Windows Forum

Ask something
Discussion Locked

User Rights

0 helpful
7 replies

by mtreske

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I am having trouble with being able to access my computer from the server. I can get to it but not the other way.
We are running Windows 2000 servers and computers and I recently found that my computer was not being backed up by our Veritas backup software.
After speaking with them on the phone found out that by entering the command \\username\c$ I could reach any other networked computer but my own. I get the message "logon failure: the user has not been granted the requested logon type at this computer." I have tried and tried to figure out what is different with my computer/user profile to no avail.
It has also denied my access to update our web pages with MS Front Page. I can do it as an admin on my machine but not as a user. I created a work around by creating another user profile for myself and it does work now but not the backup utility.
Has anyone run into this and what can I do to fix it?

7 replies

by maxwell edison

Are you logging into your computer locally or joining the domain? The user will have to join the domain.

Open Control Panel - Users and Passwords. How is your (you) user defined?

User: JohnDoe
Domain: Local Computer Name

or

User: JohnDoe
Domain: Network Domain name

It will have to be the latter.

by joseph moore

Ok, this makes me think of a couple of things.
First off, on your Win2K machine, you need to have the system right "Access this computer from the network" checked out. This right determines who can access your system over a network connection. Normally, the EVERYONE group has the right, so that means any user from any workstation can type in \\MACHINENAME\C$ and either see your C: drive (if they have Admin permissions) or they will get a login/password box.
Since you get the logon failure message, then it sounds like this right has been modified on your system.
To check it, click Start -> Settings -> Control Panel -> Administrative Tools -> Local Security Policy.
When that window opens up, expand Security Settings -> Local Policies ->User Rights Assignment.
The first right in the right-hand pane is "Access this computer from the network".
Double-click it and look as to who is listed.
You "should" see:

Administrators
Backup Operators
Power Users
Users
EVERYONE

Theremight be other groups, depending on your Windows Active Directory setup (Enterprise Admins, etc).

Now, if Users is missing, then you won't be able to connect over the network to this machine. Make sure the groups I listed are there.
The EVERYONEgroup is optional, providing the other groups are all there. Removing Everyone makes "anonymous connections" not possible to your system, something that I am not gonna cover now except to say it is a good thing!

by joseph moore

So, check out the rights on your system. You will need to have Administrative rights on the system, though, to check out these permissions.
Also, the domain-level Group Policy permissions will override these settings. So, check with your administrators to see if they made any modifications using Group Policy.

hope this helps

by mtreske

Yea!
That was indeed the problem!
Thanks for your assitance. All the above were missing.
Added them back and I am back in business.
Now my question would be how and why did that change??

This discussion is closed to new replies.