In news:3e946140-c4bd-423a-a9d7-(E-Mail Removed),
Simon <(E-Mail Removed)> typed:
> Hello,all. A office have 10 pcs installed Windows XP(SP2),and all
> connect to a Windows Server 2003 Enterprise (SP2) with the function
> "Workgroup". Now I want to create some sharing folders on Server 2003
> for some users Windows XP.
> But I found some users can enter to his sharing folder on the Server,
> some cannot .I got this message "You might not have permission to use
> this network resource. Contact the administrator of the server to find
> out if you have access permissions. Access is denied"
> I have use "Computer Management" tools,in "Shared Folders---Sessions"
> sub tree-view, I found all the user who can't enter his sharing
> folder on the Server was logged into Server with the "guest" mode, and
> the user who can enter was logged as "user" mode.
> Pls view my screenshot in this address (http://www.granjumbo.com/
> guest.GIF ).
> I want to know what's the problem with the pc XP.Because some user can
> enter his sharing folder on the server, I think it has some problem or
> bad setting in the PCs of XP which can't enter the server.
> Best regards.
Because they are an unknown account. Workgroups are problematic in a
business environment. If you want to use workgroups, meaning without
centralized account and security access management such as what AD gives
you, you will need to make sure there is an identical account created
between the two machines in question, meaning the server and the user logged
on to the stand alone machine. So if you have Tom, Dick and Harry logging on
to their local machines using those name, you have to make identical
accounts on the server with the same exact passwords and usernames. They can
also access it using secondary logon method (runas), including using a
different user account when mapping a drive. Also, security settings on the
local machine, such as Defender or the Windows Firewall, or any other third
party security software (McAfee? Norton?) will cause numerous issues as
well. There are numerous things going on complicating a direct solution.
Maybe using IP addresses instead of the computer names which will force a
logon box to appear, may be helpful. Third party stuff needs to be
configured to allow the traffic type, including F&P services.
IMHO, your best bet is to install a domain to SIMPLIFY the whole thing,
especially since you have 10 users.
--
Regards,
Ace
This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.
Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT,
MVP Microsoft MVP - Directory Services
Microsoft Certified Trainer
Infinite Diversities in Infinite Combinations