Problem Sharing Between XP and Vista

I have a problem similar to but a little bit different.

We have a combination wired/wireless home network in my house, consisting of
4 computers, all connected through the router which connects directly to the
internet. The configuration is this:h
Desktop1 - connected directly to router, running XP
Desktop2- connected directly to router, running Vista
Laptop1 - connected wirelessly, running Vista
Laptop2- connected wirelessly, running XP.

As of right now, Desktop 2, Laptop1 and Laptop 2 have no problems sharing
files with each other.
Desktop 1 can view all the other computers shared files, but Laptop1 cannot
view any of Desktop 1's shared files. I consistently get a "denied access"
message.
I don't know if the other computers can access Desktop1 (they aren't my
computers). It's most important to get Laptop1 and Desktop1 to share files.
All computers have shared files/printers on, with password protection off,
and I've gone through the network wizards over and over.
I should mention that Laptop1 can *view* Desktop1 on the network. It sees
it, it knows it's there...but the Desktop will not allow access, even though
the files on the Desktop are set to be shared. I also tried turning the
firewall off, and it still would not grant access. None of the other
computers are having issues...there's go to be a solution to this, I'm just
not finding it.

I meant to say my issue is similar to ElenionTolto's post. Sorry.

HonorAlexandria wrote:
> I have a problem similar to but a little bit different.
>
> We have a combination wired/wireless home network in my house, consisting of
> 4 computers, all connected through the router which connects directly to the
> internet. The configuration is this:h
> Desktop1 - connected directly to router, running XP
> Desktop2- connected directly to router, running Vista
> Laptop1 - connected wirelessly, running Vista
> Laptop2- connected wirelessly, running XP.
>
> As of right now, Desktop 2, Laptop1 and Laptop 2 have no problems sharing
> files with each other.
> Desktop 1 can view all the other computers shared files, but Laptop1 cannot
> view any of Desktop 1's shared files. I consistently get a "denied access"
> message.
> I don't know if the other computers can access Desktop1 (they aren't my
> computers). It's most important to get Laptop1 and Desktop1 to share files.
> All computers have shared files/printers on, with password protection off,
> and I've gone through the network wizards over and over.
> I should mention that Laptop1 can *view* Desktop1 on the network. It sees
> it, it knows it's there...but the Desktop will not allow access, even though
> the files on the Desktop are set to be shared. I also tried turning the
> firewall off, and it still would not grant access. None of the other
> computers are having issues...there's go to be a solution to this, I'm just
> not finding it.

Turn password protection ON and create matching user accounts/passwords
on all machines and also check your firewalls (see below).

*****
Problems sharing files between computers on a network are generally
caused by 1) a misconfigured firewall; or 2) inadvertently running two
firewalls such as the built-in Windows Firewall and a third-party
firewall; and/or 3) not having identical user accounts and passwords on
all Workgroup machines; 4) trying to create shares where the operating
system does not permit it.

A. Configure firewalls on all machines to allow the Local Area Network
(LAN) traffic as trusted. With Windows Firewall, this means allowing
File/Printer Sharing on the Exceptions tab. Normally running the Network
Setup Wizard on XP will take care of this for those machines.The only
"gotcha" is that this will turn on the XPSP2 Windows Firewall. If you
aren't running a third-party firewall or have an antivirus with
"Internet Worm Protection" (like Norton 2006/07) which acts as a
firewall, then you're fine. With third-party firewalls, I usually
configure the LAN allowance with an IP range. Ex. would be
192.168.1.0-192.168.1.254. Obviously you would substitute your correct
subnet. Do not run more than one firewall.

B. For ease or organization, put all computers in the same Workgroup.
This is done from the System applet in Control Panel, Computer Name tab.

C. Create matching user accounts and passwords on all machines. You do
not need to be logged into the same account on all machines and the
passwords assigned to each user account can be different; the
accounts/passwords just need to exist and match on all machines. If you
wish a machine to boot directly to the Desktop (into one particular
user's account) for convenience, you can do this. The instructions at
this link work for both XP and Vista:

Configure Windows to Automatically Login (MVP Ramesh) -
http://windowsxp.mvps.org/Autologon.htm

D. If one or more of the computers is XP Pro or Media Center:

1. If you need Pro's ability to set fine-grained permissions, turn off
Simple File Sharing (Folder Options>View tab) and create identical user
accounts/passwords on all computers.

2. If you don't care about using Pro's advanced features, leave the
Simple File Sharing enabled. Simple File Sharing means that Guest
(network) is enabled. This means that anyone without a user account on
the target system can use its resources. This is a security hole but
only you can decide if it matters in your situation.

E. Create shares as desired. XP Home does not permit sharing of users'
home directories (My Documents) or Program Files, but you can share
folders inside those directories. A better choice is to simply use the
Shared Documents folder.
*****

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

Malke,
I know this isn't a firewall issue as I was sure to turn off both windows
firewall and my 3rd party firewall on both machine, and I still got an access
denied message.

I don't understand why ALL machines on the network have to have matching
user accounts. Two of the machines aren't mine and so I can't do anything on
them. Still, the other 3 machines have no problems connecting and sharing to
each other, even though they don't have matching user accounts. It's only the
one Desktop running XP that's having a problem. And now that I recall (I
spent a long time on the issue last night, so I couldn't remember everything
I did) I DID create an account on the laptop that matched the username and
settings as the administrator account on the desktop I'm having problems
with, and it still didn't work.
Also, all computers are/were in the same workgroup.

"Malke" wrote:

> HonorAlexandria wrote:
> > I have a problem similar to but a little bit different.
> >
> > We have a combination wired/wireless home network in my house, consisting of
> > 4 computers, all connected through the router which connects directly to the
> > internet. The configuration is this:h
> > Desktop1 - connected directly to router, running XP
> > Desktop2- connected directly to router, running Vista
> > Laptop1 - connected wirelessly, running Vista
> > Laptop2- connected wirelessly, running XP.
> >
> > As of right now, Desktop 2, Laptop1 and Laptop 2 have no problems sharing
> > files with each other.
> > Desktop 1 can view all the other computers shared files, but Laptop1 cannot
> > view any of Desktop 1's shared files. I consistently get a "denied access"
> > message.
> > I don't know if the other computers can access Desktop1 (they aren't my
> > computers). It's most important to get Laptop1 and Desktop1 to share files.
> > All computers have shared files/printers on, with password protection off,
> > and I've gone through the network wizards over and over.
> > I should mention that Laptop1 can *view* Desktop1 on the network. It sees
> > it, it knows it's there...but the Desktop will not allow access, even though
> > the files on the Desktop are set to be shared. I also tried turning the
> > firewall off, and it still would not grant access. None of the other
> > computers are having issues...there's go to be a solution to this, I'm just
> > not finding it.
>
> Turn password protection ON and create matching user accounts/passwords
> on all machines and also check your firewalls (see below).
>
> *****
> Problems sharing files between computers on a network are generally
> caused by 1) a misconfigured firewall; or 2) inadvertently running two
> firewalls such as the built-in Windows Firewall and a third-party
> firewall; and/or 3) not having identical user accounts and passwords on
> all Workgroup machines; 4) trying to create shares where the operating
> system does not permit it.
>
> A. Configure firewalls on all machines to allow the Local Area Network
> (LAN) traffic as trusted. With Windows Firewall, this means allowing
> File/Printer Sharing on the Exceptions tab. Normally running the Network
> Setup Wizard on XP will take care of this for those machines.The only
> "gotcha" is that this will turn on the XPSP2 Windows Firewall. If you
> aren't running a third-party firewall or have an antivirus with
> "Internet Worm Protection" (like Norton 2006/07) which acts as a
> firewall, then you're fine. With third-party firewalls, I usually
> configure the LAN allowance with an IP range. Ex. would be
> 192.168.1.0-192.168.1.254. Obviously you would substitute your correct
> subnet. Do not run more than one firewall.
>
> B. For ease or organization, put all computers in the same Workgroup.
> This is done from the System applet in Control Panel, Computer Name tab.
>
> C. Create matching user accounts and passwords on all machines. You do
> not need to be logged into the same account on all machines and the
> passwords assigned to each user account can be different; the
> accounts/passwords just need to exist and match on all machines. If you
> wish a machine to boot directly to the Desktop (into one particular
> user's account) for convenience, you can do this. The instructions at
> this link work for both XP and Vista:
>
> Configure Windows to Automatically Login (MVP Ramesh) -
> http://windowsxp.mvps.org/Autologon.htm
>
> D. If one or more of the computers is XP Pro or Media Center:
>
> 1. If you need Pro's ability to set fine-grained permissions, turn off
> Simple File Sharing (Folder Options>View tab) and create identical user
> accounts/passwords on all computers.
>
> 2. If you don't care about using Pro's advanced features, leave the
> Simple File Sharing enabled. Simple File Sharing means that Guest
> (network) is enabled. This means that anyone without a user account on
> the target system can use its resources. This is a security hole but
> only you can decide if it matters in your situation.
>
> E. Create shares as desired. XP Home does not permit sharing of users'
> home directories (My Documents) or Program Files, but you can share
> folders inside those directories. A better choice is to simply use the
> Shared Documents folder.
> *****
>
> Malke
> --
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic!"
> MS-MVP Windows - Shell/User
>

HonorAlexandria wrote:
> Malke,
> I know this isn't a firewall issue as I was sure to turn off both windows
> firewall and my 3rd party firewall on both machine, and I still got an access
> denied message.
>
> I don't understand why ALL machines on the network have to have matching
> user accounts. Two of the machines aren't mine and so I can't do anything on
> them. Still, the other 3 machines have no problems connecting and sharing to
> each other, even though they don't have matching user accounts. It's only the
> one Desktop running XP that's having a problem. And now that I recall (I
> spent a long time on the issue last night, so I couldn't remember everything
> I did) I DID create an account on the laptop that matched the username and
> settings as the administrator account on the desktop I'm having problems
> with, and it still didn't work.
> Also, all computers are/were in the same workgroup.

On a peer-to-peer network ("Workgroup" in the Windows world) as opposed
to a domain with a server running a real server operating system,
authentication is done on the local machine since there is no central
place to check (the server). In practice, this means:

Computer A - user Honor (password 1234)
Computer B - user James (password 5678)

When Computer A makes a request for shared resources to Computer B,
Computer B checks its "list" to see if Honor (password 1234) is one of
its own users. When it finds s/he isn't, it then pops up a dialog
whereby the user on Computer A can provide a username/password
acceptable to Computer B (which would be user James in this case).
Conversely, if Honor (password 1234) *does* exist on Computer B, even
though a different user (user James) is currently logged in Computer B
will allow the request and the resources will be shared seamlessly.

So, the easiest thing in mixed operating system Workgroups is to simply
create matching user accounts and passwords.

When troubleshooting, we in the tech business usually suggest that if
you have a third-party firewall installed on the troublesome machine,
uninstall it. Don't just disable it. Then test.

Since the only problem is an XP box, please review this part of my
"guidelet" again:

If one or more of the computers is XP Pro or Media Center:

1. If you need Pro's ability to set fine-grained permissions, turn off
Simple File Sharing (Folder Options>View tab) and create identical user
accounts/passwords on all computers.

2. If you don't care about using Pro's advanced features, leave the
Simple File Sharing enabled. Simple File Sharing means that Guest
(network) is enabled. This means that anyone without a user account on
the target system can use its resources. This is a security hole but
only you can decide if it matters in your situation.

If you still can't get this, then take the time to go through MVP
Hans-Georg Michna's small network troubleshooter. It usually will
pinpoint the source of the problem:

http://winhlp.com/wxnet.htm

Of course, I can't see your network and so I don't know what you've done
(or not done, either). All I can tell you is authentication (access
denied) errors are usually caused by 1) misconfigured firewalls or
having two firewalls running; 2) misconfigured user accounts and/or
guest access (simple file sharing); 3) incorrect permissions on the shares.


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

On Wed, 9 Jan 2008 08:46:05 -0800, HonorAlexandria
<HonorAlexandria@discussions.microsoft.com> wrote:

>"Malke" wrote:
>
>> HonorAlexandria wrote:
>> > I have a problem similar to but a little bit different.
>> >
>> > We have a combination wired/wireless home network in my house, consisting of
>> > 4 computers, all connected through the router which connects directly to the
>> > internet. The configuration is this:h
>> > Desktop1 - connected directly to router, running XP
>> > Desktop2- connected directly to router, running Vista
>> > Laptop1 - connected wirelessly, running Vista
>> > Laptop2- connected wirelessly, running XP.
>> >
>> > As of right now, Desktop 2, Laptop1 and Laptop 2 have no problems sharing
>> > files with each other.
>> > Desktop 1 can view all the other computers shared files, but Laptop1 cannot
>> > view any of Desktop 1's shared files. I consistently get a "denied access"
>> > message.
>> > I don't know if the other computers can access Desktop1 (they aren't my
>> > computers). It's most important to get Laptop1 and Desktop1 to share files.
>> > All computers have shared files/printers on, with password protection off,
>> > and I've gone through the network wizards over and over.
>> > I should mention that Laptop1 can *view* Desktop1 on the network. It sees
>> > it, it knows it's there...but the Desktop will not allow access, even though
>> > the files on the Desktop are set to be shared. I also tried turning the
>> > firewall off, and it still would not grant access. None of the other
>> > computers are having issues...there's go to be a solution to this, I'm just
>> > not finding it.
>>
>> Turn password protection ON and create matching user accounts/passwords
>> on all machines and also check your firewalls (see below).
>>
>> *****
>> Problems sharing files between computers on a network are generally
>> caused by 1) a misconfigured firewall; or 2) inadvertently running two
>> firewalls such as the built-in Windows Firewall and a third-party
>> firewall; and/or 3) not having identical user accounts and passwords on
>> all Workgroup machines; 4) trying to create shares where the operating
>> system does not permit it.
>>
>> A. Configure firewalls on all machines to allow the Local Area Network
>> (LAN) traffic as trusted. With Windows Firewall, this means allowing
>> File/Printer Sharing on the Exceptions tab. Normally running the Network
>> Setup Wizard on XP will take care of this for those machines.The only
>> "gotcha" is that this will turn on the XPSP2 Windows Firewall. If you
>> aren't running a third-party firewall or have an antivirus with
>> "Internet Worm Protection" (like Norton 2006/07) which acts as a
>> firewall, then you're fine. With third-party firewalls, I usually
>> configure the LAN allowance with an IP range. Ex. would be
>> 192.168.1.0-192.168.1.254. Obviously you would substitute your correct
>> subnet. Do not run more than one firewall.
>>
>> B. For ease or organization, put all computers in the same Workgroup.
>> This is done from the System applet in Control Panel, Computer Name tab.
>>
>> C. Create matching user accounts and passwords on all machines. You do
>> not need to be logged into the same account on all machines and the
>> passwords assigned to each user account can be different; the
>> accounts/passwords just need to exist and match on all machines. If you
>> wish a machine to boot directly to the Desktop (into one particular
>> user's account) for convenience, you can do this. The instructions at
>> this link work for both XP and Vista:
>>
>> Configure Windows to Automatically Login (MVP Ramesh) -
>> http://windowsxp.mvps.org/Autologon.htm
>>
>> D. If one or more of the computers is XP Pro or Media Center:
>>
>> 1. If you need Pro's ability to set fine-grained permissions, turn off
>> Simple File Sharing (Folder Options>View tab) and create identical user
>> accounts/passwords on all computers.
>>
>> 2. If you don't care about using Pro's advanced features, leave the
>> Simple File Sharing enabled. Simple File Sharing means that Guest
>> (network) is enabled. This means that anyone without a user account on
>> the target system can use its resources. This is a security hole but
>> only you can decide if it matters in your situation.
>>
>> E. Create shares as desired. XP Home does not permit sharing of users'
>> home directories (My Documents) or Program Files, but you can share
>> folders inside those directories. A better choice is to simply use the
>> Shared Documents folder.

>Malke,
>I know this isn't a firewall issue as I was sure to turn off both windows
>firewall and my 3rd party firewall on both machine, and I still got an access
>denied message.
>
>I don't understand why ALL machines on the network have to have matching
>user accounts. Two of the machines aren't mine and so I can't do anything on
>them. Still, the other 3 machines have no problems connecting and sharing to
>each other, even though they don't have matching user accounts. It's only the
>one Desktop running XP that's having a problem. And now that I recall (I
>spent a long time on the issue last night, so I couldn't remember everything
>I did) I DID create an account on the laptop that matched the username and
>settings as the administrator account on the desktop I'm having problems
>with, and it still didn't work.
>Also, all computers are/were in the same workgroup.

Of the computers running Windows XP, are they running XP Home or Pro? If Pro,
is Simple File Sharing enabled, or disabled? Of the computers running Windows
Vista, is Password Protected Sharing disabled, or enabled? Of EACH computer, if
SFS is disabled or PPS is enabled, is Guest, or non-Guest authentication used?
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html>
http://nitecruzr.blogspot.com/2005/0...indows-xp.html

Once you know which authentication, Guest or non-Guest, is in use, you need to
activate the proper account for network access.
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Activate>
http://nitecruzr.blogspot.com/2005/0....html#Activate

These are annoying details, but they are annoying details that you need to be
aware of.

--
Cheers,
Chuck, MS-MVP 2005-2007 [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My email is AT DOT
actual address pchuck mvps org.

I'm not doubting your knowledge, but the "all computers must have same user
account" still does not make sense. I say this because NONE of the computers
have matching user accounts; none of them. Even the initial "adminstrator"
account that's only viewable in safe mode has been removed on these
computers.
So none have matching user accounts, but when the other XP machine attemps
to gain access to share files of the other vista machines, there is no
problem. Similarly, when the Vista laptop tried to view the other XP laptop,
there is no problem.
However, the XP laptop (w/out issues) is Pro. The XP desktop (with issues)
is home.

I DID try creating a user account on the XP desktop that matched the name,
password and account level of the account on the Vista laptop - No change.
With this account still in place and firewalls on both machines disabled
completely; I have no change. I have not tried uninstalling yet, because
that is a huge PITA. Both systems only have one firewall, Windows firewall in
disabled all the time.

Chuck:

The XP system with issues is home. The other XP system (laptop) with no
issues is Pro.
On the vista system, PPS is disabled.

I'm sorry to be such a pain.

"Malke" wrote:

> HonorAlexandria wrote:
> > Malke,
> > I know this isn't a firewall issue as I was sure to turn off both windows
> > firewall and my 3rd party firewall on both machine, and I still got an access
> > denied message.
> >
> > I don't understand why ALL machines on the network have to have matching
> > user accounts. Two of the machines aren't mine and so I can't do anything on
> > them. Still, the other 3 machines have no problems connecting and sharing to
> > each other, even though they don't have matching user accounts. It's only the
> > one Desktop running XP that's having a problem. And now that I recall (I
> > spent a long time on the issue last night, so I couldn't remember everything
> > I did) I DID create an account on the laptop that matched the username and
> > settings as the administrator account on the desktop I'm having problems
> > with, and it still didn't work.
> > Also, all computers are/were in the same workgroup.
>
> On a peer-to-peer network ("Workgroup" in the Windows world) as opposed
> to a domain with a server running a real server operating system,
> authentication is done on the local machine since there is no central
> place to check (the server). In practice, this means:
>
> Computer A - user Honor (password 1234)
> Computer B - user James (password 5678)
>
> When Computer A makes a request for shared resources to Computer B,
> Computer B checks its "list" to see if Honor (password 1234) is one of
> its own users. When it finds s/he isn't, it then pops up a dialog
> whereby the user on Computer A can provide a username/password
> acceptable to Computer B (which would be user James in this case).
> Conversely, if Honor (password 1234) *does* exist on Computer B, even
> though a different user (user James) is currently logged in Computer B
> will allow the request and the resources will be shared seamlessly.
>
> So, the easiest thing in mixed operating system Workgroups is to simply
> create matching user accounts and passwords.
>
> When troubleshooting, we in the tech business usually suggest that if
> you have a third-party firewall installed on the troublesome machine,
> uninstall it. Don't just disable it. Then test.
>
> Since the only problem is an XP box, please review this part of my
> "guidelet" again:
>
> If one or more of the computers is XP Pro or Media Center:
>
> 1. If you need Pro's ability to set fine-grained permissions, turn off
> Simple File Sharing (Folder Options>View tab) and create identical user
> accounts/passwords on all computers.
>
> 2. If you don't care about using Pro's advanced features, leave the
> Simple File Sharing enabled. Simple File Sharing means that Guest
> (network) is enabled. This means that anyone without a user account on
> the target system can use its resources. This is a security hole but
> only you can decide if it matters in your situation.
>
> If you still can't get this, then take the time to go through MVP
> Hans-Georg Michna's small network troubleshooter. It usually will
> pinpoint the source of the problem:
>
> http://winhlp.com/wxnet.htm
>
> Of course, I can't see your network and so I don't know what you've done
> (or not done, either). All I can tell you is authentication (access
> denied) errors are usually caused by 1) misconfigured firewalls or
> having two firewalls running; 2) misconfigured user accounts and/or
> guest access (simple file sharing); 3) incorrect permissions on the shares.
>
>
> Malke
> --
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic!"
> MS-MVP Windows - Shell/User
>

Also: I'm not sure if I mentioned this before but:

The XP (Home) Desktop which I'm having trouble "viewing" on the Vista
Laptop... can view and open the shared files on the Vista Laptop, but the
Vista Laptop can't view shared files on the XP Desktop.

So it's not a complete communication problem. Also note that when I try to
access the XP Desktop on the vista laptop, I am not queried for a username or
password, but am immediately told access is denied.

UPDATE:

So I uninstalled the firewall/anti-virus programs on BOTH computers (both
use the same program).
With the firewall uninstalled, and with matching user accounts on both
computers, I was still unable to access the desktop, with the same message
"access denied". I then disabled the windows firewall (so absolutely no
firewall) and got the same result.
Both machines WERE able to ping each other with the 3rd party firewall
disabled, but windows firewall enabled (even though I still got the access
denied message). Both machines were unable to ping with the 3rd party
firewall installed and active.

Is it me or is this really WEIRD?

HonorAlexandria wrote:
> I'm not doubting your knowledge, but the "all computers must have same user
> account" still does not make sense. I say this because NONE of the computers
> have matching user accounts; none of them. Even the initial "adminstrator"
> account that's only viewable in safe mode has been removed on these
> computers.

(snippage)

Then they are connecting as Guest (Simple File Sharing) and probably the
one XP machine that isn't connecting properly is not. Or you have
something else messed up that I can't know about because you cannot
remove the built-in Administrator (only visible in Safe Mode on XP Home
machines), so your last statement above must be inaccurate and you are
misunderstanding something you are seeing.

Go through MVP Hans-Georg Michna's troubleshooter or have a local
professional come on-site and see what is really happening on your machines.


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User