Access denied connecting to a Windows 2000 share 3

[ceil32]

I have a Windows 7 client that needs to connect to a Windows 2000 Share.

All clients & servers are part of a workgroup and are on the same LAN segment.

I can ping both ways by IP addy & hostname.

Share permissions on the Server are set to 'Everyone' Full control - it's not sensitive information.

Other Win7 clients can authenticate by giving 'Ownclientname\user and local password' - I've tried this and also by giving servername\user and server password

I keep getting access denied

Can anyone suggest anything?

 

[linney]

Beside the actual sharing permissions what are the NTFS access permissions set for on the file or folder to be accessed?

Is it worth trying to remove the user from the Domain and then adding them back to it?

 

[ceil32]

Exact same thing happens when I remove and re-add to Workgroup.

I can see the Server by name when I browse through 'Network', but when I click on it I get asked for credentials which fail.

 

[BadBigBen]

you may need to clear the Kerberos cache (DNS, NetBios as well, for good measure). Or you may need to change the NTLM Authentication setting on the client side...

have a gander:

Troubleshooting Kerberos Authentication problems – Name resolution issues

http://blogs.technet.com/b/askds/ar...tication-problems-name-resolution-issues.aspx

change the NTLM Authentication:

Computer Configuration >> Policies >> Windows Settings >> Security settings >> Local Policies >> Security Options: “Network Security: Allow Local System to use computer identity for NTLM”

Computer Configuration >> Policies >> Windows Settings >> Security settings >> Local Policies >> Security Options: “Network Security: Allow Local System Null session fallback”

also worth a look:

Configuring and Troubleshooting NTLM and Kerberos on Windows 7 (Windows Server 2008) and IIS7

http://developers.de/blogs/damir_do...n-windows-7-windows-server-2008-and-iis7.aspx

Ben
"If it works don't fix it! If it doesn't use a sledgehammer..."
How to ask a question, when posting them to a professional forum.
Only ask questions with yes/no answers if you want "yes" or "no"

 

[ceil32]

Hi,

I made the Policy changes you suggested but no luck.

If I do a netview to the Server 2003 which the client can connect to, the list of shares is displayed along with any mappings.

If I do the same for the W2000 Server I get the standard error no 5 access is denied.

It's part of a workgroup so didn't have an FQDN for the target server.

 

[ceil32]

Also from the server I cannot access, I can access the client in question from Start/Run \\clientname

I can also see it from Net View

 

[BadBigBen]

try this one also (forgot to add it to the above post):

Computer Configuration >> Policies >> Windows Settings >> Security settings >> Local Policies >> (double click) ‘Network security: LAN Manager authentication level’ (on the drop down menu choose: Send LM & NTLM Responses) & Click OK

PS: the above may not be under the Local Policies but one tier above that under the Security Settings...

(don't have a Win7 system at hand at the moment, so I can't check)...

keep us posted...




Ben
"If it works don't fix it! If it doesn't use a sledgehammer..."
How to ask a question, when posting them to a professional forum.
Only ask questions with yes/no answers if you want "yes" or "no"

 

[ceil32]

Eureka!

Made that change and it worked first time - thanks a lot

Thanks also to the other posters who assisted.

 

[BadBigBen]

glad to hear that it worked...

and thanks for posting back with what helped...

Ben
"If it works don't fix it! If it doesn't use a sledgehammer..."
How to ask a question, when posting them to a professional forum.
Only ask questions with yes/no answers if you want "yes" or "no"