Workaround for request logon type not granted to user on this computer

If a separate XP is to be logged in remotely, in the local security settings, remove the Guest account from the "Deny access to this computer from the network".

I. The crux of the matter

1. Improper access Rights settings

Windows nt/2000/xp/2003 system supports NTFS file system, NTFS can effectively enhance the security of the system, but in the ACL (Access control list) The user access rights set not at that time, it will also cause users not to access the native shared resources, "Insufficient permissions" appears Prompt for information.

2. Improper account and policy settings

In a Windows workgroup environment, users typically use the Guest account to access shared resources. However, for system security, disable the Guest account of the system, in addition, in the Windows 2000/xp/2003 System, Group Policy by default is not allow the Guest account from the network access to this computer, so that other users can not access the local shared resources, there is "Access denied" Prompt for information.

3. Improper network Firewall settings

Users in order to enhance the security of the machine to prevent illegal intrusion, the installation of a network firewall. However, improper setting of the network firewall also causes other users to have no access to the local shared resources, and "Access denied" message appears because the firewall shuts down the NetBIOS ports required for shared resources.

Second, the way to solve

Once we understand the main reasons why shared resources cannot be successfully exchanged, we can solve the problems in the interview completely.

1. Enable Guest Account

In many cases, for the security of the native system, the Guest account is disabled so that the shared resources of the machine cannot be accessed, so the Guest account must be enabled.

The author takes the Windows XP system as an example to introduce. On the shared resource provider, go to control Panel → Administrative Tools, run the Computer Management tool, and then expand Computer Management (local) → system tools → local Users and groups → users to locate the Guest account. If the Guest account appears with a red fork indicating that the account has been deactivated, right-click the account, and in the Guest Properties dialog box, remove the "account deactivated" checkmark and click "OK" to enable the Guest account. This method applies to Windows 2000/xp/2003 systems.

Tip: Accessing shared resources with the Guest account is a major security risk. Of course, we can also create a designated account for each access user. First create a new account on the shared resource provider, and then specify the access rights for that account. Next, create a new account with the same username and password in the client that will access the shared resource, and when you log in to the client, you will be able to access the shared resources allowed by the account. This method is more secure, but creating an account for each user in the network is not suitable for larger networks.

2. Modify the user access policy

Although the Guest account for this computer is enabled, users cannot access the shared resources provided by the computer because Group Policy does not allow the Guest account to access the computer from the network by default.

Click start → run, enter "Gpedit.msc" in the Run box, expand Local Computer policy → computer Configuration →windows settings → security settings → local policies → user rights Assignment in the Group Policy window (Figure 1), and in the right column, locate the "Deny access to this computer from the network" item, Open and delete the Guest account, then open the "Access this computer from the network" entry and add the Guest account in the Properties window. This allows you to use the Guest account to access the shared resources of the machine from the network. This method applies to Windows 2000/xp/2003 systems.

3. Configure the network firewall correctly

Many machines have a network firewall installed, it is not properly set up, it also causes users to not access the shared resources of the unit, the local shared resources need to open the NetBIOS port. I take Skynet firewall as an example, in the "Custom IP Rules" window, select the "Allow local area network machine to use my shared resources" rule, and finally click the "Save" button, so that the NetBIOS port is open.

4. Set User access rights reasonably

Many machines in the network use the NTFS file system, its ACL function (access control list) can control the user's access rights, the user to access the shared resources of these machines, must be given the appropriate permissions to the line. If you use the Guest account to access the CPCW shared folder of the machine, right click on the shared directory, select "Properties", switch to the "Security" tab, then add the Guest account to the list of users, then specify the guest access rights, at least give "read" and "List Folder Directory" permissions ( Figure 2). If you want multiple user accounts to be able to access the shared directory, simply add the Everyone account, then give the "read" and "List Folder Directory" permissions, so you avoid adding and specifying each user access to the account. This method works for Windows 2000/xp/2003 systems that use the NTFS file system

1. Guest Guest account has been enabled

2, the firewall is in the shutdown state

3, in the User rights assignment, "Access this computer from the network" to add the Guest account, and "Deny access to this computer from the network" to remove the guest account has been set

4, local policy → security options, has been set to "classic-local users to authenticate themselves"

5. Server service is enabled

6, local connection IP, subnet mask, gateway and DNS settings are all fine

7. Microsoft Network file and printer sharing, Microsoft Network client, and the TCP/IP protocol, NWLink NetBIOS, NWLink Ipx/spx/netbios are already open

Start/Run: gpedit.msc, open the policy Editor

Computer Configuration/windows Settings/security Settings/Local Policies/user Rights Assignment/

Double-click Deny access to this computer from the network to remove the "Guest" user.

Less: Remove the "Use blank password to log in to the console only"

Many friends may encounter that on a computer that has Windows XP installed, even if the network connection is healthy, the sharing settings are correct, and users who use other systems (including Windows 9X/ME/2000/XP, etc.) still cannot access the computer.

I solved it in the following ways:

1, shut down the firewall (I will not say the specific)

2. Lifting the limit on Guest account

In Control Panel-Administrative Tools-Local security settings-Local Policies-User rights Assignment-"Deny access to this computer from the network" to remove the "GUEST" account inside.

3. Change the network access mode

In Control Panel-Administrative Tools-Local security settings-Local Policies-security options-Network access: Local account sharing and security mode, the default setting is guest only-local users authenticate as guest, and change to classic: Local users authenticate as themselves.

4. Change sharing

Open My Computer-tools-Folder Options-View-Remove the tick "Use Simple file Sharing (recommended)".

You should be able to access it now, and if not, you can enable the Guest account.

Note : More wonderful tutorials Please pay attention to the triple computer tutorial section, triple Computer office group: 189034526 Welcome to join