Solved

Guest default login?

Posted on 2004-09-28
27
627 Views
Last Modified: 2008-02-01
When i try to connect to a remote Pc, the default username is <computername>/Guest.  I want to be able to enter the username.  At this point the username field is greyed out and i cant change it from guest.  Is this on the remote PC or the one i am connecting from?

BTW - Both PC were freshly formated with SP1 installed (NOT upgrading to SP2).

Any ideas?
0
Comment
Question by:kmorris1186
  • 11
  • 7
  • 3
  • +4
27 Comments
 
LVL 7

Author Comment

by:kmorris1186
Comment Utility
Example.  I am at Pc1 (named HomePC1) and i want to connect to PC2 (named HomePC2).  I goto start, Run and type in "\\HomePC2\" to see a list of shares.  Is displates the login box but i cant change the username from HomePC2/guest.

the same thing happens when i try to connect from PC2 to PC1.
0
 
LVL 7

Author Comment

by:kmorris1186
Comment Utility
My simple work around was to RE-Enable the Guest Account and give it a password.
0
 
LVL 2

Expert Comment

by:dev8
Comment Utility
Make sure to run the local security policy editor from control panel admin tools (can also try gpedit.msc from run) and set the local policy, Network Access: Let everyone permissions apply to anonymous users, to enabled and make sure that the guest account is enabled.  Hope that helps!
0
 
LVL 7

Author Comment

by:kmorris1186
Comment Utility
And that will stop "<pcname>/guest" from being the default username and/or let me change the username?
0
 
LVL 2

Expert Comment

by:dev8
Comment Utility
Yes.  That will fix it ;)
0
 
LVL 6

Expert Comment

by:mslunecka
Comment Utility
Check your permission levels on your shared folders.  Both under the Sharing tab, and under the Security tab.

You may have the Everyone group in the default permissions set with full control.  If that was the case, windows may not feel the need to let you change users.  If you restrict access to administrators only, or create ACL entries (access control list) for specific usernames e.g. "HomePC1\Username" it may allow that field to become editable.

You definitely want to disable that guest account, though.  If you see Guest having any kind of privileges in the security or sharing tabs, pull it out.

You could try this command as well.  start->run->\\HomePC1\c$

This accesses the administrative C$ share.  You don't have to have any file sharing enabled to use it.  You'll just have to type in an administrator's user name and password and you'll be right into your C drive.
0
 
LVL 2

Accepted Solution

by:
dev8 earned 200 total points
Comment Utility
Err!  Instead of the "Let everyone permissions apply to anonymous users", change the Network Access: Sharing and security model for local accounts by right clicking, properties and changing from Guest only to Classic.  Now that should fix it!

0
 
LVL 7

Author Comment

by:kmorris1186
Comment Utility
That is the problem... if i try to access \\HomePC1\c$, the username is already set to" homepc1\Guest".  I cant change this.. It is greyed out.   i am trying the GPEdit thing now..

I have the Share set up for Everyone, as i am going to use NTFS to control what can/cant be accessed.  Still the Username field is greyed out.
0
 
LVL 2

Assisted Solution

by:dev8
dev8 earned 200 total points
Comment Utility
Go to control panel, admin tools, and local security policy instead of the gpedit.msc (my mistake).  From there go to local policies, security options, and find the "change the network accesss: sharing and security model for local accounts".  
0
 
LVL 4

Assisted Solution

by:beem4n
beem4n earned 100 total points
Comment Utility
Hi,

you should do the next:

net use \\homePC1\c$ /user:USERNAME
it will prompt after for password for USERNAME

if you are in domain, then
net use \\homePC1\c$ /user:USERNAME@DOMAINNAME
and again enter password after

good luck!
0
 
LVL 7

Author Comment

by:kmorris1186
Comment Utility
Classic was already selected.....
0
 
LVL 2

Expert Comment

by:dev8
Comment Utility
How about he other option?  The "Let everyone permissions apply to anonymous users"?
0
 
LVL 4

Expert Comment

by:beem4n
Comment Utility
Really there is one more way,

you should create a user on homePC1 with same login/password as on your PC and make it Administrator on HomePC1 to get to administratives shares (c$, ...)

this way you even wouldnt be asked for a password
0
Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

 
LVL 2

Expert Comment

by:dev8
Comment Utility
Make sure that you also restart machine for settings to take effect.
0
 
LVL 7

Author Comment

by:kmorris1186
Comment Utility
ah.. restart may be the problem...  Well, since i am remotly logged into the machines (Radmin, Destop viewing) i cant reboot it from here.  I will give that a try when i get home from work.  Thanks.
0
 
LVL 2

Expert Comment

by:dev8
Comment Utility
Not a prob!  You should be able to restart remotely, but I might be wrong ;)
0
 
LVL 34

Expert Comment

by:sramesh2k
Comment Utility
This happens if "Simple file sharing" is enabled in the target computer. With that said, the target PC authenticates every connection as guests.
0
 
LVL 4

Expert Comment

by:beem4n
Comment Utility
kmorris: have you checked my solutions ?

you havent responded to both of them..
0
 
LVL 7

Author Comment

by:kmorris1186
Comment Utility
Update - simple file sharing is turned off on both PCs. (i cant hit PC2 using radmin no outside IP)

beem4n - I have tried the 2nd one a while back.  I have created a username on both PCs named "Keith.Morris" with the same password.  That still tried to log in as the same Guest account.

This idea:
net use \\homePC1\c$ /user:USERNAME
it will prompt after for password for USERNAME

will have to wait until i get home.  I cant get to the 2nd PC using Radmin and i think my roommate turned it off! DOH!

Keep posting ideas, i should be able to get back with you all in about 5-6 hours.
0
 
LVL 34

Assisted Solution

by:sramesh2k
sramesh2k earned 100 total points
Comment Utility
Classic: local users authenticate as themselves

Microsoft Windows XP - Network access: Sharing and security model for local accounts:
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/506.mspx

Does that help?
0
 
LVL 7

Author Comment

by:kmorris1186
Comment Utility
sramesh2k - Unfortunetly, that is already selected and it still does this Guest thing. That is what  dev8 suggested.
0
 

Expert Comment

by:daleshirley
Comment Utility
Probably not the answer you want but I simply enabled the GUEST account and gave it a good password - works great for me.
0
 
LVL 7

Author Comment

by:kmorris1186
Comment Utility
That is what i am currently doing as a work around.
0
 
LVL 6

Expert Comment

by:mslunecka
Comment Utility
Try this:  start ->  Run ->  mmc


File ->  Add snap-in

Click Add

Find Security Templates

Load the Setup Security template.

That will give you out-of-the-box security settings.  If that works, you'll know something changed on you.

You can read up on various default templates here:
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sag_scedefaultpols.mspx

Hopefully one of them will reset your particular problem.  
0
 
LVL 5

Assisted Solution

by:talphius
talphius earned 100 total points
Comment Utility
Try disabling the local security policy Network Access: Force Network Logons using Local Accounts to Authenticate as Guest.

"By default, on computers running Windows XP Professional and not joined to a domain, all incoming network connections are forced to use the Guest account. This means that an incoming connection, even if a user name and password is provided, has only Guest-level access to the share. Because of this, either the Guest user account or the Everyone group (the only group to which the Guest account belongs) must have permissions on the share and on the directories and files that are shared. It also means that, in contrast to Windows 2000, you do not need to configure matching user accounts on computers to share files. Because Windows XP Professional supports Anonymous connections, and because it severely limits the use of the Everyone group in file system permissions, granting the Everyone group access to shared folders does not present the security problem that it does on Windows 2000–based computers."  from:  http://www.wown.com/j_helmig/wxpsimsh.htm
0
 
LVL 7

Author Comment

by:kmorris1186
Comment Utility
somthing that i did yesterday worked! it no longer defaults to Guest! I am able to log in and connect to shares!  I didnt have a change to figure out what worked.  When i get home tonight, i will try to backtrack my steps to figure out which answer correctly fixed my problem.

Thanks for your help.
0
 
LVL 7

Author Comment

by:kmorris1186
Comment Utility
Well, i was not able to figure out what actually fixed it, so i will split them.  Sorry for the delay on this, i was out of state for the past week.
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Join & Write a Comment

Suggested Solutions

There are 2 things you must have in order to connect to the internet behind a router, The "Gateway IP" of the router, which is usually something like 192.168.xxx.1, I've seen routers with default values of: 192.168.0.1, 192.168.1.1, 192.168.11.1, …
Can you find a fax from a vendor you saved a decade ago in seconds? Have you ever cursed your PC under your breath during an audit because you couldn’t find the requested statement or driver history?  If you answered no to the first question or yes …
In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now