On Fri, 25 Nov 2005 10:50:02 -0800, "p7sky" <p7sky@discussions.microsoft.com>
wrote:
>
>
>"Chuck" wrote:
>
>> On Tue, 22 Nov 2005 10:29:02 -0800, "p7sky" <p7sky@discussions.microsoft.com>
>> wrote:
>>
>> >"Chuck" wrote:
>> >
>> >> On Mon, 21 Nov 2005 09:26:01 -0800, "p7sky" <p7sky@discussions.microsoft.com>
>> >> wrote:
>> >>
>> >> >Hello, I recently ran System Mechanic 6 on two of the computers in my
>> >> >three-computer Win XP Pro p2p net; subsequently I discovered that I had no
>> >> >access to those two computers from the third unit or from each other. I
>> >> >discovered a post in a PC World forum noting a similar situation; the author
>> >> >suggested changing to "disabled" the following entries in Security Settings
>> >> >>Local Policies >Security Options:
>> >> >
>> >> >Network access: Do not allow anonymous enumeration of SAM accounts Disabled
>> >> >Network access: Do not allow anonymous enumeration of SAM accounts and
>> >> >shares Disabled
>> >> >
>> >> > I did this on one computer and my access was restored. Trying to do it on
>> >> >the other computer, I discovered that these entries were not present in
>> >> >Security Options -- in fact, as opposed to a lengthy list of options I found
>> >> >on the "fixed" computer, this computer's Security Options were limited to six
>> >> >choices -- none of which was the desired choice. Can anyone give me some
>> >> >guidance as to rebuilding/restoring the default list of Security Options so
>> >> >that I can set them correctly ? (I do not have an appropriate System Restore
>> >> >point available). The help file mentioned loading and editing templates, but
>> >> >it didn't say which of the templates was appropriate.
>> >> >
>> >> >Any help greatly appreciated.
>> >> >Thanks
>> >> >Paul
>> >>
>> >> Paul,
>> >>
>> >> The change needed is known as Registry setting restrictanonymous.
>> >> <http://nitecruzr.blogspot.com/2005/07/restrictanonymous-and-your-server.html>
>> >> http://nitecruzr.blogspot.com/2005/0...ur-server.html
>>
>> >Hi, Chuck, thanks for your reply. I examined the registry key you indicated
>> >on the problem machine and found that it says:
>> >
>> >Name Type Data
>> >restrictanonymous REG_DWORD 0x00000000 (0)
>> >restrictanonymoussam REG_DWORD 0x00000000 (1)
>> >
>> >The "restrictanonymous" data value on the problem machine is identical to
>> >the two "working" machines; so it would appear my problem may lie elsewhere
>> >(the restrictanonymoussam value differs on the two working machines; one is
>> >1, like the problem machine, the other is 0, but I believe that is because I
>> >changed the enable/disable SAM choice in Security Options for that machine as
>> >noted in my original post. I know your site info said the SAM value was not
>> >relevant in this case)
>> >
>> >I am not the most skilled practitioner when it comes to working the
>> >registry; would there be any other values to look at? I wish I had the full
>> >list of options in Security Options on the problem machine as I do on the
>> >working ones -- then I could compare the options line by line.
>> >
>> >Thank you.
>> >Paul
>>
>> Paul,
>>
>> So it looks like that's not the problem. Try my troubleshooting guide, and post
>> "browstat status" and "ipconfig /all" from each computer, if nothing else comes
>> to mind.
>> <http://nitecruzr.blogspot.com/2005/10/irregularities-in-workgroup-visibility.html>
>> http://nitecruzr.blogspot.com/2005/1...isibility.html
>Hi, Chuck -- hope you had a nice Thanksgiving (I see you're from Calif).
>
>Here are the ipconfig and browstat results for all three computers, in this
>order Main - Dell - Compaq. "Main" is the problem computer; it's also the one
>that the peripherals are hooked to if that makes any difference -- two
>printers, wireless router and DSL modem. Both the Dell and Compaq return
>Error 5 when trying to connect to Main.
<SNIP>
>Any further guidance is greatly appreciated.
>Paul
Hi Paul,
Well, I am just this afternoon able to work steadily. Thanksgiving is
traditionally a time of overeating. I bow to tradition. I couldn't bow last
night though. ;-}
So, what do we know about your LAN?
# You have 3 computers, each one in subnet 192.168.0/24, gateway 192.168.0.1.
# Name resolution is OK - Hybrid and Unknown are compatible.
# All 3 are in domain / workgroup "7SKY COMM".
# All 3 can see each other as servers ("There are 3 servers in domain 7SKY
COMM").
# Compaq and Dell cannot connect to the registry on Main ("error = 5"). That
indicates either a firewall problem, or Main is running Simple File Sharing, or
is otherwise configured to not give administrative access from Compaq and Dell.
What edition (Home or Pro) is each running?
How is Main connected to the router? How is Compaq connected? The Bridge ("MAC
Bridge Miniport") looks like the best culprit.
<http://nitecruzr.blogspot.com/2005/05/reading-ipconfig-and-diagnosing.html#Bridge>
Try removing the bridge - if that doesn't help, post an updated "ipconfig /all"
from Compaq.
--
Cheers,
Chuck, MS-MVP [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My email is AT DOT
actual address pchuck mvps org.