Windows workgroup debug "User has not been Granted the Requested Login Type"

In my previous post, I demonstrated how to set up windows workgroup.

Setting up windows workgroup is easy, only if you are lucky enough.
The most common error message ppl bumped into is:

"\\xxx is not accessible. You might not have permission to use this network resource. Contact the administrator of this Server to find out if you have access permissions."

A lot of reason can cause the above error message.

1. Check the firewall settings (it may even prevent you to ping through).

Go to START -> Control Panel -> Securety Center -> Windows Firewall -> Select OFF

and see if the error gets fixed. If so, you may turn on firewall and change the firewall exceptions.

2. Make sure user "Guest" is enabled.

Go to START -> Control panel -> User Accounts -> click User Accounts -> Make sure Guest is turned on.

3. For windows xp pro, you may need to modify the Local Security Policy to allow the Guest to access the computer from network.

Go to START -> Control Panel -> Performance and Maintainance -> Administrative Tools -> Local Security Policy -> Local Policy -> User Rights Accessment

Find the key "Deny access to this computer from network", double click the key, high-light "Guest", Click remove, Click OK.

4. In some odd situations, you may need to check the registry to make sure restrictanonymous key is correctly set.

Click Start, click Run, type regedit, and then click OK.

Locate and then double-click the following registry subkey:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

On the right side, double-click restrictanonymous.

Make sure that the value in the Value data box is set to 0, and then click OK.

Close Registry Editor.

Restart the computer.

5. If none of the above works, here is the ultimate solution from John Will.

Download the Windows Server 2003 Resource Kit Tools from microsoft Download center, which are a set of tools to help administrators streamline management tasks.

After installation is complete, click on: Start -> All Programs -> Windows Resource Kit Tools -> Command Shell

Then enter the following commands. (Attention: they are case sensitive.)

net user guest /active:yes
ntrights +r SeNetworkLogonRight -u Guest
ntrights -r SeDenyNetworkLogonRight -u Guest
The first command enables network access for Guest, the two subsequent ones change two different policies to allow network access for Guest.

So far, the errors should be clean and you should be able to double click into the computers on your local workgroup. However, nothing too interesting there except the default folder "Printers and Faxes". To enable file-sharing, we need to do a few tweeks, which will be discussed in my next post.

[ Socialize This]