Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Access workgroup from domain laptop

Posted on 2005-03-24
32
Medium Priority
?
767 Views
Last Modified: 2008-02-01
Hi there,

Firstly a disclaimer - I know questions similar to this pop up from time to time - but I can't find a solution that solves my problem.

I have two laptops, both running windows xp pro. Laptop 1 is always at home, and in MSHOME workgroup. Laptop2 is my work laptop, and a member of my work domain. At home both laptops connect to the internet via a wireless router.

I want to be able to use the printer that my home laptop from my work laptop remotely, so I don't have to keep changing cables around. I've spent some hours trying to fix this so I've tried (what I see as) the obvious solutions

Some more info:
Laptop1 name is nicslaptop but Laptop2 cannot resolve \\nicslaptop
Laptop1 IP address is 192.168.2.37 but Laptop2 cannot access that
Laptop1 has Guest Account enabled
Laptop1 has windows file and print sharing enabled
I've created a shared folder on C:\test on Laptop1 and Laptop2 cannot see 192.168.2.37/test or \\nicslaptop/test
*Request times out trying to ping 192.168.2.37 from Laptop2
*Request time out trying to ping Laptop2 from Laptop1
I've been through router settings and can't see anything that would block attempts, but not really totally clued up here.
worklaptop has BlackICE personal firewall that I can't(find a way to) configure - not sure if this would affect
Laptop1 has ZoneAlarm installed - have disabled this when trying testing.
I don't have the authority for Laptop1 to join work domain
I don't want to create another account on Laptop2 in order to join workgroup

As an aside I haven't actually configured Laptop1 to also be on the same (internal) IP as yet - but I check the new IP each time I try and this is on my to-do list (but a different problem and one I'm sure I can solve!)

I guess the big problem is that they can't ping each other, but I don't understand why this would be.

Many thanks

AlWarwick
0
Comment
Question by:AlWarwick
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 17
  • 14
32 Comments
 
LVL 6

Expert Comment

by:darkfriend
ID: 13624493
Pinging is the first issue.  Zone alarm tends to keep blocking even when disabled so thats always an issue.  Be sure to also turn off the Internet Connection firewall in Windows XP, or enable file sharing and ICMP(ping) through the Windows Firewall in Windows XP Service Pack 2.

Your best bet is to buy a print server for printing and NAS(Network attached storage) for file sharing.  You are basically trying to find that small loophole in the impossible. Workgroup and domain communication basically either works or DOESN'T.  It mostly depends on the Group Policy restrictions on the domain computer, which you probably cannot change.
-DF
0
 
LVL 6

Expert Comment

by:bmquintas
ID: 13625742
"I've created a shared folder on C:\test on Laptop1 and Laptop2 cannot see 192.168.2.37/test or \\nicslaptop/test"

What about \\192.168.2.37\test   ?... (note the slash)    
0
 

Author Comment

by:AlWarwick
ID: 13626175
Nope, it can't see that (apologies for mixed up slashes in original posting).

Searches for it for ~2mins and then popup dialog saying 'Windows cannot find '\\192.168.2.37\test'. Check the spelling....etc'

Also, if I try (in a command prompt) net use \\192.168.2.37\test h: it says The network path was not found.

Also tried \\192.168.2.37\test /user:<adminusername> and \\192.168.2.37\test /user:Guest, all with same results as above....
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:AlWarwick
ID: 13626209
darkfriend - my earlier reply to you seems to have failed to register - apologies:

I fully exited zone alarm, and ensured that process wasn't still rnning
Internet connection firewall is disabled on all connections on both laptops
Neither laptop has SP2

I don't really want to go into buying print servers, NASs etc. (No money!) I realise I'm trying to get into a loophole - but I'm just hoping that the loophole is there.

I am a local administrator on my work laptop, so I should be able to change most policy settings, if I knew what it needed. However I can't change domain settings
0
 
LVL 6

Expert Comment

by:bmquintas
ID: 13626347
Can you post your IP settings (laptop1,laptop2 and router lan ip)?
0
 

Author Comment

by:AlWarwick
ID: 13626392
Not 100% sure what you mean by IP settings, so tell me if this isn't what you want, but the following is from ipconfig /all

Work laptop:
dhcp enabled:yes
autoconfigenabled: yes
IP: 192.168.2.24
subnet mask: 255.255.255.0
default gateway: 192.168.2.1
dhcp server: 192.168.2.1
dns servers 192.168.2.1

Home laptop:
same as above, except IP 192.168.2.37
0
 
LVL 6

Expert Comment

by:bmquintas
ID: 13626500
can you ping the router (192.168.2.1) from both?
after disabling the firewalls on both PC's can you ping from one to another?

 
0
 

Author Comment

by:AlWarwick
ID: 13626564
both machines can ping the router and also access the router mgmt console (http://192.168.2.1:88/)

However, still can't ping in either direction, having fully disabled firewalls.... (quite confused by this)

thanks for your help so far....
0
 
LVL 6

Expert Comment

by:bmquintas
ID: 13626623
I'm running out of ideias...
Are you pinging by IP or by name?
Windows Firewall,BlackIce and Zone Alarm disabled?
By any miraculous chance you're router has VLAN features and are enabled?
0
 

Author Comment

by:AlWarwick
ID: 13626663
I was starting to get to the end of my tether with it....

Then rebooted my work laptop, and now for some reason can ping (by ip) in both directions.

If i try to access \\192.168.2.37 it now comes up with a login screen - but can't authenticate.

Tried my admin account
Tried user Guest, password blank
tried creating a new user (limited access, user:remote, passw:remote)

none of them authenticate.

I guess the fact that they're now pinging etc is good news....except since I didn't change anything, I'm concerned it'll go back to not pinging for no reason again.
0
 

Author Comment

by:AlWarwick
ID: 13626695
I can now access my work laptop from my home laptop................

Just not the other way round (which is the way I want to!)

Any ideas why it wouldn't ping before but does now?
0
 
LVL 6

Expert Comment

by:bmquintas
ID: 13626727
Well that's a start! :)

try this:

from work to home


In the login screen you mentioned
      user:home_workgroup_name/user_from_xp_home  (maybe the slash is not that one, try both)

or

 change your home workgroup name to match the first part of work domain name:
ie

   work.workdomain.net -> change xp home workgroup to work
0
 

Author Comment

by:AlWarwick
ID: 13626790
OK....

home_workgroup_name\user_from_xp_home didn't work, so I changed home laptop workgroup name to domain name, rebooted (and subsequently found out that it was definitely zone alarm getting in the way of the pings, so not sure why I didn't find that out earlier)

However, still can't log in, tried (for user, passw)

domain\remote
remote

remote
remote

domain\<adminusername>
password

<adminusername>
password
0
 

Author Comment

by:AlWarwick
ID: 13626827
Further info......

going for \\192.168.2.37\ brings up login prompt as above
going for \\192.168.2.37\AccessForAl brings up dialog box saying:

\\192.168.2.37\AccessForAl is not accessible. You might not have permission to use this network resource. Contact the administrator of this server to find out if you have access permissions.

The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you.

Not heard that last line before...
0
 
LVL 6

Expert Comment

by:bmquintas
ID: 13626837
0
 

Author Comment

by:AlWarwick
ID: 13626949
Ok cool, have gone thru that thread, and:

read http://www.practicallynetworked.com/sharing/xp_filesharing/index.htm
disabled simple file sharing
disabled requirement for remote users to require accounts with non-blank passwords (just in case)
ensured my remote user has access to AccessForAl folder

and to confirm

domain and workgroup called same thing now

But still no joy....
0
 
LVL 6

Expert Comment

by:bmquintas
ID: 13627062
what do you get by doing net view \\192.168.2.37  in a do prompt     ?
0
 

Author Comment

by:AlWarwick
ID: 13627128
System error 5 has occurred

Access is denied
0
 
LVL 6

Expert Comment

by:bmquintas
ID: 13627143
System error  5 - Access is denied

This is a permission issue. If the net view command fails with a "System error 5 has occurred. Access is denied." message, 1) make sure you are logged on using an account that has permission to view the shares on the remote computer.
2) Need to cache credential: logon the same username and password on both computers or use net net use \\computername /user:username command.
3) Make sure the Netlogon service is running.




from www.chicagotech.net
0
 

Author Comment

by:AlWarwick
ID: 13627296
Netlogon service is running on work laptop, but not on home. I believe netlogon won't work on a laptop thats not in a domain so thats ok (if i manually start it it immediately stops).

tried (2)

user definitely has permission to access folder
0
 

Author Comment

by:AlWarwick
ID: 13627353
also tried reinstalling file and printer sharing, and also installing netbios protocol
0
 
LVL 6

Expert Comment

by:bmquintas
ID: 13627363
You did #2 complete?
Can you map a share, create a folder \test share it and then try to map it like net use k:\\192.168.2.37\test /user:username
0
 

Author Comment

by:AlWarwick
ID: 13627389
Hmmmmm....this seems interesting but not sure what it means

I did:

net use k: \\192.168.2.37\test /user:remote
and response was:
The password or username is invalid for \\192.168.2.37\test
Enter the password for 'remote' to connect to '192.168.2.37'

<at which point i enter password>

System error 1385 has occurred

Logon failure: the user as not been granted the requested logon type at this computer
0
 
LVL 6

Expert Comment

by:bmquintas
ID: 13627418
1) go  to the share you created -> properties-> sharing and security and check the permissions, adjust if necessary and try the net use again


2) if no good -> Try enabling simple file sharing  again and repeat the net use procedure
0
 
LVL 6

Accepted Solution

by:
bmquintas earned 2000 total points
ID: 13627437
 System error 1385 has occurred - Logon failure: the user has not been granted the requested logon type at this computer

Symptoms: When using net use \\remotecomouter\ahredname, you may receive above message.

Resolution: The users do not have permission to connect to the remote computer. To resolve this problem: on the remote computer, select Administrative Tools>Local Security Settings>Local Policies>User Rights Assignment, right-click on Access this computer from the network>Properties>Add Users or Groups, add everyone or any users you want to be able to access the computer from the network.
0
 

Author Comment

by:AlWarwick
ID: 13627455
Superb - I had just found the same solution. More info here: http://www.windowsitpro.com/Article/ArticleID/24000/24000.html

 Having done step above, the following command is now succesful


net use k: \\192.168.2.11\C$ /user:<adminuser>

So....one final step - how do I now find the printer? Printer is shared, but going thru add printer wizard with \\192.168.2.11\printername doesn't work (it can't find it). Any ideas for this final step?

Thanks so much for all your help so far bmquintas
0
 

Author Comment

by:AlWarwick
ID: 13627466
also, the moment i restart zone alarm will that ruin all the good work done here?
0
 
LVL 6

Expert Comment

by:bmquintas
ID: 13627470
in explorer just  \\192.168.2.37 enter the user and pass if required and you should get all the shares from the xp home box, then double click the printer
0
 
LVL 6

Expert Comment

by:bmquintas
ID: 13627480
You have to configure zone alarm to accept inbound and outbound comunications from the 192.168.2.x network
0
 

Author Comment

by:AlWarwick
ID: 13627498
D'oh! After such complexities I had forgotten how simple it was actually meant to be - yep printer works now!
0
 

Author Comment

by:AlWarwick
ID: 13627521
bmquintas - thanks ever so much for your help - you're a star

For anyone reading this with the same problem as me, the steps i took (which were possibly not all necessary, but who knows) were:

rename workgroup to same as domain
disable all firewalls (windows firewalls as well as software firewalls)
on the remote computer, select Administrative Tools>Local Security Settings>Local Policies>User Rights Assignment, right-click on Access this computer from the network>Properties>Add Users or Groups, and I added my administrator account here
I also in the sercurity policy in screen above allowed remote zero-length passwords, as an aside

and she works like a dream. Again, thanks bmquintas
0
 
LVL 6

Expert Comment

by:bmquintas
ID: 13627523
Dunno why this was so hard, but never used the xp home version...
Glad it's working
0

Featured Post

Get free NFR key for Veeam Availability Suite 9.5

Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Trying to figure out group policy inheritance and which settings apply where can be a chore.  Here's a very simple summary I've written which might help.  Keep in mind, this is just a high-level conceptual overview where I try to avoid getting bogge…
I'm a big fan of Windows' offline folder caching and have used it on my laptops for over a decade.  One thing I don't like about it, however, is how difficult Microsoft has made it for the cache to be moved out of the Windows folder.  Here's how to …
Video by: ITPro.TV
In this episode Don builds upon the troubleshooting techniques by demonstrating how to properly monitor a vSphere deployment to detect problems before they occur. He begins the show using tools found within the vSphere suite as ends the show demonst…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…

722 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question