Windows Server - workgroup question

Asked By RB

12-Mar-10 12:22 PM

(Running XP pro sp3 on two nodes, peer to peer LAN, simple file sharing off)

I have the following item that really confuses me.  When I go to set sharing or
security (ntfs) permissions for a folder and try to add a user, it only offers
(Locations of ) groups or users for the computer I am physically sitting at.
When I go to AdministrativeTools->LocalSecuritySettings and dbl-click on
AccessThisComputerFromNetwork, and the click AddUsersOrGroups,
this brings up Select Users Or Groups, and in this window if I click on
Locations, this time I am offered not only the computer I am sitting at but
also my workgroup name is offered in the list.  If I select the workgroup
from the Locations it then gives a msg about this object not being in .....
...etc...the container and then it substitutes the other node's ComputerName
that is in my workgroup.
I am not sure if this is what I want to do ? Especially since when I click OK
to add this object it gives a yellow yield sign msg that changing things in this
section could cause effects etc....
Anyhow the bottom line of my question is, how is one supposed to add
user names of "another node in workgroup" to the share and Security of
a shared folder ?

12-Mar-10 03:03 PM

You do not add user names of "another node in workgroup". You have to create
a user on YOUR computer that is the same as the user on the node you want to
add. Then you add the user you created on YOUR computer to the Share and
Security of a shared folder. Or the user on the node you want to share with
can use an account (at the network login screen) that already exists on YOUR
computer.

Not to be mean but you are messing in areas that you have to have a pretty
good knowledge of what is going on or you will mess up your computer. I get
the feeling you are chasing a misguided "security" tip or advise someone
gave you. Just exactly what "security" are you trying to "improve"?

12-Mar-10 10:06 PM

Yea I am aware of the method you specifiy above, however  it did not work on my
system. I guess I am preoccupied with trying to reproduce something I read and
experienced it to work on one node but does not seem possible on the other.
Keep in mind, I do not want to start another trouble shooting episode since I have
exhausted that effort with several nice people on two groups, but to illuminate
what I was attempting to do is the following,
(On page 929 of Windows XP 2nd Edition by Ed Bott and 2 other authors) it
says, (while trying to access another XP node ) begin quote,
you will need to add an entry to your stored network passwords. In the Control Panel,
open User Accounts click your name to make changes to your account, then under
Related tasks, click Manage My Network Passwords,, click Add, and then provide
the requested information"  end quote.
So on my Desktop I actually did this (just as said above) and typed in my laptop's
information. The window that comes up resembles the below
Server :          \\RB-laptop\Share_Folder
User name     RB.Owner
password       *********
-----Then after I did this I again tried to access a shared folder (from Desktop to Laptop)
and I then got the User Name request msg box (instead of an Access denied previously)
I then typed in the laptops password and was able to access the laptop, just like one
would think or want it to function.
However on the Laptop (trying to access the Desktop) when I go to the Control Panel,
open User Accounts click my acct name to make changes, then under Related tasks,
there is no "Manage My Network Passwords" to click ? It just is not there.
Consequently on my Laptop I am still getting an access denied before I receive a chance
to type in the required password.
The desktop is WinXP pro sp3, the laptop is WinXP Media Edition sp3.
Anyhow that was what I was doing.

13-Mar-10 11:24 AM

A "workgroup" for all intents and purposes (especially related to
file/folder/sharing permissions) is no different than having a stand alone
computer.  In fact - even a stand alone windows computer is a member of
*some* workgroup.  ;-)

The answer to your final question (given workgroups) is that you do not.
Your username/passwords either match or you create special ones and use
those to do the drive mappings (granting NTFS/sharing perms as needed.)

Or - better yet - get yourself a good NAS (Seagate BlackArmor is nice) and
put all your shared files there and even share your USB printer off it.  ;-)

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html

13-Mar-10 05:59 PM

The following may or may not help since this refers to MCE sp2, not sp3:
http://forum.soft32.com/win4/Manage-Network-Passwords-XP-sp2-ftopict178343.html

14-Mar-10 07:27 AM

You may already have tried this:

------------------------------------------
http://www.pcwindowstips.com/2009/04/07/windows-xp-network-connection-always-shows-access-denied/

Windows XP Network Connection Always Shows Access Denied
Networking Tips, Performance Tips, Registry Tips, Windows XP Tips Posted by
Shawn DesRochers April 7th, 2009

If you are always getting Access Denied errors when trying to connect to a
XP computer on your home or business network, and you know you have the
correct user names and passwords on the computer, the solution may be a
simple registry edit.

1. Click Start then Run and type -> Regedit - click OK
2. Go to HKEY_LOCAL_MACHINE / SYSTEM / CurrentControlSet / Control / Lsa
3. Change the value of a key called "restrictanonymous" to 0 instead of 1
4. Be sure you change the right one as you Don't want to change
5. Next shut down RegEdit and Reboot your computer.

14-Mar-10 11:43 AM

Thanks Andy,
I just got back home after a short trip. I will take a  look at these links
Thank you !  Maybe they will help, I will let you know if they do.
I am wondering if my problem might be tied to my broadcom wireless
on my gateway laptop.  If I create a user account that is not an administator
type when I try to log into it my laptop crashes. And even if it is an
administrator type it takes forever to load and does not respond normally.
The only account the broadcom will act normally on is the original Owner
account.
I have read that some broadcom drivers will cause this. I have looked
at the Broadcom site but could not find any downloads or updates for my
dated driver (nor do they answer email ) so I may be out of luck there.
My current driver version is 4.10.47.0  Nov 11, 2005
My wireless is BCM 0465 Rev 3.9,   Chipset BCM4311/BCM2050
Thanks again ..........later RB

14-Mar-10 11:56 AM

I do not know why you do not have the "Manage My Network Passwords" under
Related Tasks, but I found a way to get to the dialog box, which is called
the "Stored User Names and Passwords tool".

-----------------------------------------------------
http://articles.techrepublic.com.com/5100-10878_11-6047415.html?tag=rbxccnbtr1

accessing the Stored User Names and Passwords tool. Here is how:

1. Press [Windows]R to access the Run dialog box.
2. Type rundll32.exe keymgr.dll, KRShowKeyMgr in the Open text box and
click OK to access the Stored User Names And Passwords dialog box.
3. To view or change a user credential, select it from the list, and
click the Properties button to display the Logon Information Properties
dialog box.
4. To add a user credential, the click Add button, and fill in the
appropriate fields in the Logon Information Properties dialog box.
5. To delete a user credential, click Remove and then OK in the
confirmation dialog box.
6. Click Close to exit the Stored User Names And Passwords dialog box.

Note: This tip applies to both Windows XP Professional and Home when used in
standalone or in workgroup configurations."