Network Problems 1

[Echoe]

I have two desktop and one laptop that are all connected to a hub to form a LAN. They all have shared C drives. but none can connect to each other. When I click on the MSHOME network, all that comes up is themselves. I know they are connected ot the hub correctly, because they can all access the internet, and the router is plugged directly into the hub. What is going on?!?! I have spent three hours trying to figure this out.......

Thanks for your help!
~Jeff~

 

[bcastner]

Any folder in a user profile is not a good candidate for sharing without special steps. And these steps vary importantly depending on whether the client is XP Pro or Home, and the setting of 'Simple File Sharing' under Pro.

1. Permissions considerations:

http://support.microsoft.com/kb/308419

http://support.microsoft.com/default.aspx?scid=kb;en-us;308418

2. Security Model Considerations:
XP Home uses the 'Simple File Sharing' security model only. XP Pro offers a choice.

For XP Pro & Home:
Simple File Sharing - Enabled

http://www.practicallynetworked.com/sharing/xp/filesharing.htm

For XP Pro only:
Simple File Sharing - Disabled

http://www.practicallynetworked.com/sharing/xp_filesharing/index.htm

3. Password considerations:

. Windows really does not like blank or empty passwords. You can adjust the local security policy under XP Pro to accomodate them, but the wiser course is to avoid them. There are autologon and other options you can use if you truely find them painfull to use. See my discussion later in this thread as an Addendum.

. In a Workgroup, you will be a lot happier if every workstation has as a locally defined user every username with passwords of all other users. The reason not to make a complete synchronization is to deny completely access to a specific user a local workstation offering shared resources. Unlike Windows 9x where a share was password protected, under XP a share has a quite different security model where you can with a great deal of granularity determine who and what can be done by any individual user on any individual share you offer.

. Using Blank or Empty passwords.

. Not recommended
But see: thread779-796583

http://www.practicallynetworked.com/sharing/xp_filesharing/03userpasswords.htm

4. Other considerations:
Some of the following is a quite conservative approach. It is not intended as a reference to Netbios name lengths or the possibilities of using various Node Types. Just do it.

. Use the same workgroup name for all computers
. Use different Computer Names
. A computer name should be less than 13 characters in length, and entered in UPPER CASE
. (Any Share you create should be given a Netbios "name" less than 13 charcters in length)
. A computer name should not be the same as any username you will define
. For all workstations: under the Properties of the Network Connection, Internet Protocol TCP/IP, Properties, Advanced, WINS tab, click to 'enable Netbios over TCP/IP'
. For all workstations, do an Ipconfig /all at a CMD box. Look at the "Node Type" value. It should say Broadcast, Hybrid or not defined. Anything else is going to be a problem. The best choice for Workgroups is to force a Node Type of Broadcast or Hybrid on all machines:

Open a notepad session as node.reg, and copy paste the below into the session:

***** start copy/paste below this line:
REGEDIT4

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters]
"NodeType"=dword:00000008

***** end copy/paste above this line

Save the file and double-click your new "node.reg" to merge the contents with the registry. This sets a Hybrid node type. Change the "8" above to "1" to force a pure broadcast Node Type.
Reboot to see the change.

_______ Addendum: Blank or Empty Passwords under XP _________

If Simple File Sharing", the default, is enabled (you have no choice with XP Home), then all remote access occurs under Guest priviliges. There is no security or permissions issues, and no password is required.

Except in the smallest of networks, some security and permissions control is usually desired.

The "normal" case is to disable Simple File Sharing. To use blank or empty passwords and create a "Mixed" Workgroup network of Win9x, Win2k, and XP under the case where you have disabled Simple File Sharing, it is decidedly not obvious the steps that are required..

The following "addendum" explains how to enable the use of blank or empty passwords in a "Mixed" security context:

. Disable Simple Filesharing (Not possible in WinXP Home).
Start Button -> My Computer
In the menu of My Computer select "Tools" -> "Folder Options"
In "Folder Options" select the "View" fan
Uncheck the setting "Use Simple File Sharing (Recommended)"

This change should be reflected in this registry key:
[HKEY_LOCAL_MACHINE \SYSTEM \CurrentControlSet \Control \Lsa]
ForceGuest = 0

It is advised to create an account with a secure password for each user who should have access to a share. But some times it is just too cumbersome, even if one creates a group containing all the users which should have access.

2. Enable the guest account, so everyone will use that to access your shares:
Go to "Control Panel" -> "Performance and Maintenance" -> "Administrative Tools" -> "Computer Management"
Expand "Local Users" -> "Users"
Right click the "Guest" account and select "Properties"
Uncheck "Account is disabled"

3. Enable listing of shares:
Go to "Control Panel" -> "Performance and Maintenance" -> "Administrative Tools" -> "Local Security Policy"
Expand "Local Policies" -> "Security options"
Check that the setting "Network access: Do not allow anonymous enumeration of SAM accounts and shares " is set to disabled

4. Enable access of shares using empty password:
Go to "Control Panel" -> "Performance and Maintenance" -> "Administrative Tools" -> "Local Security Policy"
Expand "Local Policies" -> "Security options"
Check that "Accounts: Limit local account use of blank passwords to console login only" is disabled

5. Make sure your security policy allows network access for everyone:
Go to "Control Panel" -> "Performance and Maintenance" -> "Administrative Tools" -> "Local Security Policy"
Expand "Local Policies" -> "User Rights Assignment"
Check that "Access this computer from the network" has these groups included "Guests" and "Everyone"
Check that "Deny access to this computer from the network" doesn't contain the above groups

6. If wanting to give extra rights to some accounts, then disable that all network logins gets guest access when in a workgroup :
Go to "Control Panel" -> "Performance and Maintenance" -> "Administrative Tools" -> "Local Security Policy"
Expand "Local Policies" -> "Security options"
Check that "Network access: Sharing and security model for local accounts" is set to "Classic: local users authenticate as themselves"

Remember to reboot to make sure settings are activated.

Note the above settings only opens the policies for allowing guests to access the computer. When making a share one has to allow guests to access the share, and if the folder being shared is placed on a NTFS drive, then the security setting for the folder must allow Guests.

Reference and some quoted sections: <

http://snakefoot.fateback.com/tweak/winnt/sharing.html>