Results 1 to 6 of 6

Thread: XP Pro ACL

  1. #1
    Registered+
    Join Date
    Aug 2005
    Location
    Liverpool/Brum Uni
    Posts
    18
    Thanks
    0
    Thanked
    0 times in 0 posts

    XP Pro ACL

    Having a problem with my Access lists on XP pro. I have set up share access lists to allow users different levels off user access. However instead of throwing up the login prompt when attempting to connect to the shared folder its showing access denied.

    I know this is because XP automatically proving the current user credentials to the host which doesn't have access, but after being denied access it should show the login prompt.

    Any Ideas?

  2. #2
    Senior Member
    Join Date
    Mar 2005
    Posts
    4,826
    Thanks
    161
    Thanked
    358 times in 288 posts
    • badass's system
      • Motherboard:
      • ASUS P8Z77-m pro
      • CPU:
      • Core i5 3570K
      • Memory:
      • 32GB
      • Storage:
      • 1TB Samsung 850 EVO, 2TB WD Green
      • Graphics card(s):
      • Radeon RX 580
      • PSU:
      • Corsair HX520W
      • Case:
      • Silverstone SG02-F
      • Operating System:
      • Windows 10 X64
      • Monitor(s):
      • Del U2311, LG226WTQ
      • Internet:
      • 80/20 FTTC
    Quote Originally Posted by Shadow_101 View Post
    Having a problem with my Access lists on XP pro. I have set up share access lists to allow users different levels off user access. However instead of throwing up the login prompt when attempting to connect to the shared folder its showing access denied.

    I know this is because XP automatically proving the current user credentials to the host which doesn't have access, but after being denied access it should show the login prompt.

    Any Ideas?
    First, switch off simple file sharing if its on:
    Goto folder options in the control panel, click view then look for simple file sharing in the list and switch it off.
    Secondly, you need to make sure the users also have NTFS permissions. For the share, goto the security tab and make sure the access is allowed there.
    Remember the most restrictive permissions take effect of both the share and NTFS permissions.

    Finally, make sure file and printer sharing for MS networks is enabled for the network connection in use and that no firewall is blocking the relevant ports (TCP 445, TCP137-139 etc)
    "In a perfect world... spammers would get caught, go to jail, and share a cell with many men who have enlarged their penises, taken Viagra and are looking for a new relationship."

  3. #3
    Registered+
    Join Date
    Aug 2005
    Location
    Liverpool/Brum Uni
    Posts
    18
    Thanks
    0
    Thanked
    0 times in 0 posts
    First, switch off simple file sharing if its on:
    Goto folder options in the control panel, click view then look for simple file sharing in the list and switch it off.

    yup

    Secondly, you need to make sure the users also have NTFS permissions. For the share, goto the security tab and make sure the access is allowed there.
    Remember the most restrictive permissions take effect of both the share and NTFS permissions.

    yup

    Finally, make sure file and printer sharing for MS networks is enabled for the network connection in use and that no firewall is blocking the relevant ports (TCP 445, TCP137-139 etc)
    yup

    (Jst a note you cant get to ACL's with out simple file sharing off, default NTFS is read only for Everyone & File and Print Sharing has to be enabled to get to share properties)

    Probably should mention I'm CCNA qualified along with most of my way though Computer Networks & security degree. i can encrypt cisco routers but xp networking is getting the better of me!

    i think it maybe to do with a local security policy i may of changed but I'm not sure what it could be.
    Last edited by Shadow_101; 26-10-2006 at 01:00 AM.

  4. #4
    Administrator Moby-Dick's Avatar
    Join Date
    Jul 2003
    Location
    There's no place like ::1 (IPv6 version)
    Posts
    10,665
    Thanks
    53
    Thanked
    385 times in 314 posts
    If windows already has a connection to a server under username A , you can't establish one with username B

    try mapping a drive and specifying the credentials or seeing as you are a command line cisco warrior , use the NET USE command with the following syntax


    NET USE
    [devicename | *] [\\computername\sharename[\volume] [password | *]]
    [/USER:[domainname\]username]
    [/USER:[dotted domain name\]username]
    [/USER:[username@dotted domain name]
    [/SMARTCARD]
    [/SAVECRED]
    [[/DELETE] | [/PERSISTENT:{YES | NO}]]

    NET USE {devicename | *} [password | *] /HOME

    NET USE [/PERSISTENT:{YES | NO}]


    as badass said , its best top have faily open permissions for the share itself , but restrict using the NTFS permissions.

    is the machine on a domain or standalone ?
    my Virtualisation Blog http://jfvi.co.uk Virtualisation Podcast http://vsoup.net

  5. #5
    Senior Member
    Join Date
    Mar 2005
    Posts
    4,826
    Thanks
    161
    Thanked
    358 times in 288 posts
    • badass's system
      • Motherboard:
      • ASUS P8Z77-m pro
      • CPU:
      • Core i5 3570K
      • Memory:
      • 32GB
      • Storage:
      • 1TB Samsung 850 EVO, 2TB WD Green
      • Graphics card(s):
      • Radeon RX 580
      • PSU:
      • Corsair HX520W
      • Case:
      • Silverstone SG02-F
      • Operating System:
      • Windows 10 X64
      • Monitor(s):
      • Del U2311, LG226WTQ
      • Internet:
      • 80/20 FTTC
    Quote Originally Posted by Shadow_101 View Post
    First, switch off simple file sharing if its on:
    Goto folder options in the control panel, click view then look for simple file sharing in the list and switch it off.

    yup

    Secondly, you need to make sure the users also have NTFS permissions. For the share, goto the security tab and make sure the access is allowed there.
    Remember the most restrictive permissions take effect of both the share and NTFS permissions.

    yup

    Finally, make sure file and printer sharing for MS networks is enabled for the network connection in use and that no firewall is blocking the relevant ports (TCP 445, TCP137-139 etc)
    yup

    (Jst a note you cant get to ACL's with out simple file sharing off, default NTFS is read only for Everyone & File and Print Sharing has to be enabled to get to share properties)

    Probably should mention I'm CCNA qualified along with most of my way though Computer Networks & security degree. i can encrypt cisco routers but xp networking is getting the better of me!

    i think it maybe to do with a local security policy i may of changed but I'm not sure what it could be.
    Next I will teach grandma how to suck eggs

    P.S. Think Moby's on the right track there
    "In a perfect world... spammers would get caught, go to jail, and share a cell with many men who have enlarged their penises, taken Viagra and are looking for a new relationship."

  6. #6
    Registered User
    Join Date
    Jan 2008
    Posts
    3
    Thanks
    0
    Thanked
    0 times in 0 posts

    Re: XP Pro ACL

    I have the 5200 Pro. I tried following these instructions (turning of the simple file sharing). Then I was able to get the security tab in Windows Explorer. I don't know how to change permissions. The permissions from the 5200 are different than what is in Windows Explorer security tab for each user. When I try to change them in Windows Explorer, it tells me access denied. I am logged in as administrator. I am totally confused right now. Please help.

    bvollrath

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Replies: 110
    Last Post: 10-10-2005, 07:52 PM
  2. 9800 Pro, X700 Pro, 6600GT
    By mike_w in forum Graphics Cards
    Replies: 12
    Last Post: 01-09-2005, 02:12 PM
  3. Bargain Herc 9800 Pro and 9700 pro!!!!!
    By GuruJockStrap in forum Retail Therapy and Bargains
    Replies: 10
    Last Post: 18-05-2004, 05:34 PM
  4. 9700 Pro or 9800 Pro?
    By floppybootstomp in forum Graphics Cards
    Replies: 13
    Last Post: 27-01-2004, 12:00 PM
  5. 9800 non pro or 5900 non ultra - Bargins?
    By TiG in forum Graphics Cards
    Replies: 12
    Last Post: 15-10-2003, 09:30 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •