Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations wOOdy-Soft on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

File sharing / Network problem 3

Status
Not open for further replies.

octavee

Technical User
Oct 21, 2003
50
US
I have 3 win XP Home PCs on a ethernet network. Worked fine until last week.

Computer A has no file sharing
Computer B has file and printer sharing turned on (Full read and write)
Computer C has file and printer sharing turned on (Full read and write)

They are all connected with a DSL router and have internet connectivity. B and C are connected with a autoswitch.

Now this is what is happening now:
A can get to B and copy files.
A can see C but can not get to the computer (no permission)
B can see A and C on the network/workgroup
C can not open the workgroup and therefore can not see the shared folders from B. When trying to access the workgroup which you can see it gives an error that you do not have permission.
I already changed the workgroup names, the computer names, disabled the firewall, uninstalled the file sharing and reinstalled it. But still the same problem.

Please help.

Sincerely
Octavee
 
. no blank or empty passwords
. guest account enabled
. username(s) and password(s) on computer A made as users on Computers B & C
. username(s) and password(s) on computer B made as users on Computers A & C
. username(s) and password(s) on computer C made as users on Computers A & B

Check the Netbios setting:
See this Troubleshooter:

XP File and Printer Sharing -- Simple File Sharing disabled

XP File and Printer Sharing -- Simple File Sharing enabled
 
There is System Restore which might get you back to last week on all three machines.

Have you installed any security type software in the past week?

 
I have had this happen and have almost narrowed it down to a windows update that caused the issue on 3 of 5 computers that did the same updates. The strange thing is all 5 did the updates but 3 of them it broke file sharing permissions (lost my printer sharing).
I worked around it by adding a user and password (on the machines i needed access to)then did a search for the machines in question and when prompted used the setup user name and password to regain access.
 
Thanks everyone for their posts.

I did lots of things so far and it gets more and more wired.
After changing the password for the user logon I was able to connect to the network again. But only for about 1 minute. Then the message came up "You do not have permission to access the network" !!

I also hooked up another Laptop with File sharing on that network. Again this one could see A, B, C, and could access B but not C.
B could connect to this laptop.
The problem computer could access the workgroup but not any folders or files.

I added a new account on the problem computer but this did not help at all. BTW the B and C have already the same user name and password.

With Event viewer there are some strange errors:

A trusted logon process has registered with the Local Security Authority. This logon process will be trusted to submit logon requests. Logon Process Name: KSecDD

IPSec Services: IPSec Services failed to get the complete list of network interfaces on the machine. This can be a potential security hazard to the machine since some of the network interfaces may not get the protection as desired by the applied IPSec filters. Please run IPSec monitor snap-in to further diagnose the problem.

Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon account: John
Source Workstation: GAVALIA
Error Code: 0xC000006A

One more thing I did was to ping the network pcs from the problem computer with the following results:
ping 'name of computer'
No result
ping 'ip assigned to the other network computers'
correct reply with all computers on the network.

So I can ping the IP of computer B but not the name.

Any hints are appreciated.

Octavee
 
When you use the Welcome Screen form of logon, the workstation attempts a logon for all defined users of that workstation:


ID: 680
Source: Security

Explanation
A program or service attempted to start with the logon credentials specified in the message, which do not match the credentials of the current user. This message is logged for informational purposes only.

User Action
No user action is required.
 
I can not test this right now. Probably on Wednesday I will be at this location to further troubleshoot. Thanks for the hint.

Octavee
 
I ran the new network diagnostic tool. No sucess there.
I started in safe mode. No sucess.

I tried system restore, but every time it said 'Could not restore, try another date".

I hooked up the laptop on another network. First it worked, but after 2 minutes the same error. No permission. Since I have XP Home on all of these machines, I dont know how to set up the permissions there.

Any hints at this point?

Thanks
Octavee
 
If you have the IEEE 802.1x authentication protocol enabled, but your network components don't use it, you may experience that network connections break after about three minutes. The symptoms are that you can still see the other computers, but you cannot access their shares or printers.

You can prevent these disconnects by disabling the protocol. A normal home network does not use this protocol. It is typically used in a company environment along with a Radius authentication server.

In Windows XP, in Windows Explorer or on the desktop or in the start menu, right-click Network Neighborhood or My Network Places, select Properties, right-click the LAN Connection, select Properties again, click the Authentication tab and uncheck "Enable network access control using IEEE 802.1x." Click on OK. In the unlikely case that you do have an IEEE 802.1X server on your network, this would lead to authentication failures, so you'd have to reenable the protocol.

 
Simple File Sharing- enabled

You could try System Restore from Safe Mode, that sometimes gets it to work when it wont work in Normal Mode.

And you have to be in Safe Mode to access the Security Tabs in XP Home and be using NTFS. You do have a Sharing Tab in Home.

Use access control to restrict who can use your files

How to Share and Set Permissions for Folders and Files Using Windows XP

Keep Your Data More Secure

Search in help and support = File and Folder permissions

When you sort your problems out these are handy to know for a later time.


 
Hi Linney,

thanks for the post. Got that about the security TAB in safe mode. I usually set permission for folders, but it seems that the computer thinks that he does not have permission to the whole workgroup. How would I set this permission?

Thanks a lot.

Octavee
 
Hi,

with Event viewer I found this entry. Looks like the process Advapi could be a virus.

advapi.exe is added as a result of the NETDEVIL.12 (NetDevil 1.2) VIRUS. This process is a security risk and should be removed from your system. If found make sure that you have downloaded the latest updates for your antivirus software.

I try to find this file on the laptop.

Am I on the right track here?

Thanks
Octavee

Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 7/31/2006
Time: 4:01:34 PM
User: NT AUTHORITY\SYSTEM
Computer: GAVALIA
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: John
Domain: GAVALIA
Logon Type: 2
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: GAVALIA
 
thanks.

Would it help to turn the auditing off. I supose that would not make much difference.

Octavee
 
In an earlier post mention was made of disabling the firewall. Sometimes disabling is not enough as some settings remain that can interfere with access, also several anti virus software have hidden firewall components too. The firewall should either be uninstalled and removed (while diagnosing your problem), or configured properly to allow access between machines.

You could see what your access is like via the "Safe Mode with Networking" option, this will also stop any security programs from loading while you check your access.
 
I have the win xp firewall, no other firewall program.
When I disabled that did not make any difference.

I have Norton Antivirus 2004 with no firewall program with it.

I am focusing right now on the guest account issue. This seems to be the next step.

Thanks
Octavee
 
1. Download the Microsoft utility NTRIGHTS.EXE:

2. Unzip to %windir%\System32
Copy NTRIGHTS.EXE to all machines, again placing it into %windir%\System32

3. On each machine: Start, Run, CMD

net user guest /active:yes
ntrights +r SeNetworkLogonRight -u Guest
ntrights -r SeDenyNetworkLogonRight -u Guest

4. Finally, on each machine start regedit.
HKEY_LOCAL_MACHINE
\SYSTEM
\CurrentControlSet
\Control
\Lsa
Value name: RestrictAnonymous
Value type: DWORD

If the value is 1 or even 2, change it to 0.

4. Reboot and test.

(You might want to copy/paste the lines in #3 and save to floppy as network_reset.cmd to make it easier to use on each computer. It is a fussy command syntax. )
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top