Cannot access share on Windows XP PC since joining all PC's to a 2011SBS Domain

Posted on 2012-09-12
Last Modified: 2012-09-24
Hi All,

I have just installed a 2011 SBS server into a company that previously had a small workgroup network. 1 PC on the network shared a folder containing accounts information with another PC via a mapped drive.

I've installed an SBS server and joined all PC's to the domain and everything is working fine but I cannot get PC1 (Vista Business) to access the share on PC2 (XP pro)  When I try to browse to the share I get the message :

"\\PC2 in not accessible. You might not have permission to use this network resource. Contact the administrator of this server to find out if you have access permissions.  The trust relationship between this workstation and the primary domain failed."

I can view all shares on the server and use Outlook with no issues and I can ping PC names with no issues.

I don't have the option of moving the shared data onto the server unfortunately) I've removed and reset the share up, granted "Everyone" full access, there is no firewall software on either PC other than Windows Firewall.

Can anyone please help me as I can't get their accounts system working without this share working.

Many thanks

Question by:amlydiate
    LVL 19

    Expert Comment

    There might be a GPO blocking shares (or enabling the Firewall) on the XP client. Check which GPOs are running on the client using either RSoP or gpresult.
    LVL 77

    Expert Comment

    by:Rob Williams
    Is it just PC1 that cannot access it or multiple PC's.

    If just one the message "The trust relationship between this workstation and the primary domain failed." Would imply you need to disjoin the domain and rejoin.

    If multiple PC it may be that when you set up the share and permissions you used local permissions and not domain permissions, as they did not exists.  You may need to update share and/or security permissions.
    LVL 14

    Expert Comment

    by:Don Thomson
    have you tried logging into the PC as the domain administrator - If you do and the share still cannot be accessed - it will give us a better direction in finding the problem

    Make sure that you have turned off simple sharing on the XP-PRo machines

    Any folder - tools - folder options - view - Last item - Restart.

    How was the PC joined to the domain - Did you use the wizard? or manually join it

    I have been using PROFWiz3  with all my 2011 installations -

    Author Comment

    Hi All,

    Found out that no other PC regardless of whether it's XP or Win 7 or Vista can connect and get the same error.  I've run GPResult and doesn't look like any GPO's are in play. I can't see the share logged on as domain administrator either.

    I've turned off simple file sharing, removed the share and added it again, and added "domain users" and even "everyone" to the security group with full control.

    I joined the domain always using the wizard.

    I've noticed that shared on other non-XP PC on the domain ARE accessible so it seems to be an issue with the XP PC that the share is on.

    Any more ideas?



    Author Comment

    Just an additional point, when I go into the local Admin group on the XP machine and add users from the domain to the local admin group it adds them but shows the SID next to their name, is that normal?
    LVL 14

    Accepted Solution

    Download This

    It's Microsoft NTRights  Program

    Install it on the XP Machine

    After installation, click on: Start, All Programs, Windows Resource Kit Tools, Command Shell

    Then enter the following commands. (Attention: they are case sensitive.)

    net user guest /active:yes
    ntrights +r SeNetworkLogonRight -u Guest
    ntrights -r SeDenyNetworkLogonRight -u Guest

    The first command enables network access for Guest, the two subsequent ones change two different policies to allow network access for Guest.

    This should solve the problem

    Author Closing Comment

    Brilliant that worked thanks very much!

    Featured Post

    Highfive Gives IT Their Time Back

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Join & Write a Comment

    I've often see, or have been asked, the question about the difference between the Exchange 2010 SP1 version, available as part of Small Business Server (SBS) 2011, and the “normal” Exchange 2010 SP1 Standard. The answer to the question is relativ…
    Issue: Unstable cursor in Windows XP and Windows runs extremely slow in that any click will bring up the Hour glass (sometimes for several seconds before giving you what you want) . Troubleshooting Process and the FINAL FIX: This issue see…
    The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…
    Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

    734 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now