NT2K Workstation asking for password in Network Neighborhood 1

[pcunix]

First I'm a Unix guy mostly.

I do have some Windows experience, and even did MCSE ( 376496) but that was way back on 3.51 so Win2K is a bit of a shock.

Secondly, I'm used to working with NT as a server: domain logons, setting folder perms, no problem.

But here I have this nice Win2k Workstation setup. I fumbled around a bit and managed to find most of what I needed, and put out some shared folders.

When users try to connect through Network neighborhood from 95 and 98 machines (all Client for Microsoft Windows setups- no domain logons 'cause there is no NT domain server here), they get asked for a password on the IPC$ share.

I'm used to seeing THAT on old Unix Samba type setups before Samba understood encrypted passwords, but I certainly can't imagine Win2K having that problem <

http://www.tipmaster.com/images/smiletiniest.gif>

Do I have a problem or am I just missing something basic?

I *could* install this machine as a server as necessary- it just needs to share some folders and we really don't need complex permissions- it's a very small office, and that's why I thought the Workstation install would be simpler for them- didn't want them to have to learn NT domain logons, etc.




Tony Lawrence
SCO Unix/Linux Resources

http://pcunix.com

tony@pcunix.com

 

[FilthPig]

You're going to have to set up usernames and passwords on the Win2k pro system. Also, not sure how many people you're going to have connecting to this, but NT/2000 workstation versions have a 10 inbound connections limit. For more info check out FAQ616-800. Marc Creviere

 

[pcunix]

I thought that adding users might be the issue, but all I immediately see how to add is local users- which I assume still means someone logging on to that machine. Nowhere do I see anything about network users.

Also, I did notice that the guest account was disabled (or rather I noticed that it had a red slash through it and I *assumed* that's what it meant) but I didn't immediately see how to enable the poor thing.

So I did add users- users, not machine names as the FAQ seems to be telling me to ?

Actually, after reading the FAQ, I'm more confused- I think now maybe this is not W2K Workstation but W2K server, but not functioning as a Domain server- I didn't install this- and probably didn't pay close enough attention to what I was seeing- I assumed (yeah, I know) that because I didn't see anything like User Manager for Domains that this was a Workstation install..but the FAQ description sounds like what I saw.

I have a semi-useless O'Reilly book on Win2000 Admin- it seems to always be talking about domain issues- any book or web page recomendation for what I have here?



Tony Lawrence
SCO Unix/Linux Resources

http://pcunix.com

tony@pcunix.com

 

[PAndersen]

The W2K shares may have been opened only for use with password.

 

[pcunix]

Huh?

What does &quot;The W2K shares may have been opened only for use with password.&quot; mean?

I created the shares and set RW access for &quot;Everyone&quot;. I see that I can add the Guest account, but that's disabled and I didn't immediately see where to enable it.

It confuses me that this looks half like a Domain Controller (because of having accounts in the shares rather than just read-only/read-write passwords) but isn't because it is not even in a domain.

And you guys say Unix is hard

] Tony Lawrence
SCO Unix/Linux Resources

http://pcunix.com

tony@pcunix.com

 

[FilthPig]

For getting access to files on that system, local users and network users are effectively the same thing. If somebody doesn't have local access, they can't get network access. As you mentioned, enabling the guest account would work, but then everybody would be able to get in. If that's ok, then go for it. To enable it right-click on My Computer, choose manage. Go to the Local Users & Groups, Users folder. Double-click on the Guest acocunt, and uncheck the account is disabled checkbox. Now everybody regardless of username/password will gain access to all resources that the guest account has permissions to.

And it's just like a domain, only a domain keeps all the authentication centralized so that you don't have to do this on every machine. Marc Creviere

 

[pcunix]

OK, that's making more sense.

However- I had tried adding a user (not a machine name, but a user) and I set that user's password to match what they were using on their Windows machine.

I then added that user for permissions to the share (even though Everybody already was theere) and still got the IPC$ password prompt.


Tony Lawrence
SCO Unix/Linux Resources

http://pcunix.com

tony@pcunix.com

 

[FilthPig]

Are they logging into their machine as that? Windows 98 will only pass along what they're currently logged in as, and if it's invalid it'll ask the user to supply a password, but the username remains the same.

Without a domain, Windows 98 doesn't care in the least what you log in as, so if the user's logging in as SpaceManSpiff the 98 machine will let them. If they're not prompted for a username/password at login, you should change the primary network client to Client for Microsoft Networks in the properties of network neighborhood. Marc Creviere

 

[pcunix]

The clients are running Client for Microsoft Networks and yes, they logged in with the same name and password I set on the NT, and I still got asked for a password when they try to access the NT share.
Tony Lawrence
SCO Unix/Linux Resources

http://pcunix.com

tony@pcunix.com

 

[FilthPig]

Do the users have the correct permissions on the share level AND on the folder level? NT keeps 2 sets of books on this. One can be found on the Sharing tab for the properties of the share, and one can be found on the permissions tab. Make sure that the users have appropriate permissions in both areas. Marc Creviere

 

[pcunix]

Yes, I believe they have correct underlying permissions, though I do have to double check that.

But wouldn't lack of permission say that? Why would that ask for a password?
Tony Lawrence
SCO Unix/Linux Resources

http://pcunix.com

tony@pcunix.com

 

[FilthPig]

I'm reaching into &quot;as I understand it&quot; territory for this one. I believe it to be correct, but you may wish to seek a second opinion. When you log into a domain, you're being authenticated by the server, which associates your login with a particular security identifier (SID). When you attempt to access a domain resource that you don't have access too, it has your SID to check against, and says no, domain\userx does not have sufficient permissions. When you're logging in in a workgroup environment, it checks the username/password against what it has, but if that particular SID does not have access to a resource, since the user hasn't been authenticated to a domain and doesn't have an SID associated with it, it says &quot;maybe that's not really userx from machinex, maybe it's a different userx from a different machine&quot; and thus prompts for a password. Marc Creviere

 

[pcunix]

OK, everybody keps mentioning &quot;user from machine&quot;

Is this the problem? I never told the NT box any machine names and don't have any idea where/how I would do this.
Tony Lawrence
SCO Unix/Linux Resources

http://pcunix.com

tony@pcunix.com

 

[FilthPig]

No, in this case, it would mean that &quot;maybe userx isn't the same userx as I have in my local user list, I should prompt for a password&quot;, and since the client is 98, it only prompts for password instead of the username/password prompt you'd get if it were an NT/2000 client. Marc Creviere

 

[pcunix]

Final resolution:

My fault.

When I hastily created the users, I forget to uncheck &quot;force passwd change at first login&quot; and check &quot;passwd never expires&quot;. So the paswords I had put in instantly disappeared.


Tony Lawrence
SCO Unix/Linux Resources

http://pcunix.com

tony@pcunix.com

 

[hiranand]

i have windows 98 laptop it is connected to a nt domain. for the past 2 days i can't connect to the domain.

i have changed the drivers for nic, changed the nic, changed the computer name.

i could log in by pressing escape. it pings if gone by that way.

i could log on to other domains.

facing same problem with ME on other laptop also.