Firewall blocks File sharing in Windows 2008 connected to the domain.

I am getting crazy. We connected our Windows 2008 to the domain. We made
share, give share rights to everyone and in security added users. When
we try to connect to the share by:

\\Ipnumber\Share$

It not work.

When I disable firewall at all than I can access all shares from another
machines in the network but when firewall is enabled than it does
not work.

In simple firewall setting File and printer sharing is enabled in exceptions
But there is two entries for File and Printers sharing in Exceptions. In
the other one Group Policy is Yes.
What should I change in firewall to be able to access all shares on the
server???

I tried to change domain profile from group policy. I enabled inbound
file and printer sharing exceptions. Then I check Firewall and it is
still blocking:

NetBIOS Datagram Service Profile:domain
NetBIOs sesion service Profile:domain
SMB over TCP Profile:domain

What to do make action allow.
I can not change it from the Windows Firewall and Advanced Security.
When I click on the rule it says:
This rule has been applied by the system administrator and cannot be
modified.

Anybody can help?



Marcus B

We have seen many cases like this in Vista. This is by design for the
security reason. This search result may give you more details.

Vista Permission IssuesVista issues By default, Vista administrative shares
eg C$, D$) are not shared by default for security reasons. You should create
your own shares to share . ...
www.chicagotech.net/vista/vistapermission.htm


--
Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.HowToNetworking.com
"MarcusB" <(E-Mail Removed)> wrote in message
news:%23kDKWC%(E-Mail Removed)...
>I am getting crazy. We connected our Windows 2008 to the domain. We made
>share, give share rights to everyone and in security added users. When we
>try to connect to the share by:
>
> \\Ipnumber\Share$
>
> It not work.
>
> When I disable firewall at all than I can access all shares from another
> machines in the network but when firewall is enabled than it does
> not work.
>
> In simple firewall setting File and printer sharing is enabled in
> exceptions
> But there is two entries for File and Printers sharing in Exceptions. In
> the other one Group Policy is Yes.
> What should I change in firewall to be able to access all shares on the
> server???
>
> I tried to change domain profile from group policy. I enabled inbound file
> and printer sharing exceptions. Then I check Firewall and it is still
> blocking:
>
> NetBIOS Datagram Service Profile:domain
> NetBIOs sesion service Profile:domain
> SMB over TCP Profile:domain
>
> What to do make action allow.
> I can not change it from the Windows Firewall and Advanced Security.
> When I click on the rule it says:
> This rule has been applied by the system administrator and cannot be
> modified.
>
> Anybody can help?
>
>
>
> Marcus B

Check your "Share" permissions (i.e. not file permissions but Share
permissions). Make sure Everyone has access to full/change/read.

-Frank

"MarcusB" <(E-Mail Removed)> wrote in message
news:%23kDKWC%(E-Mail Removed)...
>I am getting crazy. We connected our Windows 2008 to the domain. We made
>share, give share rights to everyone and in security added users. When we
>try to connect to the share by:
>
> \\Ipnumber\Share$
>
> It not work.
>
> When I disable firewall at all than I can access all shares from another
> machines in the network but when firewall is enabled than it does
> not work.
>
> In simple firewall setting File and printer sharing is enabled in
> exceptions
> But there is two entries for File and Printers sharing in Exceptions. In
> the other one Group Policy is Yes.
> What should I change in firewall to be able to access all shares on the
> server???
>
> I tried to change domain profile from group policy. I enabled inbound file
> and printer sharing exceptions. Then I check Firewall and it is still
> blocking:
>
> NetBIOS Datagram Service Profile:domain
> NetBIOs sesion service Profile:domain
> SMB over TCP Profile:domain
>
> What to do make action allow.
> I can not change it from the Windows Firewall and Advanced Security.
> When I click on the rule it says:
> This rule has been applied by the system administrator and cannot be
> modified.
>
> Anybody can help?
>
>
>
> Marcus B

Yes , all have all rights.
If there will be share permission than you will get access denied when
you try to connect to the shara from other machine. Locally I can
connect to the share and also from other machine if I turn off firewall.


MarcusB
Frankster wrote:
> Check your "Share" permissions (i.e. not file permissions but Share
> permissions). Make sure Everyone has access to full/change/read.
>
> -Frank
>
> "MarcusB" <(E-Mail Removed)> wrote in message
> news:%23kDKWC%(E-Mail Removed)...
>> I am getting crazy. We connected our Windows 2008 to the domain. We
>> made share, give share rights to everyone and in security added
>> users. When we try to connect to the share by:
>>
>> \\Ipnumber\Share$
>>
>> It not work.
>>
>> When I disable firewall at all than I can access all shares from
>> another machines in the network but when firewall is enabled than it does
>> not work.
>>
>> In simple firewall setting File and printer sharing is enabled in
>> exceptions
>> But there is two entries for File and Printers sharing in Exceptions.
>> In the other one Group Policy is Yes.
>> What should I change in firewall to be able to access all shares on
>> the server???
>>
>> I tried to change domain profile from group policy. I enabled inbound
>> file and printer sharing exceptions. Then I check Firewall and it is
>> still blocking:
>>
>> NetBIOS Datagram Service Profile:domain
>> NetBIOs sesion service Profile:domain
>> SMB over TCP Profile:domain
>>
>> What to do make action allow.
>> I can not change it from the Windows Firewall and Advanced Security.
>> When I click on the rule it says:
>> This rule has been applied by the system administrator and cannot be
>> modified.
>>
>> Anybody can help?
>>
>>
>>
>> Marcus B
>

If using net view \\w2008ipaddress, can you see any shares? if not, what's
the system error?

--
Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.HowToNetworking.com
"MarcusB" <(E-Mail Removed)> wrote in message
news:ejQ8Z$$(E-Mail Removed)...
>I am not getting access denied from other computers. They can not see
> shares att all. Check attachment
>
> MarcusB
>
>
> Robert L. (MS-MVP) wrote:
>> We have seen many cases like this in Vista. This is by design for the
>> security reason. This search result may give you more details.
>>
>> Vista Permission IssuesVista issues By default, Vista administrative
>> shares eg C$, D$) are not shared by default for security reasons. You
>> should create your own shares to share . ...
>> www.chicagotech.net/vista/vistapermission.htm
>>
>>
>
>