Hello Sue,
I agree with you that WinXP home has this issue because of simple file
sharing. I mean that it is not a limitation in Win2000. It shall work the
same as WinXP pro based on my test. Sorry for the confustion brought.
Best Regards,
Peter Yang
MCSE2000/2003, MCSA, MCDBA
Microsoft Online Partner Support
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: Sue Hoegemeier
| Subject: Re: Login failed for Server\Guest
| Date: Mon, 14 Feb 2005 07:44:48 -0700
| Message-ID:
| References:
| X-Newsreader: Forte Agent 2.0/32.652
| MIME-Version: 1.0
| Content-Type: text/plain; charset=us-ascii
| Content-Transfer-Encoding: 7bit
| Newsgroups: microsoft.public.sqlserver.connect
| NNTP-Posting-Host: 0-2pool82-42.nas33.thornton1.co.us.da.qwest.net
67.4.82.42
| Lines: 1
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.sqlserver.connect:3422
| X-Tomcat-NG: microsoft.public.sqlserver.connect
|
| Peter,
| Not necessarily. In your testing, I would guess you are
| using XP Pro and do not have simple file sharing enabled.
| There are scenarios with XP where you are authenticated as
| guest and the use of the same account/password does not
| work. Refer to the following knowledge base article:
| SQL Server clients are authenticated as guests if Simple
| File Sharing is enabled
| <a rel="nofollow" style='text-decoration: none;' href="http://support.microsoft.com/?id=831133" target="_blank">http://support.microsoft.com/?id=831133</a>
|
| -Sue
|
| On Mon, 14 Feb 2005 07:08:38 GMT,
| petery.TakeThisOut@online.microsoft.com (Peter Yang [MSFT]) wrote:
|
| >Hello Maer,
| >
| >I think it is not a limitation in Windows 2000. Based on my test, I
could
| >access SQL server on Win2000 server by using Windows authenctication if
I
| >use same password for Administrator account on both Win2000 and WinXP
| >computers. I suggest that you check security policy settings on both
| >computers to see if they match:
| >
| >1. Run gpedit.msc
| >
| >2. Check Computer configuration->Windows settings->Security
Settings->Local
| >Policies->Security Options and make sure the following settings:
| >
| >Digitally sign client communication (always) Not defined
| >
| >Digitally sign client communication (when possible) Not defined
| >
| >Digitally sign server communication (always) Not defined
| >
| >Digitally sign server communication (when possible) Not defined
| >
| >LAN Manager Authentication Level Not defined
| >
| >Secure channel: Digitally encrypt or sign secure channel data (always)
Not
| >defined
| >
| >Secure channel: Digitally encrypt secure channel data (when possible)
Not
| >defined
| >
| >Secure channel: Digitally sign secure channel data (when possible) Not
| >defined
| >
| >Secure channel: Require strong (Windows 2000 or later) session key Not
| >defined
| >
| >3. Check Computer configuration->Windows settings->Security
Settings->Local
| >Policies->User Rights assigment, and make sure Deny access this computer
| >from network is not configured.
| >
| >Thanks & Regards,
| >
| >Peter Yang
| >MCSE2000/2003, MCSA, MCDBA
| >Microsoft Online Partner Support
| >
| >When responding to posts, please "Reply to Group" via your newsreader so
| >that others may learn and benefit from your issue.
| >
| >=====================================================
| >
| >This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| >
| >
| >
| >--------------------
| >| From: "Maer"
| >| References:
| >
| >
| >
| >| Subject: Re: Login failed for Server\Guest
| >| Date: Thu, 10 Feb 2005 19:33:17 -0500
| >| Lines: 87
| >| X-Priority: 3
| >| X-MSMail-Priority: Normal
| >| X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
| >| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
| >| X-RFC2646: Format=Flowed; Original
| >| Message-ID:
| >| Newsgroups: microsoft.public.sqlserver.connect
| >| NNTP-Posting-Host: pcp08367474pcs.lndsd201.pa.comcast.net 68.42.29.253
| >| Path:
|
>TK2MSFTNGXA01.phx.gbl!cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP1
2
| >phx.gbl
| >| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.sqlserver.connect:3409
| >| X-Tomcat-NG: microsoft.public.sqlserver.connect
| >|
| >| Thank you, Sue. Your suggestion seems to be the way to go.
| >|
| >| I have noticed that when I try to log in using Windows
Authentication
| >to
| >| a Windows 2000 machine from my XP machine, it tries to log me in as
| >| "Server\Administrator" and, of course, fails. My account is part of
the
| >| Administrator's group. However, the other way around (from Win 2000 to
| >XP)
| >| works fine.
| >|
| >| Is there a limitation in Windows 2000 too?
| >|
| >| Thanks again,
| >| Maer
| >|
| >|
| >|
| >| "Sue Hoegemeier" wrote in message
| >|
| >| > Hi Maer,
| >| > You can enable the guest account but that's a security risk
| >| > - especially if exposed to the outside world. For SQL
| >| > Server, although Windows Authentication is more secure than
| >| > SQL Authentication, I'd probably use that option instead of
| >| > enabling the guest account. Make sure to turn on security
| >| > audits, limit the number of SQL logins and make sure all SQL
| >| > logins have strong passwords - mixed case, alpha numeric
| >| > with special characters, no known words, etc.
| >| >
| >| > -Sue
| >| >
| >| > On Tue, 1 Feb 2005 18:44:54 -0500, "Maer"
| >| > wrote:
| >| >
| >| >> Thank you, Sue!
| >| >>
| >| >> That clarifies so much! Would I be right in assuming that using
| >| >> windows
| >| >>authentication is not an option when logging in remotely to Xp Home
| >since
| >| >>it
| >| >>always uses Guest? Is there a work-around?
| >| >>
| >| >> Maer
| >| >>
| >| >>
| >| >>"Sue Hoegemeier" wrote in message
| >| >>
| >| >>> With XP home, authentication is done using the guest account
| >| >>> as simple file sharing is always enabled on XP Home. Refer
| >| >>> to the following for more info:
| >| >>> SQL Server clients are authenticated as guests if Simple
| >| >>> File Sharing is enabled
| >| >>> <a rel="nofollow" style='text-decoration: none;' href="http://support.microsoft.com/?id=831133" target="_blank">http://support.microsoft.com/?id=831133</a>
| >| >>>
| >| >>> -Sue
| >| >>>
| >| >>> On Tue, 1 Feb 2005 15:42:45 -0500, "Maer"
| >| >>> wrote:
| >| >>>
| >| >>>> Hi - I have two computers, one running Xp Pro and one Xp Home.
I
| >| >>>> created
| >| >>>>a windows user account on both machines with the same password. I
| >added
| >| >>>>those accounts to SQL Server on both machines and I want to be
able to
| >| >>>>connect to each other using a trusted connection.
| >| >>>>
| >| >>>> If I try to remotely connect to the Xp Pro machine from the
Home
| >| >>>> machine
| >| >>>>using windows authentication, everything works fine. But, if I try
to
| >| >>>>remotely connect to the Home machine it says that login failed for
| >| >>>>Server\Guest. My understanding is that it tries to log in as guest
if
| >| >>>>the
| >| >>>>windows account is not found.
| >| >>>>
| >| >>>> Why does it work on one computer but not the other? Is it
because
| >it
| >| >>>> is
| >| >>>>Home edition? Is there something else I need to do?
| >| >>>>
| >| >>>> BTW, standard authentication works fine on both machines and
the
| >| >>>> Guest
| >| >>>>account is turned off.
| >| >>>>
| >| >>>> Thanks,
| >| >>>> Maer
| >| >>>>
| >| >>>
| >| >>
| >| >
| >|
| >|
| >|
|
|
>> Stay informed about: Login failed for Server\Guest