Windows shared file analysis

Directory of this article

1. Issues to be addressed in this article
2. General procedures for sharing folders
3. Reasons for file sharing failure and solutions
?? 3.1 Does your workgroup affect shared files?
?? 3.2 Firewall is not set up correctly
?? 3.3 Users are disabled
???? 3.3.1Guest User is disabled
???? 3.3.2 Other users are disabled
???? 3.4 User does not have permission to access
???? 3.5 Local Security Policy disabled
???? File and Printer Sharing for 3.6 Nic is not open.
???? 3.7 The system uses the cached account access that was previously connected
4. Additional Knowledge
?? 4.1 Figure 1 Summary of each option.
?? 4.2 Two ways to access shared folders
?? usage of 4.3 net use
?? 4.4 Nic Property Interpretation
?? 4.5 Network Discovery Dependent service and firewall ports and how to set up

1. Problems to be solved in this article

?? In the process of using Windows systems, we generally share folders mainly using the system's own features. However, there are often many problems in the process of sharing. According to the tutorial on the network, the same operation may have the correct access to the shared folder, some people can not access. So this article focuses on analyzing and resolving issues related to sharing folders on Windows. Some of the mechanisms of file sharing and additional knowledge are also explained during the analysis. The problems that arise are divided into two main categories: one is inaccessible and one is no access. Because the share file involves more content, so we recommend you look at this article from the beginning, do not jump-look, or may miss some details of the place caused the folder cannot be successfully shared.

2, the general process of sharing folders

?? Here I will first follow the general method to set up folder sharing, and then in this article to explain in detail the meaning of the various parts of the set.
The general steps for sharing a folder are:
1. Right-click the folder you want to share, select "Properties" and follow the instructions below.

2. Open Control Panel \ Network and internet\ network and Sharing Center \ Advanced sharing settings. Enable file and printer Sharing and turn off password protected sharing.

Figure 1
The contents of this picture are explained and set up in other locations in this article, please host here.

3. Reasons for file sharing failure and solutions

File share failures have the following reasons:
1. Does your workgroup affect shared files?
2. The firewall is not set up correctly
3. User is disabled
3.1Guest User is disabled
3.2 Other users are disabled
4. User does not have permission to access
5. Local Security Policy disabled
6. The File and printer sharing for the NIC is not turned on.
7. The system uses the previously cached account access
The following begins an analysis of one.

3.1 Does your workgroup affect shared files?

?? When looking for issues related to shared files, it is often seen that there are several posts in the same workgroup that are proposed to set up workgroups to make shared folders and access shared folders to both hosts. After testing, hosts in different workgroups can also share files normally.

3.2 Firewall is not set up correctly

?? Here the firewall is placed first because most people's problem is that the corresponding port of the firewall is not open. There are two ways to open the appropriate port for a firewall:
1. In the "Control Panel \ System and security \ Windows Firewall \ Allow programs or features through Windows Firewall" to the "File and Printer Sharing" box to the left of the check mark. This opens the appropriate shared port in the firewall.

2. In Figure 1, select "Enable File and Printer Sharing" in "File and Printer Sharing".

?? In fact, "Enable File and Printer Sharing" also opens the appropriate shared port in the firewall. The result of the above two methods is the same. It's just a different set of places. You can open Windows Firewall with advanced security by tapping advanced settings in the left column of the control Panel \ System and security \ Windows Firewall. or direct win + R type Wf.msc open. Click on "Inbound Rules" in the left-hand column and find "File and Printer Sharing" in the middle display section. You can see that there are many "file and Printer sharing" related rules. View the rules related to the current network location. That is, if you are currently under a public network, viewing the "profile" is a common "file and Printer Sharing" related rule. Currently under the private network, view the "profile" is a dedicated "File and Printer Sharing" related rule. Set up "File and Printer Sharing" in the first two settings of the firewall, and see how the next few options change. The main view is the change of the "Enabled" column.

3.3 User disabled 3.3.1Guest user disabled

?? The more common problem is that the guest user is disabled because the guest user is disabled by default after the new system is installed. Any action in a Windows system needs to be done as a user. Access to shared Folders is no exception. If everyone or guest is added to a shared folder, the user identity that is used when accessing the network is guest by default. There are two ways to enable the guest user. The following two methods work the same way, except where the settings are different.
1. Right-click on "My Computer" and select "Manage". In Computer Management \ Local Users and Groups \ Users, right-click the "Guest" User and select "Properties". Remove the checkmark to the left of "account disabled".

2. Press "Win + R" to type Secpol.msc and open "local Security policy". Open the Guest account in security settings \ Local Policies \ Security options.
   
   ?? The result of setting in the above two places is to change the registry. is changed by the Lsass.exe program. Change the location to the following 3:
   1.hklm\sam\sam\domains\account\users\000001f5\f
   2.hklm\sam\sam\domains\account\users\000001f5\v
   3.hklm\sam\sam\domains\account\f
   
   
   Where 000001f5 is the unique identifier of the guest user. Here, right-click Hklm\sam\sam Select permissions to add a user right to see the subkey.
   ?? Sometimes it is found that even if the guest user is enabled, the dialog box prompts for the user name and password when accessed. This is because all operations under the Windows system need to be run as a user. So enter guest directly, no need to enter a password. But if you set a password for guest, you still want to enter the password.
   ?? Questions about setting the guest password and "Password protected sharing". Password protected sharing is associated with the Guest account.
   
   If you set a password, you cannot select Turn off password protected sharing. If you do not enter a password during the visit, it appears.
   
   If you do not set a password and select Enable password protection, the Guest account will be disabled. Access will appear
   3.3.2 Other users are disabled

   ?? Users who are allowed to access the shared folder are not just guest, as long as they have access to the account. Therefore, if you are using a disabled account, you cannot access the shared folder.

   3.4 User does not have permission to access

   ?? To see which account has access to the folder you can right-click the folder \ properties \ Security tab to view the permissions that are owned by individual users and groups. You can also edit the permissions for each user or group individually.
   
   Occurs when access is accessed with no permissions
   

   3.5 Local Security Policy disabled

   ?? There are several places in the local security policy that also affect access to shared folders. You can open the local security policy by pressing "Win + R" or entering Secpol.msc in the Start menu, or by entering "local security policy" directly from the Start menu.
   1.
   If you add a user to deny access to this computer from the network and use that user to access the shared folder, you may see the following error:
   
   2.
   The following errors may occur if the above local Security policy entry is enabled.
   

"File and Printer Sharing for Microsoft Network" is not turned on for 3.6 Nic

?? The probability of encountering this problem is relatively low, but sometimes there are unexpected errors.
?? For the host on the shared folder side, open Control Panel \ Network and internet\ network Connections, right-click the NIC, and select Properties. You can see "File and Printer Sharing for Microsoft Networks" under the Network tab. To Siang the left side of the option, cancel the press OK and then go to the check box again to confirm.
?? The same applies to Microsoft network clients for hosts that access the shared folder side.
?? Each NIC has the same settings. Therefore, the setting here is relative to each network card, that is, you can set the network device connected to the host computer can access the shared folder, and the network device connecting the other NIC of this host does not have access to the host's shared folder. This has a more flexible configuration for hosts with multiple NICs.

You may have to restart your network card or host when you are finished setting up.

3.7 The system uses the cached account access that was previously connected

?? You need to provide a user name or user name and password when accessing the shared folder for the first time. The user name and password used to access the shared folder are automatically remembered when the first access is successful. The user name and password are automatically used the next time you access the shared folder. When the host of a shared folder changes settings, such as when a user's password is changed. This time there will be no permission to access the situation. As shown in the following:

?? This time, you can delete the user name and password that were saved automatically by the previous system. You can delete it using the net USE command. Use the net using command to view the current network connection first. The net use \computername/delete command is then used to remove the automatically saved user name and password. The computername here must be a hostname and cannot be an IP address. If not, you can restart the Host network card or host that accesses the shared folder side.

You can also set the user name and password to access a host using the net USE command directly. Using the: NET use \IP address password \user: User name

4. Additional Knowledge 4.1 Figure 1 Summary description of each option.

The effect of each option is explained in the Figure 1 option, which is only a supplementary explanation.
1. Network Discovery
?? This option is used for other hosts on the network that can see the device in Network (previous network Places). If you disable it, you cannot see it, but you can also access it directly by entering the IP address in Windows Explorer, such as \192.168.25.110, or by entering the hostname \win-i4btr51ssdt\ directly. However, it is faster to enter an IP address for access.
2. File and Printer Sharing
?? Use this option to turn on file and printer sharing. The SMB protocol is used.
3. Public folder sharing
?? This option is used to share public folders, and the shared directory is C:\Users\Public. Turn off this option if the host in the network cannot see the shared directory in the network and cannot access it.
4. Media streaming
?? Used to build media libraries, share pictures, audio and video. The shared directory here is also C:\Users\Public. The DLNA protocol is used. The full name of DLNA is digital LIVING network ALLIANCE. You can access the Media Library from another host on your network through Windows Media Player or a DLNA-enabled network device. You can also view the Media Library in the Network Location column in Windows Explorer.
5. File Sharing Connection
?? Windows 7 uses 128-bit encryption to help protect file share connections. Some devices do not support 128-bit encryption and must use 40 or 56-bit encryption.
6. Password-protected sharing
?? Sets whether a password is required when a network host accesses a native shared folder.

4.1 Viewing the user and host name of the shared folder and the files accessed

?? Sometimes we would like to see who has access to our shared folders and which files are accessed. This can be viewed using the tools that are available from the Windows system. Press the win + R key to enter Compmgmt.msc or right-click My Computer, and select manage to open the Computer Management console.
In Computer Management \ Shared folders \ Sessions, you can see which host is using which account to access the shared folder.

You can see which files are viewed in Computer Management \ Shared folders \ Open files.

4.2 Two ways to access shared folders

?? There are two ways to access a shared folder, the first of which is to view it directly in the network in Windows Explorer. The second is to enter the IP address in the Address bar in Windows Explorer for access, such as \\192.168.25.110

usage of 4.3 net use

?? The net use command can set the user and password to be used when accessing the shared folder. You can view and disconnect the shared hosts that you are currently connected to.

• Using net use, view the shared hosts that are currently connected to.
• Delete the automatically saved user name and password for this host using the net use \computername/delete command.
• Using the net use \IP address password \user: User name command to set the user name and password to use when connecting to a host.
  
• Add a network command using the "net use Z: \win-i4btr51ssdt\users\paitouxi\desktop\ new folder 123/user:guest" command, where "Z" is the path mapped to the local That is, after successful mapping, the shared folder can be accessed locally using "Z:\", "\win-i4btr51ssdt\users\paitouxi\desktop\ new Folder" is a remote shared folder, "123" is the password and "Guest" is the user name. You can see it in the "Network Location" column in Windows Explorer.
  4.4 Nic Property Interpretation

  
  ?? Control Panel \ Network and Internet\ network connection right-click the NIC select Properties to open the NIC properties. You can see a lot of options from there. You can see its effect in the description below the page when you select an item with the left mouse button. which

• Microsoft Network Client
  ?? Used to access the shared folder. If disabled, the remote shared host can be seen in network but cannot be accessed. This allows you to set whether you can access the shared folders of the hosts that are connected to the LAN with which NIC. Each NIC can be set separately.
• VMware Bridge Protocol
  ?? This virtual machine for VMware Workstation is bridged to the physical network. However, this protocol only occurs when VMware Workstation is installed. No longer discussed here.
• File and Printer Sharing for Microsoft Networks
  ?? Used for shared folders. If disabled, the shared folder cannot be accessed by other hosts on the network. This allows you to set the shared folder to be accessible by the LAN host to which the NIC is connected. Each NIC can be set separately.
• Qos Packet Scheduler
  ?? Open the Local Group Policy Editor, and then locate the computer configuration → administrative Templates → network →qos Packet Scheduler, where the Qos Packet Scheduler is primarily relevant. Windows system retains 20% of the bandwidth by default. The bandwidth reserved is used for a new technology introduced in Windows 2000 (ie: networked service quality), and not to say that 20% of the bandwidth is bound to be occupied, in fact, only when writing applications using the QoS application programming interface requires access to the network, the--qos To take advantage of this 20% bandwidth. If these applications that use the QoS API do not have access to the network, the reserved bandwidth can still be used by other applications. The value modified in Group Policy refers to the maximum amount of bandwidth that can be used when writing programs using the QoS API to access the network, and if we set it to 0%, it means that applications written using the QoS API have to compete with other applications for limited bandwidth. The possible consequence is that the data that requires priority communication is not given priority. Of course, QoS, the new technology used to improve the quality of the network, loses its meaning. You can view the following link description http://www.thewindowsclub.com/configure-reservable-bandwidth-settings-windows "in Windows 10/ Configure and limit the configurable bandwidth settings in 8.1. You can also directly change the registry hkey_local_machine\software\policies\microsoft\windows\psched to give it value data 0. If psched does not exist, create it.
• Link Layer Topology Discovery Responder
  ?? Used to discover and locate other computers in the network and to establish network topology diagrams.
• Link Layer Topology Discovery Mapper I/O driver
  ?? Used by other computers in the network to discover and locate their location and to establish a network topology diagram.
  That is, through the two programs can know the LAN computer, through the switch, the router. 4.5 Network Discovery Dependent service and firewall ports and how to set up

  ?? Network discovery needs to start the DNS client, feature Discovery resource release, SSDP Discovery, and the UPnP Device Host service, which allows network discovery to communicate through Windows firewall, and other firewalls do not interfere with network discovery. If certain conditions (but not all of the above) are true, the network discovery status is displayed as "Custom."
  Depending on the service DNS client,function Discovery Resource PUBLICATION,SSDP Discovery, UPnP Device Host, to use Network discovery, these services must be started.
  There are two ways to open the Network Discovery Firewall port:
  ?? 1. Open Control Panel \ Network and internet\ network and Sharing Center \ Advanced sharing settings. Enable "Enable Network Discovery".
  ?? 2. Tick the box to the left of Network discovery in Control Panel \ System and security \ Windows Firewall \ Allow programs or features to pass through Windows firewall. This opens the appropriate network discovery port in the firewall.
  This enables you to view other hosts in the network that support the SMB protocol in the network. This host is also visible to other hosts on the network.
  ?? You can open Windows Firewall with advanced security by tapping advanced settings in the left column of the control Panel \ System and security \ Windows Firewall. or direct win + R type Wf.msc open. Click on "Inbound Rules" or "outbound rules" in the left-hand column to find "Network Discovery" in the middle display section. You can see that there are many network discovery items, and you can view the ports used by network discovery.

Windows shared file analysis