davePremium,MVM
join:2000-05-04
not in ohio
kudos:8 | reply to aurgathor
Re: accessing shared Win7 folders from XP How does it fail?
"Can't get there from here"
"Can't log in"
"Can't access that file"
The failure mode gives vital clues about what is wrong.
Wild guess: incompatible authentication protocols, e.g. Win7 accepts only NTLMv2 and XP sends only NTLM. Run secpol.msc and check the lanman authentication level on both machines (under local policies/security options).
>I tried adding the XP User names to "Share with
>specific people" but it couldn't find them.
Right. Because that would mean that the Win7 system had to just trust the XP system to ensure that users were who they claimed to be. And any PC owner can set up a user named 'aurgathor'. |
|
| said by dave:How does it fail?
Two of the most typical failures are shown above.
And any PC owner can set up a user named 'aurgathor'.
In any case, it turned to be an 'administrator' error, but there's as good excuse why I went on to a wild goose chase. 
I didn't enable firewall on Precision490, but unbeknownst to me, Symantec Endpoint Protection enabled it, but only partially. It did *not* block Homegroup, so I could access \Downloads from GX755 just fine, but not from other PCs.
I just turned off Firewall altogether in SEP, and it works fine now. Eventually I need to find the right setting to allow an exception and turn the Firewall back on, but that's just a minor implementation detail.
Thanks for all who replied.
--
Wacky Races 2012! |
|
davePremium,MVM
join:2000-05-04
not in ohio
kudos:8 | said by aurgathor:Since I have a wired network behind a separate PC acting as a firewall/router (Freesco) that either requires physical access to my network, or a beyond average hacking skill. Sure, but that's not the way it works, and a good thing too, since it would mean that any firewall failure would result in total access to all computers.
Basically, any standalone computer trusts only those usernames that it defines. If you add the computer to a domain, then it will also trust those usernames that the domain controller defines. |
|
|
|
