Windows Forum / Windows XP / Networking and Web / February 2006
Logon Failure
|
|
Thread rating:  |
AshMor - 23 Feb 2006 16:51 GMT I hope someone can help me with this problem That I can't seem to solve:
I am a Microsoft OEM System Builder. About 8 months ago I built a home pc for a customer using Windows XP Home SP2. At that time I also setup file and print sharing between her desktop (XP Home), and her laptop (XP Pro). She has had no issues using the shared folders or printing until about a month ago she claims.
I've tried everything I know and can't resolve it. If I try and view workgroup computers, the desktop (named FAMILY), shows in the list of pc's. If I click on it to get to the shared folder, I get "Logon Failure: The user has not been granted the requested logon type at this computer"
I have verified that the work group names are the same. I have verified that all the proper folders and printers on the desktop (XP home) are still shared. I believe the "Guest" account on the XP home machine is off under User accounts.
I thought perhaps it was a firewall issue or something, so I connected my own laptop to the group. My laptop (Windows 2K) and her laptop (XP Pro) can talk without any problems. If I try to connect to the FAMILY computer (XP Home) I get the same error on my laptop. So the issue lies with the desktop pc.
I am at a complete loss as to how to resolve it. I have checked the obvious, and have even tried various restore points on the desktop pc, but to no avail. I do have a ghost image on another partition that I could restore which would take the desktop back to the way it was the day I delivered it, but I'm trying like crazy to avoid that. Please help!!!
Any help or info would be greatly appreciated. If you need any more info from me, please let me know.
Thank you,
Jim
Chuck - 23 Feb 2006 18:40 GMT >I hope someone can help me with this problem That I can't seem to solve: > [quoted text clipped - 32 lines] > >Jim Jim,
Your specific error is well known here. Keep an open mind, and we can help you diagnose the problem. <http://nitecruzr.blogspot.com/2006/01/look-at-complete-detail-in-error.html> http://nitecruzr.blogspot.com/2006/01/look-at-complete-detail-in-error.html
 Signature Cheers, Chuck, MS-MVP [Windows - Networking] http://nitecruzr.blogspot.com/ Paranoia is not a problem, when it's a normal response from experience. My email is AT DOT actual address pchuck mvps org.
AshMor - 23 Feb 2006 20:17 GMT Chuck,
Thank you for replying to me. Where do I begin? The thing that really baffles me, is that it used to work just fine. i don't know what caused it to stop working. Anyway...I will follow your advice. Just lead the way.......
Thanx,
Jim
> >I hope someone can help me with this problem That I can't seem to solve: > > [quoted text clipped - 39 lines] > <http://nitecruzr.blogspot.com/2006/01/look-at-complete-detail-in-error.html> > http://nitecruzr.blogspot.com/2006/01/look-at-complete-detail-in-error.html Chuck - 23 Feb 2006 21:10 GMT >> >I hope someone can help me with this problem That I can't seem to solve: >> > [quoted text clipped - 39 lines] >> <http://nitecruzr.blogspot.com/2006/01/look-at-complete-detail-in-error.html> >> http://nitecruzr.blogspot.com/2006/01/look-at-complete-detail-in-error.html
>Chuck, > [quoted text clipped - 5 lines] > >Jim Jim,
Start with this article, it links ("Logon Failure:...") to others where your symptoms are discussed. <http://nitecruzr.blogspot.com/2006/01/look-at-complete-detail-in-error.html> http://nitecruzr.blogspot.com/2006/01/look-at-complete-detail-in-error.html
And we may be at this for a while, so post after my replies please. <http://nitecruzr.blogspot.com/2005/05/how-to-post-on-usenet-and-encourage.html#T opPosting> http://nitecruzr.blogspot.com/2005/05/how-to-post-on-usenet-and-encourage.html#T opPosting
 Signature Cheers, Chuck, MS-MVP [Windows - Networking] http://nitecruzr.blogspot.com/ Paranoia is not a problem, when it's a normal response from experience. My email is AT DOT actual address pchuck mvps org.
AshMor - 23 Feb 2006 21:41 GMT Chuck,
I just had the customer check some things for me. First of all, I did have her verify on the XP Home PC ( the one with the shared folders and printers) that the Guest account is active. I had her try and connect to the desktop (XP Home) from her laptop (XP Pro) again. Here is the error she gets:
\\FAMILY is not accessible
You might not have permission to use this network resource. Contact the administrator of this server to find out if you have access permissions.
Logon Failure: The user has not been granted the requested logon type at this computer.
I don't know if this information helps anymore, or if I'm just repeating myself, but I thought I'd pass it along. Am I supposed to try the ntrights command as mentioned in your blog? If this is a rights or security issue, what has caused it to be changed? I mean no disrespect to my customer, by they are not smart enough to know how to make changes in these areas.
Hope to hear from you soon!
Thanx,
Jim
> >I hope someone can help me with this problem That I can't seem to solve: > > [quoted text clipped - 39 lines] > <http://nitecruzr.blogspot.com/2006/01/look-at-complete-detail-in-error.html> > http://nitecruzr.blogspot.com/2006/01/look-at-complete-detail-in-error.html Chuck - 23 Feb 2006 22:21 GMT >> >I hope someone can help me with this problem That I can't seem to solve: >> > [quoted text clipped - 39 lines] >> <http://nitecruzr.blogspot.com/2006/01/look-at-complete-detail-in-error.html> >> http://nitecruzr.blogspot.com/2006/01/look-at-complete-detail-in-error.html
>Chuck, > [quoted text clipped - 22 lines] > >Jim Jim,
If the server is running XP Home, NTRights (or CACLS) is the best way to fix the symptoms. What caused the symptoms may be another matter.
 Signature Cheers, Chuck, MS-MVP [Windows - Networking] http://nitecruzr.blogspot.com/ Paranoia is not a problem, when it's a normal response from experience. My email is AT DOT actual address pchuck mvps org.
AshMor - 23 Feb 2006 23:52 GMT Chuck,
Excuse my ignorance, but I want to be sure as to what to do on the customers pc that is running XP Home. I downloaded NTRIGHTS.exe from the company you suggested on your blog, and copied it to a floppy.
After I place the floppy in the XP Home machine, do I run this program from the floppy or copy it to the hard drive?
Do I run it from the command line, or just double click it in windows?
I assume the program will come up, so do I just type in the TWO commands as shown on your blog? After they are run, will I get some sort of message?
After it's done, do I just try it or do I need to reboot or what?
Sorry for so many questions, just want to be correct.
Talk to you soon!
Jim
> >> >I hope someone can help me with this problem That I can't seem to solve: > >> > [quoted text clipped - 71 lines] > If the server is running XP Home, NTRights (or CACLS) is the best way to fix the > symptoms. What caused the symptoms may be another matter. Chuck - 24 Feb 2006 02:05 GMT >> >> >I hope someone can help me with this problem That I can't seem to solve: >> >> > [quoted text clipped - 71 lines] >> If the server is running XP Home, NTRights (or CACLS) is the best way to fix the >> symptoms. What caused the symptoms may be another matter.
>Chuck, > [quoted text clipped - 13 lines] > >Sorry for so many questions, just want to be correct. Jim,
If you downloaded NTRights from Dynawell as a standalone product, you can run it however it is convenient. As I recommend in my Path article, I create a folder, "C:\Utility" where I copy all of my utilities. <http://nitecruzr.blogspot.com/2005/05/using-path-and-making-custom-program.html> http://nitecruzr.blogspot.com/2005/05/using-path-and-making-custom-program.html
Then, just open a command window, and type: "c:\utility\ntrights " whatever
If you added ";C:\Utility" as an entry, into the Path variable, you type: "ntrights " whatever
You do need to run it from a command window, so you can add the "whatever". Running it by double clicking in Windows Explorer won't work.
All you're doing is updating user rights. Rebooting is not necessary here. Just type in the two commands, one after the other, then test the change.
 Signature Cheers, Chuck, MS-MVP [Windows - Networking] http://nitecruzr.blogspot.com/ Paranoia is not a problem, when it's a normal response from experience. My email is AT DOT actual address pchuck mvps org.
AshMor - 24 Feb 2006 13:06 GMT Chuck,
Awesome! I'll give the program and the commands a shot as soon as possible.
I'll let you know how I make out. Ummmm another question......could this problem surface again? I have been building pc's and doing home networking for close to 10 years now, and have never run into this before. Any insight would be helpful.
I'll be in touch.
Thank you,
Jim
> >> >> >I hope someone can help me with this problem That I can't seem to solve: > >> >> > [quoted text clipped - 109 lines] > All you're doing is updating user rights. Rebooting is not necessary here. > Just type in the two commands, one after the other, then test the change. Chuck - 24 Feb 2006 15:16 GMT >> >> >> >I hope someone can help me with this problem That I can't seem to solve: >> >> >> > [quoted text clipped - 109 lines] >> All you're doing is updating user rights. Rebooting is not necessary here. >> Just type in the two commands, one after the other, then test the change.
>Chuck, > [quoted text clipped - 10 lines] > >Jim Jim,
It depends upon what caused it in the first place. The direct cause involves the group membership of an account, that's being used for access, being placed into the "deny access" list. I don't think we have a documented scenario for this problem, as we do for "885250". If you wish to read about the latter, which involves individual shares becoming unusable: <http://nitecruzr.blogspot.com/2005/11/irregularities-in-individual-share.html> http://nitecruzr.blogspot.com/2005/11/irregularities-in-individual-share.html
 Signature Cheers, Chuck, MS-MVP [Windows - Networking] http://nitecruzr.blogspot.com/ Paranoia is not a problem, when it's a normal response from experience. My email is AT DOT actual address pchuck mvps org.
AshMor - 27 Feb 2006 17:34 GMT Chuck,
Thank you so much for your help. The two commands you had me run solved 90% of my problems. As you may recall I was not able to access shared folders or printers on the XP Home PC. By running those two commands, I am now able to print to the shared printer. However, I am still not able to access the shared folders. Although the printing issue was of major importance to my customer, I'd still like to restore their file shares as well. Any ideas on what could still be the problem? Here is the error I get when trying to access the shared folder:
\\Family is not accessable.
You might not have permission to use this network resource. Contact the administrator of this server to find out if you have access permissions.
Again, I checked the obvious. Everything looks right. I even tried sharing out the entire C Drive....no difference. Again I know it's not a security issue. Any ideas?
Thanx,
Jim
> >> >> >> >I hope someone can help me with this problem That I can't seem to solve: > >> >> >> > [quoted text clipped - 134 lines] > <http://nitecruzr.blogspot.com/2005/11/irregularities-in-individual-share.html> > http://nitecruzr.blogspot.com/2005/11/irregularities-in-individual-share.html Chuck - 27 Feb 2006 17:55 GMT >> >> >> >> >I hope someone can help me with this problem That I can't seem to solve: >> >> >> >> > [quoted text clipped - 134 lines] >> <http://nitecruzr.blogspot.com/2005/11/irregularities-in-individual-share.html> >> http://nitecruzr.blogspot.com/2005/11/irregularities-in-individual-share.html
>Chuck, > [quoted text clipped - 19 lines] > >Jim Jim,
What are the shared folders? Note that, with XP Home, Simple File Sharing, and Guest only authentication, there will be folders that can't be accessed thru the network. <http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Guest> http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Guest
 Signature Cheers, Chuck, MS-MVP [Windows - Networking] http://nitecruzr.blogspot.com/ Paranoia is not a problem, when it's a normal response from experience. My email is AT DOT actual address pchuck mvps org.
AshMor - 27 Feb 2006 18:31 GMT Chuck,
One of the folders that is shared is the "Shared Documents" folder I believe. I also believe we created another one called "Stuff" or something like that. Nevertheless, I can't get into them. I can see the XP Home PC under View Workgroup computers, but when I try and double click on it I get the error.
Thanx,
Jim
> >> >> >> >> >I hope someone can help me with this problem That I can't seem to solve: > >> >> >> >> > [quoted text clipped - 166 lines] > <http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Guest> > http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Guest Chuck - 27 Feb 2006 18:51 GMT >> >> >> >> >> >I hope someone can help me with this problem That I can't seem to solve: >> >> >> >> >> > [quoted text clipped - 166 lines] >> <http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Guest> >> http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Guest
>Chuck, > [quoted text clipped - 7 lines] > >Jim Jim,
Well, the fun thing (right) about "access denied" is that it can have so many causes, at different OSI layers. # Physical network problems. # Browser problems. # ACL Share Permissions. # ACL Security Settings. <http://nitecruzr.blogspot.com/2005/06/mysterious-error-5-aka-access-denied.html> http://nitecruzr.blogspot.com/2005/06/mysterious-error-5-aka-access-denied.html
And read about Access Control Lists (ACLs). <http://nitecruzr.blogspot.com/2005/09/server-access-authorisation.html> http://nitecruzr.blogspot.com/2005/09/server-access-authorisation.html
You state that one server has both file and printer shares, and the problem is noted with only some file shares (not all file shares). Am I correct so far? If so, we're back to the "885250" scenario again. <http://nitecruzr.blogspot.com/2005/11/irregularities-in-individual-share.html> http://nitecruzr.blogspot.com/2005/11/irregularities-in-individual-share.html
If not, then you're going to have to go thru the entire Network Neighborhood troubleshooting procedure, and look for something maybe overlooked or misunderstood the first time. <http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html> http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html
 Signature Cheers, Chuck, MS-MVP [Windows - Networking] http://nitecruzr.blogspot.com/ Paranoia is not a problem, when it's a normal response from experience. My email is AT DOT actual address pchuck mvps org.
AshMor - 28 Feb 2006 17:45 GMT Chuck,
I will investiagte the problem further. As I said, I can't get past the Windows XP Home's PC Icon in "View Workgroup Computers". The pc shows up there, but I can't get to ANY of the shared folders.
I'll be in touch!
Jim
> >> >> >> >> >> >I hope someone can help me with this problem That I can't seem to solve: > >> >> >> >> >> > [quoted text clipped - 205 lines] > <http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html> > http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html Chuck - 28 Feb 2006 18:06 GMT >> >> >> >> >> >> >I hope someone can help me with this problem That I can't seem to solve: >> >> >> >> >> >> > [quoted text clipped - 205 lines] >> <http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html> >> http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html
>Chuck, > [quoted text clipped - 5 lines] > >Jim OK, Jim. Patience and persistence is the best strategy here. We'll look forward to hearing from you again.
 Signature Cheers, Chuck, MS-MVP [Windows - Networking] http://nitecruzr.blogspot.com/ Paranoia is not a problem, when it's a normal response from experience. My email is AT DOT actual address pchuck mvps org.
|
|
|