XP Machine Cannot Access Win 7 Shares on Domain

We have a Windows 7 machine on our domain network that has multiple shared drives for different users to use. All of our other windows 7 computers can access it no problem. However none of our windows xp computers can access any of the shared drives, no matter what account we are logged into, even our domain admins cannot access the shared drives from the xp computers.

One strange thing we noticed is that if we reboot the Windows 7 computer our xp machines can access it for the rest of the day, then once we get back the next day, again, we cannot access any of its shares.

We dont have this problem with any of our other windows 7 computers that have shares on our network.

any ideas would be much appreciated!
AXHITAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

JohnBusiness Consultant (Owner)Commented:
You need to look in the Network and Sharing Center on the Windows 7 machine and make sure Network Discovery, File and Print and Password Protected Sharing are all turned on.

Then I suggest you make userids on the Windows 7 machine that are the XP userids. Now provide permissions to the folders to these users.

Now from an XP machine, NET USE Z: \\win7box\folder and authenticate. What answer do you get?

.... Thinkpads_User
AXHITAuthor Commented:
There are no firewalls turned on.

Network Discovery, File and Print and Password Protected Sharing all are on.

Every user has full control of these shared folders with read/write permissions.

This is the Error I get when Using the NET USE.
System Error 67 Has Occured
The Network Name Cannot Be found.

Even if I try to path to the server via windows explorer the error i get is.

\\Computer\ is not accessible. You might not have permission to use the network resource.

Again if i use any other windows 7 machine on our domain with these same  user accounts I can access this computer and its shared drives no problem.
JohnBusiness Consultant (Owner)Commented:
The issue is a permissions issue, not a "not found" issue.

1. As a temporary measure, share the entire drive of the Windows 7 machine as drivec or like label. Make sure that the XP users have permission. As I noted above, you might wish to make these users as "guest" users on the Windows 7 machine.

2. You may have to consider LM permissions.  On the Windows 7 host:

See: http://support.microsoft.com/kb/239869

Set LMCompatibility to 1

Excerpt from the above support article

To enable a Windows 95, Windows 98, or Windows 98 Second Edition client for NTLM 2 authentication, install the Directory Services Client. To activate NTLM 2 on the client, follow these steps:
1. Start Registry Editor (Regedit.exe).
2. Locate and click the following key in the registry:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control
3. Create an LSA registry key in the registry key listed above.
4. On the Edit menu, click Add Value, and then add the following registry value:
Value Name: LMCompatibility
Data Type: REG_DWORD
Value: 1 (for legacy systems)
Valid Range: 0,3


Also look at the link below for further information on LM permissions:

http://www.error.info/windows/network-67.html

.... Thinkpads_User
Your Guide to Achieving IT Business Success

The IT Service Excellence Tool Kit has best practices to keep your clients happy and business booming. Inside, you’ll find everything you need to increase client satisfaction and retention, become more competitive, and increase your overall success.

JohnBusiness Consultant (Owner)Commented:
Also (and the obvious), Windows 7 is not a server and only allows 5 connections, so I assume you are not exceeding this limit.

.... Thinkpads_User
aindelicatoCommented:
Run this on the Win 7 box
1. Regedit
2. Hkey_local_machine\system\currentcontrolset\control\lsa
3. Edit restrictanonymous with the value of 0
4. Reboot

Originally i found this documented in microsoft kb 913628.
AXHITAuthor Commented:
I doubt im exceeding any connection limits when i can still connect to this windows 7 comp  shares with any other windows 7 computer at the same time im trying to connect with my xp yet the xp machine wont let me connect to the win 7 shares.
JohnBusiness Consultant (Owner)Commented:
I just connected up an XP machine to my Windows 7 machine without issue. So let's go through the steps again.

1. Windows 7 and XP should be Pro and not Home.
2. Homegroup should be turned off.
3. Make sure all computers have user names with passwords.
4. In Windows 7, in Network and Sharing Center, Advanced, Work or Domain, ensure the following are on (enabled):  Network Discovery, File and Print Sharing, 128-bit encryption, Password protected sharing, Use user accounts and passwords to connect.
5. In Windows XP, go to Folder Options and make sure Simple File Sharing is disabled.  I always show hidden files and folders and turn on extensions so I can see what I am doing.
6. Make sure the NTLM2 change above has been implemented on Windows 7.
7. Make sure each XP machine is enumerated as a user on the Windows 7 machine.
8. Temporarily and to test, share out Drive C of the Windows 7 machine to the users enumerated in step 6.

I followed the steps above and connected from XP to Windows 7 with no issue. The connection is within a WORKGROUP.

There may also be domain issues in the way here, but please confirm all 8 steps above (not just some of them).

.... Thinkpads_User
JohnBusiness Consultant (Owner)Commented:
Using the same steps as above, I just connected an XP Pro machine to my Windows 8.1 Pro laptop. From XP to Windows 8.1. No issue to connect.

This is on a WORKGROUP, so there may be some domain issues I am not aware of, but  I think the steps should work.

.... Thinkpads_User
AXHITAuthor Commented:
I can confirm all 8 steps have been done. and still no way to connect to this computer. I can still connect my xp machines to any other windows 7 computer on my network but not this one.
JohnBusiness Consultant (Owner)Commented:
So then at this point, I suggest you use a different server. Since you are on a domain, use the regular server for file sharing instead of trying to use Windows 7. The blockage appears to be in the domain, because what you want to do works in a workgroup as I have described.

.... Thinkpads_User

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
JohnBusiness Consultant (Owner)Commented:
System error 67 is a permission issue (different than System 53 connection problem). Nonetheless, what do you get for  NET USE Z: \\IP_address_of_Windows7\folder?

I do not think it will change anything, but it may be worth a try.

... Thinkpads_User
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Legacy OS

From novice to tech pro — start learning today.