sharing is enabled:
   Start | Run | Regedit, and go to
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
   Look at the value of 'forceguest', it should be 1.

If this does not sort out the 'Access Denied', then we need to
manually set the share and NTFS permissions.
You need to interrupt the boot process, ( hold down F8 during boot )
and start up into 'Safe mode with Networking'.
In safe mode, use Windows Explorer to navigate to the folder in question.
R-click the folder, and go to Sharing and Security.

On the Sharing tab, click the Permissions button.
It should contain the 'Everyone' group by itself.
The 'Allow' permissions for Everyone should be either
   'Read' for read-only access,or
   'Read' AND 'Change' for read / write access.

All the 'Deny' boxes should be un-checked.
That's the share permissions sorted. OK that.

Now on to the NTFS permissions.
( This only applies if the disk is formatted NTFS. )
Go to the Security tab.
In the top box, the groups 'Administrators', 'Everyone', and 'System'
should be listed, along with a user who crested the folder.

If the 'Everyone' group is not present, add it.
Check the 'Everyone' group has the following 'Allow' permissions:
   Modify, Read+Execute, List Folder Contents, Read, Write.
   None of the 'Deny' boxes should be checked.

Do not click OK yet!

Now, quickly check the permissions on each of the other users and groups.
There should be no 'Deny' permissions anywhere.

There would not normally be any other groups or users listed,
other than the ones I listed above.
If there are, let me know what they are, and what permissions they have.

If you have made any changes to the permissions in here, before you OK out,
click the Advanced button.
Check the box marked 'Replace permission entries on all child objects....'
This will apply the modified permissions to all files and subdirectories
within the shared folder, as well as to the shared folder itself.

OK your way out from here.

That should set the permissions correctly for Simple File Sharing.

--
Best Regards
Ron Lowe
MVP - Windows Networking

12 Jun 2005 11:55 PM

Edward

Show quote Hide quote

"Ron Lowe" wrote:

> "Edward" <Edw***@discussions.microsoft.com> wrote in message
> news:D24BD606-8DA3-4603-9825-F71CC7F9FD71@microsoft.com...
> > Hi i have two desktops with xp pro and a laptop with xp home. i was able
> > to
> > share folders with all the comps. Until yesterday when one of the xp pro
> > machine and the xp home machine cant connect to the main xp pro. it tells
> > me
> > that i dont have access to this computer.    it says the user has not been
> > granted the requested logon type at this computer. i've been reading
> > other
> > forums and some say that i need to turn guest account on. It was working
> > fine before with out guest account. FYI the two xp pro machines are using
> > simple file sharing. the two xp pro comp can still acces the xp home
> > computer, and the main xp pro comp and xp home can access the   other xp
> > pro
> > computer.
>
> The problem is on the machine you are trying to connect to.
> Simple file sharing uses the guest account on the machine you are connecting
> to.
> This requires that the Guest account is:
>
> 1) Enabled; and
> 2) Granted permissions to log in across the network.
>
> Starting with (1):
>
> The option to turn the Guest account on and off from the control panel is
> mis-labeled. It does not actually disable the account when you turn it off
> here. It just sets an option on the account called Deny Local Logon.   What
> is required is that the guest account is active behind the scenes, which is
> what is required for network access.
>
> On XP-Pro:
> R-click 'My Computer' | Manage | Local Users and Groups | Users
> Check the Guest account does not have a red X on it.
> If it does, then double-click the Guest account and un-check 'Account is
> Disabled'.
>
> XP Home is missing some essential tools to manipulate user accounts and
> permissions. So on XP-Home, we need to use a command. ( This will work on
> both XP-Home and XP-Pro ) :
>
> Go to a command prompt ( not start | run ), and type:
>
>    net user guest
>
> The output should contain a line like this:
>
>    Account active               Yes
>
> If it shows the account is not active, then type:
>
>   net user guest /active:yes
>
> ( It can remain off in the user control panel app, so long as it is enables
> as per the above. )
>
> Now, on to (2).
> ( This is the cause of your error. )
>
> On XP-Pro, start | Run | secpol.msc
>   Local Policies | User Rights Assignments
>
> Double-click the policy "Access this computer from the network".
>
> Add the 'Everyone' group if it's not there:
>    'Add User or group' button;
>    Click 'Advanced' button;
>    Click 'Find Now'
>    Select 'Everyone' on the list, and OK all the way out.
>
> Now double-click the policy "Deny access to this computer from the network".
>    Remove the Guest account if it's listed there.
>
> OK your way out of there.
> That should grant the necessary permissions.
>
> If the problem machine were XP-Home, then it becomes more difficult.
> But it isn't, so I won't go down that road.
>
> --
> Best Regards
> Ron Lowe
> MVP - Windows Networking
>
>
> Hey Ron I did exactly everything you told me. It still doesn't work for some reason. Also the Access from this computer policy keeps changing. I would set it to everyone and then everyone would be gone from the list when i restart computer. Even with the everyone enabled it still wouldn't work. The other xp pro machine has the same exact settings and i'm able to access the shared folders from my 2 other comps.

13 Jun 2005 11:16 AM

Ron Lowe

Show quote Hide quote

>> > Hi i have two desktops with xp pro and a laptop with xp home. i was
>> > able
>> > to
>> > share folders with all the comps. Until yesterday when one of the xp
>> > pro
>> > machine and the xp home machine cant connect to the main xp pro. it
>> > tells
>> > me
>> > that i dont have access to this computer.    it says the user has not
>> > been
>> > granted the requested logon type at this computer.

>> On XP-Pro, start | Run | secpol.msc
>>   Local Policies | User Rights Assignments
>>
>> Double-click the policy "Access this computer from the network".
>>
>> Add the 'Everyone' group if it's not there:
>>    'Add User or group' button;
>>    Click 'Advanced' button;
>>    Click 'Find Now'
>>    Select 'Everyone' on the list, and OK all the way out.
>>
>> Now double-click the policy "Deny access to this computer from the
>> network".
>>    Remove the Guest account if it's listed there.
>>
>> OK your way out of there.
>> That should grant the necessary permissions.
>>
>>

>Hey Ron I did exactly everything you told me.
>It still doesn't work for some reason.
>Also the Access from this computer policy keeps changing.
>I would set it to everyone and then everyone would be gone
>from the list when i restart computer. Even with the everyone enabled
>it still wouldn't work. The other xp pro machine has the same
>exact settings and i'm able to access the shared folders from my 2 other
>comps.

There's something else going on here.
Some software is re-setting the policy, it doesn't re-set by itself.

Either some 'security' software you have installed, or perhaps
some malware you have picked up along the way?

Hane you installed, or un-installed any software that may have triggered
this behaviour?
Have you done a virus scan lately, and a spyware check?

You might try to use system restore to go back to a time when it worked.

--
Ron

8 Jul 2005 12:12 AM

Pharaoh Atem

Sorry to take so long in replying - Had a small fiasco with my house, involving a fire.

Anyway, it's not just a folder that can't be accessed - It's the entire computer that can't be reached. I'm not sure if that makes a difference.

Anyway, I managed to go through everything you stated, and had no luck, probably due to a slight mistake of Folder vs. Computer.

I can't access ANY of the shared files/folders on the problem computer. Sorry for any prior confusion.

Perhaps I should try the process again? Or is another process in order to establish access to the whole computer? -- Pharaoh AtemPosted from http://www.pcreview.co.uk/ newsgroup access