Hi - I have two computers, one running Xp Pro and one Xp Home. I created
a windows user account on both machines with the same password. I added
those accounts to SQL Server on both machines and I want to be able to
connect to each other using a trusted connection.
If I try to remotely connect to the Xp Pro machine from the Home machine
using windows authentication, everything works fine. But, if I try to
remotely connect to the Home machine it says that login failed for
Server\Guest. My understanding is that it tries to log in as guest if the
windows account is not found.
Why does it work on one computer but not the other? Is it because it is
Home edition? Is there something else I need to do?
BTW, standard authentication works fine on both machines and the Guest
account is turned off.
Thanks,
Maer
With XP home, authentication is done using the guest account
as simple file sharing is always enabled on XP Home. Refer
to the following for more info:
SQL Server clients are authenticated as guests if Simple
File Sharing is enabled
http://support.microsoft.com/?id=831133
-Sue
On Tue, 1 Feb 2005 15:42:45 -0500, "Maer"
<maer@.auditleverage.com> wrote:
> Hi - I have two computers, one running Xp Pro and one Xp Home. I created
>a windows user account on both machines with the same password. I added
>those accounts to SQL Server on both machines and I want to be able to
>connect to each other using a trusted connection.
> If I try to remotely connect to the Xp Pro machine from the Home machine
>using windows authentication, everything works fine. But, if I try to
>remotely connect to the Home machine it says that login failed for
>Server\Guest. My understanding is that it tries to log in as guest if the
>windows account is not found.
> Why does it work on one computer but not the other? Is it because it is
>Home edition? Is there something else I need to do?
> BTW, standard authentication works fine on both machines and the Guest
>account is turned off.
> Thanks,
> Maer
>
|||Thank you, Sue!
That clarifies so much! Would I be right in assuming that using windows
authentication is not an option when logging in remotely to Xp Home since it
always uses Guest? Is there a work-around?
Maer
"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
news:k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.4ax.com...
> With XP home, authentication is done using the guest account
> as simple file sharing is always enabled on XP Home. Refer
> to the following for more info:
> SQL Server clients are authenticated as guests if Simple
> File Sharing is enabled
> http://support.microsoft.com/?id=831133
> -Sue
> On Tue, 1 Feb 2005 15:42:45 -0500, "Maer"
> <maer@.auditleverage.com> wrote:
>
|||Hi Maer,
You can enable the guest account but that's a security risk
- especially if exposed to the outside world. For SQL
Server, although Windows Authentication is more secure than
SQL Authentication, I'd probably use that option instead of
enabling the guest account. Make sure to turn on security
audits, limit the number of SQL logins and make sure all SQL
logins have strong passwords - mixed case, alpha numeric
with special characters, no known words, etc.
-Sue
On Tue, 1 Feb 2005 18:44:54 -0500, "Maer"
<maer@.auditleverage.com> wrote:
> Thank you, Sue!
> That clarifies so much! Would I be right in assuming that using windows
>authentication is not an option when logging in remotely to Xp Home since it
>always uses Guest? Is there a work-around?
> Maer
>
>"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
>news:k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.4ax.com.. .
>
|||Thank you, Sue. Your suggestion seems to be the way to go.
I have noticed that when I try to log in using Windows Authentication to
a Windows 2000 machine from my XP machine, it tries to log me in as
"Server\Administrator" and, of course, fails. My account is part of the
Administrator's group. However, the other way around (from Win 2000 to XP)
works fine.
Is there a limitation in Windows 2000 too?
Thanks again,
Maer
"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
news:gg8001d3s2nhf3kjd1i61srhmh5264arvc@.4ax.com...
> Hi Maer,
> You can enable the guest account but that's a security risk
> - especially if exposed to the outside world. For SQL
> Server, although Windows Authentication is more secure than
> SQL Authentication, I'd probably use that option instead of
> enabling the guest account. Make sure to turn on security
> audits, limit the number of SQL logins and make sure all SQL
> logins have strong passwords - mixed case, alpha numeric
> with special characters, no known words, etc.
> -Sue
> On Tue, 1 Feb 2005 18:44:54 -0500, "Maer"
> <maer@.auditleverage.com> wrote:
>
|||Hello Maer,
I think it is not a limitation in Windows 2000. Based on my test, I could
access SQL server on Win2000 server by using Windows authenctication if I
use same password for Administrator account on both Win2000 and WinXP
computers. I suggest that you check security policy settings on both
computers to see if they match:
1. Run gpedit.msc
2. Check Computer configuration->Windows settings->Security Settings->Local
Policies->Security Options and make sure the following settings:
Digitally sign client communication (always)Not defined
Digitally sign client communication (when possible)Not defined
Digitally sign server communication (always)Not defined
Digitally sign server communication (when possible)Not defined
LAN Manager Authentication LevelNot defined
Secure channel: Digitally encrypt or sign secure channel data (always)Not
defined
Secure channel: Digitally encrypt secure channel data (when possible)Not
defined
Secure channel: Digitally sign secure channel data (when possible)Not
defined
Secure channel: Require strong (Windows 2000 or later) session keyNot
defined
3. Check Computer configuration->Windows settings->Security Settings->Local
Policies->User Rights assigment, and make sure Deny access this computer
from network is not configured.
Thanks & Regards,
Peter Yang
MCSE2000/2003, MCSA, MCDBA
Microsoft Online Partner Support
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ===
This posting is provided "AS IS" with no warranties, and confers no rights.
| From: "Maer" <maer@.auditleverage.com>
| References: <esy#R5JCFHA.3592@.TK2MSFTNGP11.phx.gbl>
<k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.4ax.com>
<#5wLGfLCFHA.1296@.TK2MSFTNGP10.phx.gbl>
<gg8001d3s2nhf3kjd1i61srhmh5264arvc@.4ax.com>
| Subject: Re: Login failed for Server\Guest
| Date: Thu, 10 Feb 2005 19:33:17 -0500
| Lines: 87
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
| X-RFC2646: Format=Flowed; Original
| Message-ID: <eUzy8D9DFHA.936@.TK2MSFTNGP12.phx.gbl>
| Newsgroups: microsoft.public.sqlserver.connect
| NNTP-Posting-Host: pcp08367474pcs.lndsd201.pa.comcast.net 68.42.29.253
| Path:
TK2MSFTNGXA01.phx.gbl!cpmsftngxa06.phx.gbl!TK2MSFT NGP08.phx.gbl!TK2MSFTNGP12
.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.sqlserver.connect:3409
| X-Tomcat-NG: microsoft.public.sqlserver.connect
|
| Thank you, Sue. Your suggestion seems to be the way to go.
|
| I have noticed that when I try to log in using Windows Authentication
to
| a Windows 2000 machine from my XP machine, it tries to log me in as
| "Server\Administrator" and, of course, fails. My account is part of the
| Administrator's group. However, the other way around (from Win 2000 to
XP)
| works fine.
|
| Is there a limitation in Windows 2000 too?
|
| Thanks again,
| Maer
|
|
|
| "Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
| news:gg8001d3s2nhf3kjd1i61srhmh5264arvc@.4ax.com...
| > Hi Maer,
| > You can enable the guest account but that's a security risk
| > - especially if exposed to the outside world. For SQL
| > Server, although Windows Authentication is more secure than
| > SQL Authentication, I'd probably use that option instead of
| > enabling the guest account. Make sure to turn on security
| > audits, limit the number of SQL logins and make sure all SQL
| > logins have strong passwords - mixed case, alpha numeric
| > with special characters, no known words, etc.
| >
| > -Sue
| >
| > On Tue, 1 Feb 2005 18:44:54 -0500, "Maer"
| > <maer@.auditleverage.com> wrote:
| >
| >> Thank you, Sue!
| >>
| >> That clarifies so much! Would I be right in assuming that using
| >> windows
| >>authentication is not an option when logging in remotely to Xp Home
since
| >>it
| >>always uses Guest? Is there a work-around?
| >>
| >> Maer
| >>
| >>
| >>"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
| >>news:k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.4ax.com. ..
| >>> With XP home, authentication is done using the guest account
| >>> as simple file sharing is always enabled on XP Home. Refer
| >>> to the following for more info:
| >>> SQL Server clients are authenticated as guests if Simple
| >>> File Sharing is enabled
| >>> http://support.microsoft.com/?id=831133
| >>>
| >>> -Sue
| >>>
| >>> On Tue, 1 Feb 2005 15:42:45 -0500, "Maer"
| >>> <maer@.auditleverage.com> wrote:
| >>>
| >>>> Hi - I have two computers, one running Xp Pro and one Xp Home. I
| >>>> created
| >>>>a windows user account on both machines with the same password. I
added
| >>>>those accounts to SQL Server on both machines and I want to be able to
| >>>>connect to each other using a trusted connection.
| >>>>
| >>>> If I try to remotely connect to the Xp Pro machine from the Home
| >>>> machine
| >>>>using windows authentication, everything works fine. But, if I try to
| >>>>remotely connect to the Home machine it says that login failed for
| >>>>Server\Guest. My understanding is that it tries to log in as guest if
| >>>>the
| >>>>windows account is not found.
| >>>>
| >>>> Why does it work on one computer but not the other? Is it because
it
| >>>> is
| >>>>Home edition? Is there something else I need to do?
| >>>>
| >>>> BTW, standard authentication works fine on both machines and the
| >>>> Guest
| >>>>account is turned off.
| >>>>
| >>>> Thanks,
| >>>> Maer
| >>>>
| >>>
| >>
| >
|
|
|
|||Peter,
Not necessarily. In your testing, I would guess you are
using XP Pro and do not have simple file sharing enabled.
There are scenarios with XP where you are authenticated as
guest and the use of the same account/password does not
work. Refer to the following knowledge base article:
SQL Server clients are authenticated as guests if Simple
File Sharing is enabled
http://support.microsoft.com/?id=831133
-Sue
On Mon, 14 Feb 2005 07:08:38 GMT,
petery@.online.microsoft.com (Peter Yang [MSFT]) wrote:
>Hello Maer,
>I think it is not a limitation in Windows 2000. Based on my test, I could
>access SQL server on Win2000 server by using Windows authenctication if I
>use same password for Administrator account on both Win2000 and WinXP
>computers. I suggest that you check security policy settings on both
>computers to see if they match:
>1. Run gpedit.msc
>2. Check Computer configuration->Windows settings->Security Settings->Local
>Policies->Security Options and make sure the following settings:
>Digitally sign client communication (always)Not defined
>Digitally sign client communication (when possible)Not defined
>Digitally sign server communication (always)Not defined
>Digitally sign server communication (when possible)Not defined
>LAN Manager Authentication LevelNot defined
>Secure channel: Digitally encrypt or sign secure channel data (always)Not
>defined
>Secure channel: Digitally encrypt secure channel data (when possible)Not
>defined
>Secure channel: Digitally sign secure channel data (when possible)Not
>defined
>Secure channel: Require strong (Windows 2000 or later) session keyNot
>defined
>3. Check Computer configuration->Windows settings->Security Settings->Local
>Policies->User Rights assigment, and make sure Deny access this computer
>from network is not configured.
>Thanks & Regards,
>Peter Yang
>MCSE2000/2003, MCSA, MCDBA
>Microsoft Online Partner Support
>When responding to posts, please "Reply to Group" via your newsreader so
>that others may learn and benefit from your issue.
>================================================= ====
>This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
>--
>| From: "Maer" <maer@.auditleverage.com>
>| References: <esy#R5JCFHA.3592@.TK2MSFTNGP11.phx.gbl>
><k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.4ax.com>
><#5wLGfLCFHA.1296@.TK2MSFTNGP10.phx.gbl>
><gg8001d3s2nhf3kjd1i61srhmh5264arvc@.4ax.com>
>| Subject: Re: Login failed for Server\Guest
>| Date: Thu, 10 Feb 2005 19:33:17 -0500
>| Lines: 87
>| X-Priority: 3
>| X-MSMail-Priority: Normal
>| X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>| X-RFC2646: Format=Flowed; Original
>| Message-ID: <eUzy8D9DFHA.936@.TK2MSFTNGP12.phx.gbl>
>| Newsgroups: microsoft.public.sqlserver.connect
>| NNTP-Posting-Host: pcp08367474pcs.lndsd201.pa.comcast.net 68.42.29.253
>| Path:
>TK2MSFTNGXA01.phx.gbl!cpmsftngxa06.phx.gbl!TK2MSF TNGP08.phx.gbl!TK2MSFTNGP12
>phx.gbl
>| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.sqlserver.connect:3409
>| X-Tomcat-NG: microsoft.public.sqlserver.connect
>|
>| Thank you, Sue. Your suggestion seems to be the way to go.
>|
>| I have noticed that when I try to log in using Windows Authentication
>to
>| a Windows 2000 machine from my XP machine, it tries to log me in as
>| "Server\Administrator" and, of course, fails. My account is part of the
>| Administrator's group. However, the other way around (from Win 2000 to
>XP)
>| works fine.
>|
>| Is there a limitation in Windows 2000 too?
>|
>| Thanks again,
>| Maer
>|
>|
>|
>| "Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
>| news:gg8001d3s2nhf3kjd1i61srhmh5264arvc@.4ax.com...
>| > Hi Maer,
>| > You can enable the guest account but that's a security risk
>| > - especially if exposed to the outside world. For SQL
>| > Server, although Windows Authentication is more secure than
>| > SQL Authentication, I'd probably use that option instead of
>| > enabling the guest account. Make sure to turn on security
>| > audits, limit the number of SQL logins and make sure all SQL
>| > logins have strong passwords - mixed case, alpha numeric
>| > with special characters, no known words, etc.
>| >
>| > -Sue
>| >
>| > On Tue, 1 Feb 2005 18:44:54 -0500, "Maer"
>| > <maer@.auditleverage.com> wrote:
>| >
>| >> Thank you, Sue!
>| >>
>| >> That clarifies so much! Would I be right in assuming that using
>| >> windows
>| >>authentication is not an option when logging in remotely to Xp Home
>since
>| >>it
>| >>always uses Guest? Is there a work-around?
>| >>
>| >> Maer
>| >>
>| >>
>| >>"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
>| >>news:k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.4ax.com. ..
>| >>> With XP home, authentication is done using the guest account
>| >>> as simple file sharing is always enabled on XP Home. Refer
>| >>> to the following for more info:
>| >>> SQL Server clients are authenticated as guests if Simple
>| >>> File Sharing is enabled
>| >>> http://support.microsoft.com/?id=831133
>| >>>
>| >>> -Sue
>| >>>
>| >>> On Tue, 1 Feb 2005 15:42:45 -0500, "Maer"
>| >>> <maer@.auditleverage.com> wrote:
>| >>>
>| >>>> Hi - I have two computers, one running Xp Pro and one Xp Home. I
>| >>>> created
>| >>>>a windows user account on both machines with the same password. I
>added
>| >>>>those accounts to SQL Server on both machines and I want to be able to
>| >>>>connect to each other using a trusted connection.
>| >>>>
>| >>>> If I try to remotely connect to the Xp Pro machine from the Home
>| >>>> machine
>| >>>>using windows authentication, everything works fine. But, if I try to
>| >>>>remotely connect to the Home machine it says that login failed for
>| >>>>Server\Guest. My understanding is that it tries to log in as guest if
>| >>>>the
>| >>>>windows account is not found.
>| >>>>
>| >>>> Why does it work on one computer but not the other? Is it because
>it
>| >>>> is
>| >>>>Home edition? Is there something else I need to do?
>| >>>>
>| >>>> BTW, standard authentication works fine on both machines and the
>| >>>> Guest
>| >>>>account is turned off.
>| >>>>
>| >>>> Thanks,
>| >>>> Maer
>| >>>>
>| >>>
>| >>
>| >
>|
>|
>|
|||Not in terms of the same type of thing with the guest
account.When it's a specific account failing, that's a
different matter than attempted authentication via the guest
account.
-Sue
On Thu, 10 Feb 2005 19:33:17 -0500, "Maer"
<maer@.auditleverage.com> wrote:
> Thank you, Sue. Your suggestion seems to be the way to go.
> I have noticed that when I try to log in using Windows Authentication to
>a Windows 2000 machine from my XP machine, it tries to log me in as
>"Server\Administrator" and, of course, fails. My account is part of the
>Administrator's group. However, the other way around (from Win 2000 to XP)
>works fine.
> Is there a limitation in Windows 2000 too?
> Thanks again,
> Maer
>
>"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
>news:gg8001d3s2nhf3kjd1i61srhmh5264arvc@.4ax.com.. .
>
|||Hello Sue,
I agree with you that WinXP home has this issue because of simple file
sharing. I mean that it is not a limitation in Win2000. It shall work the
same as WinXP pro based on my test. Sorry for the confustion brought. :-)
Best Regards,
Peter Yang
MCSE2000/2003, MCSA, MCDBA
Microsoft Online Partner Support
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ===
This posting is provided "AS IS" with no warranties, and confers no rights.
| From: Sue Hoegemeier <Sue_H@.nomail.please>
| Subject: Re: Login failed for Server\Guest
| Date: Mon, 14 Feb 2005 07:44:48 -0700
| Message-ID: <c6e111poj51vkc5a37vs1kjbq92c46f2g6@.4ax.com>
| References: <esy#R5JCFHA.3592@.TK2MSFTNGP11.phx.gbl>
<k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.4ax.com>
<#5wLGfLCFHA.1296@.TK2MSFTNGP10.phx.gbl>
<gg8001d3s2nhf3kjd1i61srhmh5264arvc@.4ax.com>
<eUzy8D9DFHA.936@.TK2MSFTNGP12.phx.gbl>
<pgtqGQmEFHA.3900@.TK2MSFTNGXA01.phx.gbl>
| X-Newsreader: Forte Agent 2.0/32.652
| MIME-Version: 1.0
| Content-Type: text/plain; charset=us-ascii
| Content-Transfer-Encoding: 7bit
| Newsgroups: microsoft.public.sqlserver.connect
| NNTP-Posting-Host: 0-2pool82-42.nas33.thornton1.co.us.da.qwest.net
67.4.82.42
| Lines: 1
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msft ngp13.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.sqlserver.connect:3422
| X-Tomcat-NG: microsoft.public.sqlserver.connect
|
| Peter,
| Not necessarily. In your testing, I would guess you are
| using XP Pro and do not have simple file sharing enabled.
| There are scenarios with XP where you are authenticated as
| guest and the use of the same account/password does not
| work. Refer to the following knowledge base article:
| SQL Server clients are authenticated as guests if Simple
| File Sharing is enabled
| http://support.microsoft.com/?id=831133
|
| -Sue
|
| On Mon, 14 Feb 2005 07:08:38 GMT,
| petery@.online.microsoft.com (Peter Yang [MSFT]) wrote:
|
| >Hello Maer,
| >
| >I think it is not a limitation in Windows 2000. Based on my test, I
could
| >access SQL server on Win2000 server by using Windows authenctication if
I
| >use same password for Administrator account on both Win2000 and WinXP
| >computers. I suggest that you check security policy settings on both
| >computers to see if they match:
| >
| >1. Run gpedit.msc
| >
| >2. Check Computer configuration->Windows settings->Security
Settings->Local
| >Policies->Security Options and make sure the following settings:
| >
| >Digitally sign client communication (always)Not defined
| >
| >Digitally sign client communication (when possible)Not defined
| >
| >Digitally sign server communication (always)Not defined
| >
| >Digitally sign server communication (when possible)Not defined
| >
| >LAN Manager Authentication LevelNot defined
| >
| >Secure channel: Digitally encrypt or sign secure channel data (always)
Not
| >defined
| >
| >Secure channel: Digitally encrypt secure channel data (when possible)
Not
| >defined
| >
| >Secure channel: Digitally sign secure channel data (when possible)Not
| >defined
| >
| >Secure channel: Require strong (Windows 2000 or later) session keyNot
| >defined
| >
| >3. Check Computer configuration->Windows settings->Security
Settings->Local
| >Policies->User Rights assigment, and make sure Deny access this computer
| >from network is not configured.
| >
| >Thanks & Regards,
| >
| >Peter Yang
| >MCSE2000/2003, MCSA, MCDBA
| >Microsoft Online Partner Support
| >
| >When responding to posts, please "Reply to Group" via your newsreader so
| >that others may learn and benefit from your issue.
| >
| >================================================= ====
| >
| >This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| >
| >
| >
| >--
| >| From: "Maer" <maer@.auditleverage.com>
| >| References: <esy#R5JCFHA.3592@.TK2MSFTNGP11.phx.gbl>
| ><k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.4ax.com>
| ><#5wLGfLCFHA.1296@.TK2MSFTNGP10.phx.gbl>
| ><gg8001d3s2nhf3kjd1i61srhmh5264arvc@.4ax.com>
| >| Subject: Re: Login failed for Server\Guest
| >| Date: Thu, 10 Feb 2005 19:33:17 -0500
| >| Lines: 87
| >| X-Priority: 3
| >| X-MSMail-Priority: Normal
| >| X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
| >| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
| >| X-RFC2646: Format=Flowed; Original
| >| Message-ID: <eUzy8D9DFHA.936@.TK2MSFTNGP12.phx.gbl>
| >| Newsgroups: microsoft.public.sqlserver.connect
| >| NNTP-Posting-Host: pcp08367474pcs.lndsd201.pa.comcast.net 68.42.29.253
| >| Path:
|
>TK2MSFTNGXA01.phx.gbl!cpmsftngxa06.phx.gbl!TK2MSF TNGP08.phx.gbl!TK2MSFTNGP1
2
| >phx.gbl
| >| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.sqlserver.connect:3409
| >| X-Tomcat-NG: microsoft.public.sqlserver.connect
| >|
| >| Thank you, Sue. Your suggestion seems to be the way to go.
| >|
| >| I have noticed that when I try to log in using Windows
Authentication
| >to
| >| a Windows 2000 machine from my XP machine, it tries to log me in as
| >| "Server\Administrator" and, of course, fails. My account is part of
the
| >| Administrator's group. However, the other way around (from Win 2000 to
| >XP)
| >| works fine.
| >|
| >| Is there a limitation in Windows 2000 too?
| >|
| >| Thanks again,
| >| Maer
| >|
| >|
| >|
| >| "Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
| >| news:gg8001d3s2nhf3kjd1i61srhmh5264arvc@.4ax.com...
| >| > Hi Maer,
| >| > You can enable the guest account but that's a security risk
| >| > - especially if exposed to the outside world. For SQL
| >| > Server, although Windows Authentication is more secure than
| >| > SQL Authentication, I'd probably use that option instead of
| >| > enabling the guest account. Make sure to turn on security
| >| > audits, limit the number of SQL logins and make sure all SQL
| >| > logins have strong passwords - mixed case, alpha numeric
| >| > with special characters, no known words, etc.
| >| >
| >| > -Sue
| >| >
| >| > On Tue, 1 Feb 2005 18:44:54 -0500, "Maer"
| >| > <maer@.auditleverage.com> wrote:
| >| >
| >| >> Thank you, Sue!
| >| >>
| >| >> That clarifies so much! Would I be right in assuming that using
| >| >> windows
| >| >>authentication is not an option when logging in remotely to Xp Home
| >since
| >| >>it
| >| >>always uses Guest? Is there a work-around?
| >| >>
| >| >> Maer
| >| >>
| >| >>
| >| >>"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
| >| >>news:k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.4ax.com. ..
| >| >>> With XP home, authentication is done using the guest account
| >| >>> as simple file sharing is always enabled on XP Home. Refer
| >| >>> to the following for more info:
| >| >>> SQL Server clients are authenticated as guests if Simple
| >| >>> File Sharing is enabled
| >| >>> http://support.microsoft.com/?id=831133
| >| >>>
| >| >>> -Sue
| >| >>>
| >| >>> On Tue, 1 Feb 2005 15:42:45 -0500, "Maer"
| >| >>> <maer@.auditleverage.com> wrote:
| >| >>>
| >| >>>> Hi - I have two computers, one running Xp Pro and one Xp Home.
I
| >| >>>> created
| >| >>>>a windows user account on both machines with the same password. I
| >added
| >| >>>>those accounts to SQL Server on both machines and I want to be
able to
| >| >>>>connect to each other using a trusted connection.
| >| >>>>
| >| >>>> If I try to remotely connect to the Xp Pro machine from the
Home
| >| >>>> machine
| >| >>>>using windows authentication, everything works fine. But, if I try
to
| >| >>>>remotely connect to the Home machine it says that login failed for
| >| >>>>Server\Guest. My understanding is that it tries to log in as guest
if
| >| >>>>the
| >| >>>>windows account is not found.
| >| >>>>
| >| >>>> Why does it work on one computer but not the other? Is it
because
| >it
| >| >>>> is
| >| >>>>Home edition? Is there something else I need to do?
| >| >>>>
| >| >>>> BTW, standard authentication works fine on both machines and
the
| >| >>>> Guest
| >| >>>>account is turned off.
| >| >>>>
| >| >>>> Thanks,
| >| >>>> Maer
| >| >>>>
| >| >>>
| >| >>
| >| >
| >|
| >|
| >|
|
|
|||No problem...I just didn't want the poster or anyone
following to get confused! As I posted back, the issue hit
the second time around would be different as the login
failed for Administrator not guest. Even though it wasn't
explained which version of XP was used on the second case,
it would likely have been XP Pro without simple file sharing
enabled and consequently more likely related to security
settings.
-Sue
On Tue, 15 Feb 2005 04:13:27 GMT,
petery@.online.microsoft.com (Peter Yang [MSFT]) wrote:
>Hello Sue,
>I agree with you that WinXP home has this issue because of simple file
>sharing. I mean that it is not a limitation in Win2000. It shall work the
>same as WinXP pro based on my test. Sorry for the confustion brought. :-)
>Best Regards,
>Peter Yang
>MCSE2000/2003, MCSA, MCDBA
>Microsoft Online Partner Support
>When responding to posts, please "Reply to Group" via your newsreader so
>that others may learn and benefit from your issue.
>================================================= ====
>This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
>--
>| From: Sue Hoegemeier <Sue_H@.nomail.please>
>| Subject: Re: Login failed for Server\Guest
>| Date: Mon, 14 Feb 2005 07:44:48 -0700
>| Message-ID: <c6e111poj51vkc5a37vs1kjbq92c46f2g6@.4ax.com>
>| References: <esy#R5JCFHA.3592@.TK2MSFTNGP11.phx.gbl>
><k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.4ax.com>
><#5wLGfLCFHA.1296@.TK2MSFTNGP10.phx.gbl>
><gg8001d3s2nhf3kjd1i61srhmh5264arvc@.4ax.com>
><eUzy8D9DFHA.936@.TK2MSFTNGP12.phx.gbl>
><pgtqGQmEFHA.3900@.TK2MSFTNGXA01.phx.gbl>
>| X-Newsreader: Forte Agent 2.0/32.652
>| MIME-Version: 1.0
>| Content-Type: text/plain; charset=us-ascii
>| Content-Transfer-Encoding: 7bit
>| Newsgroups: microsoft.public.sqlserver.connect
>| NNTP-Posting-Host: 0-2pool82-42.nas33.thornton1.co.us.da.qwest.net
>67.4.82.42
>| Lines: 1
>| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msft ngp13.phx.gbl
>| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.sqlserver.connect:3422
>| X-Tomcat-NG: microsoft.public.sqlserver.connect
>|
>| Peter,
>| Not necessarily. In your testing, I would guess you are
>| using XP Pro and do not have simple file sharing enabled.
>| There are scenarios with XP where you are authenticated as
>| guest and the use of the same account/password does not
>| work. Refer to the following knowledge base article:
>| SQL Server clients are authenticated as guests if Simple
>| File Sharing is enabled
>| http://support.microsoft.com/?id=831133
>|
>| -Sue
>|
>| On Mon, 14 Feb 2005 07:08:38 GMT,
>| petery@.online.microsoft.com (Peter Yang [MSFT]) wrote:
>|
>| >Hello Maer,
>| >
>| >I think it is not a limitation in Windows 2000. Based on my test, I
>could
>| >access SQL server on Win2000 server by using Windows authenctication if
>I
>| >use same password for Administrator account on both Win2000 and WinXP
>| >computers. I suggest that you check security policy settings on both
>| >computers to see if they match:
>| >
>| >1. Run gpedit.msc
>| >
>| >2. Check Computer configuration->Windows settings->Security
>Settings->Local
>| >Policies->Security Options and make sure the following settings:
>| >
>| >Digitally sign client communication (always)Not defined
>| >
>| >Digitally sign client communication (when possible)Not defined
>| >
>| >Digitally sign server communication (always)Not defined
>| >
>| >Digitally sign server communication (when possible)Not defined
>| >
>| >LAN Manager Authentication LevelNot defined
>| >
>| >Secure channel: Digitally encrypt or sign secure channel data (always)
>Not
>| >defined
>| >
>| >Secure channel: Digitally encrypt secure channel data (when possible)
>Not
>| >defined
>| >
>| >Secure channel: Digitally sign secure channel data (when possible)Not
>| >defined
>| >
>| >Secure channel: Require strong (Windows 2000 or later) session keyNot
>| >defined
>| >
>| >3. Check Computer configuration->Windows settings->Security
>Settings->Local
>| >Policies->User Rights assigment, and make sure Deny access this computer
>| >from network is not configured.
>| >
>| >Thanks & Regards,
>| >
>| >Peter Yang
>| >MCSE2000/2003, MCSA, MCDBA
>| >Microsoft Online Partner Support
>| >
>| >When responding to posts, please "Reply to Group" via your newsreader so
>| >that others may learn and benefit from your issue.
>| >
>| >================================================= ====
>| >
>| >This posting is provided "AS IS" with no warranties, and confers no
>rights.
>| >
>| >
>| >
>| >
>| >--
>| >| From: "Maer" <maer@.auditleverage.com>
>| >| References: <esy#R5JCFHA.3592@.TK2MSFTNGP11.phx.gbl>
>| ><k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.4ax.com>
>| ><#5wLGfLCFHA.1296@.TK2MSFTNGP10.phx.gbl>
>| ><gg8001d3s2nhf3kjd1i61srhmh5264arvc@.4ax.com>
>| >| Subject: Re: Login failed for Server\Guest
>| >| Date: Thu, 10 Feb 2005 19:33:17 -0500
>| >| Lines: 87
>| >| X-Priority: 3
>| >| X-MSMail-Priority: Normal
>| >| X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>| >| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>| >| X-RFC2646: Format=Flowed; Original
>| >| Message-ID: <eUzy8D9DFHA.936@.TK2MSFTNGP12.phx.gbl>
>| >| Newsgroups: microsoft.public.sqlserver.connect
>| >| NNTP-Posting-Host: pcp08367474pcs.lndsd201.pa.comcast.net 68.42.29.253
>| >| Path:
>|
>2
>| >phx.gbl
>| >| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.sqlserver.connect:3409
>| >| X-Tomcat-NG: microsoft.public.sqlserver.connect
>| >|
>| >| Thank you, Sue. Your suggestion seems to be the way to go.
>| >|
>| >| I have noticed that when I try to log in using Windows
>Authentication
>| >to
>| >| a Windows 2000 machine from my XP machine, it tries to log me in as
>| >| "Server\Administrator" and, of course, fails. My account is part of
>the
>| >| Administrator's group. However, the other way around (from Win 2000 to
>| >XP)
>| >| works fine.
>| >|
>| >| Is there a limitation in Windows 2000 too?
>| >|
>| >| Thanks again,
>| >| Maer
>| >|
>| >|
>| >|
>| >| "Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
>| >| news:gg8001d3s2nhf3kjd1i61srhmh5264arvc@.4ax.com...
>| >| > Hi Maer,
>| >| > You can enable the guest account but that's a security risk
>| >| > - especially if exposed to the outside world. For SQL
>| >| > Server, although Windows Authentication is more secure than
>| >| > SQL Authentication, I'd probably use that option instead of
>| >| > enabling the guest account. Make sure to turn on security
>| >| > audits, limit the number of SQL logins and make sure all SQL
>| >| > logins have strong passwords - mixed case, alpha numeric
>| >| > with special characters, no known words, etc.
>| >| >
>| >| > -Sue
>| >| >
>| >| > On Tue, 1 Feb 2005 18:44:54 -0500, "Maer"
>| >| > <maer@.auditleverage.com> wrote:
>| >| >
>| >| >> Thank you, Sue!
>| >| >>
>| >| >> That clarifies so much! Would I be right in assuming that using
>| >| >> windows
>| >| >>authentication is not an option when logging in remotely to Xp Home
>| >since
>| >| >>it
>| >| >>always uses Guest? Is there a work-around?
>| >| >>
>| >| >> Maer
>| >| >>
>| >| >>
>| >| >>"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
>| >| >>news:k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.4ax.com. ..
>| >| >>> With XP home, authentication is done using the guest account
>| >| >>> as simple file sharing is always enabled on XP Home. Refer
>| >| >>> to the following for more info:
>| >| >>> SQL Server clients are authenticated as guests if Simple
>| >| >>> File Sharing is enabled
>| >| >>> http://support.microsoft.com/?id=831133
>| >| >>>
>| >| >>> -Sue
>| >| >>>
>| >| >>> On Tue, 1 Feb 2005 15:42:45 -0500, "Maer"
>| >| >>> <maer@.auditleverage.com> wrote:
>| >| >>>
>| >| >>>> Hi - I have two computers, one running Xp Pro and one Xp Home.
>I
>| >| >>>> created
>| >| >>>>a windows user account on both machines with the same password. I
>| >added
>| >| >>>>those accounts to SQL Server on both machines and I want to be
>able to
>| >| >>>>connect to each other using a trusted connection.
>| >| >>>>
>| >| >>>> If I try to remotely connect to the Xp Pro machine from the
>Home
>| >| >>>> machine
>| >| >>>>using windows authentication, everything works fine. But, if I try
>to
>| >| >>>>remotely connect to the Home machine it says that login failed for
>| >| >>>>Server\Guest. My understanding is that it tries to log in as guest
>if
>| >| >>>>the
>| >| >>>>windows account is not found.
>| >| >>>>
>| >| >>>> Why does it work on one computer but not the other? Is it
>because
>| >it
>| >| >>>> is
>| >| >>>>Home edition? Is there something else I need to do?
>| >| >>>>
>| >| >>>> BTW, standard authentication works fine on both machines and
>the
>| >| >>>> Guest
>| >| >>>>account is turned off.
>| >| >>>>
>| >| >>>> Thanks,
>| >| >>>> Maer
>| >| >>>>
>| >| >>>
>| >| >>
>| >| >
>| >|
>| >|
>| >|
>|
>|
Showing posts with label home. Show all posts
Showing posts with label home. Show all posts
Wednesday, March 21, 2012
Login failed for Server\Guest
Hi - I have two computers, one running Xp Pro and one Xp Home. I created
a windows user account on both machines with the same password. I added
those accounts to SQL Server on both machines and I want to be able to
connect to each other using a trusted connection.
If I try to remotely connect to the Xp Pro machine from the Home machine
using windows authentication, everything works fine. But, if I try to
remotely connect to the Home machine it says that login failed for
Server\Guest. My understanding is that it tries to log in as guest if the
windows account is not found.
Why does it work on one computer but not the other? Is it because it is
Home edition? Is there something else I need to do?
BTW, standard authentication works fine on both machines and the Guest
account is turned off.
Thanks,
MaerWith XP home, authentication is done using the guest account
as simple file sharing is always enabled on XP Home. Refer
to the following for more info:
SQL Server clients are authenticated as guests if Simple
File Sharing is enabled
http://support.microsoft.com/?id=831133
-Sue
On Tue, 1 Feb 2005 15:42:45 -0500, "Maer"
<maer@.auditleverage.com> wrote:
> Hi - I have two computers, one running Xp Pro and one Xp Home. I create
d
>a windows user account on both machines with the same password. I added
>those accounts to SQL Server on both machines and I want to be able to
>connect to each other using a trusted connection.
> If I try to remotely connect to the Xp Pro machine from the Home machin
e
>using windows authentication, everything works fine. But, if I try to
>remotely connect to the Home machine it says that login failed for
>Server\Guest. My understanding is that it tries to log in as guest if the
>windows account is not found.
> Why does it work on one computer but not the other? Is it because it is
>Home edition? Is there something else I need to do?
> BTW, standard authentication works fine on both machines and the Guest
>account is turned off.
> Thanks,
> Maer
>|||Thank you, Sue!
That clarifies so much! Would I be right in assuming that using windows
authentication is not an option when logging in remotely to Xp Home since it
always uses Guest? Is there a work-around?
Maer
"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
news:k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.
4ax.com...
> With XP home, authentication is done using the guest account
> as simple file sharing is always enabled on XP Home. Refer
> to the following for more info:
> SQL Server clients are authenticated as guests if Simple
> File Sharing is enabled
> http://support.microsoft.com/?id=831133
> -Sue
> On Tue, 1 Feb 2005 15:42:45 -0500, "Maer"
> <maer@.auditleverage.com> wrote:
>
>|||Hi Maer,
You can enable the guest account but that's a security risk
- especially if exposed to the outside world. For SQL
Server, although Windows Authentication is more secure than
SQL Authentication, I'd probably use that option instead of
enabling the guest account. Make sure to turn on security
audits, limit the number of SQL logins and make sure all SQL
logins have strong passwords - mixed case, alpha numeric
with special characters, no known words, etc.
-Sue
On Tue, 1 Feb 2005 18:44:54 -0500, "Maer"
<maer@.auditleverage.com> wrote:
> Thank you, Sue!
> That clarifies so much! Would I be right in assuming that using windows
>authentication is not an option when logging in remotely to Xp Home since i
t
>always uses Guest? Is there a work-around?
> Maer
>
>"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
> news:k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.
4ax.com...
>|||Thank you, Sue. Your suggestion seems to be the way to go.
I have noticed that when I try to log in using Windows Authentication to
a Windows 2000 machine from my XP machine, it tries to log me in as
"Server\Administrator" and, of course, fails. My account is part of the
Administrator's group. However, the other way around (from Win 2000 to XP)
works fine.
Is there a limitation in Windows 2000 too?
Thanks again,
Maer
"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
news:gg8001d3s2nhf3kjd1i61srhmh5264arvc@.
4ax.com...
> Hi Maer,
> You can enable the guest account but that's a security risk
> - especially if exposed to the outside world. For SQL
> Server, although Windows Authentication is more secure than
> SQL Authentication, I'd probably use that option instead of
> enabling the guest account. Make sure to turn on security
> audits, limit the number of SQL logins and make sure all SQL
> logins have strong passwords - mixed case, alpha numeric
> with special characters, no known words, etc.
> -Sue
> On Tue, 1 Feb 2005 18:44:54 -0500, "Maer"
> <maer@.auditleverage.com> wrote:
>
>|||Hello Maer,
I think it is not a limitation in Windows 2000. Based on my test, I could
access SQL server on Win2000 server by using Windows authenctication if I
use same password for Administrator account on both Win2000 and WinXP
computers. I suggest that you check security policy settings on both
computers to see if they match:
1. Run gpedit.msc
2. Check Computer configuration->Windows settings->Security Settings->Local
Policies->Security Options and make sure the following settings:
Digitally sign client communication (always) Not defined
Digitally sign client communication (when possible) Not defined
Digitally sign server communication (always) Not defined
Digitally sign server communication (when possible) Not defined
LAN Manager Authentication Level Not defined
Secure channel: Digitally encrypt or sign secure channel data (always) Not
defined
Secure channel: Digitally encrypt secure channel data (when possible) Not
defined
Secure channel: Digitally sign secure channel data (when possible) Not
defined
Secure channel: Require strong (Windows 2000 or later) session key Not
defined
3. Check Computer configuration->Windows settings->Security Settings->Local
Policies->User Rights assigment, and make sure Deny access this computer
from network is not configured.
Thanks & Regards,
Peter Yang
MCSE2000/2003, MCSA, MCDBA
Microsoft Online Partner Support
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
========================================
=============
This posting is provided "AS IS" with no warranties, and confers no rights.
| From: "Maer" <maer@.auditleverage.com>
| References: <esy#R5JCFHA.3592@.TK2MSFTNGP11.phx.gbl>
<k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.4ax.com>
<#5wLGfLCFHA.1296@.TK2MSFTNGP10.phx.gbl>
<gg8001d3s2nhf3kjd1i61srhmh5264arvc@.4ax.com>
| Subject: Re: Login failed for Server\Guest
| Date: Thu, 10 Feb 2005 19:33:17 -0500
| Lines: 87
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
| X-RFC2646: Format=Flowed; Original
| Message-ID: <eUzy8D9DFHA.936@.TK2MSFTNGP12.phx.gbl>
| Newsgroups: microsoft.public.sqlserver.connect
| NNTP-Posting-Host: pcp08367474pcs.lndsd201.pa.comcast.net 68.42.29.253
| Path:
TK2MSFTNGXA01.phx.gbl!cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP12
.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.sqlserver.connect:3409
| X-Tomcat-NG: microsoft.public.sqlserver.connect
|
| Thank you, Sue. Your suggestion seems to be the way to go.
|
| I have noticed that when I try to log in using Windows Authentication
to
| a Windows 2000 machine from my XP machine, it tries to log me in as
| "Server\Administrator" and, of course, fails. My account is part of the
| Administrator's group. However, the other way around (from Win 2000 to
XP)
| works fine.
|
| Is there a limitation in Windows 2000 too?
|
| Thanks again,
| Maer
|
|
|
| "Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
| news:gg8001d3s2nhf3kjd1i61srhmh5264arvc@.
4ax.com...
| > Hi Maer,
| > You can enable the guest account but that's a security risk
| > - especially if exposed to the outside world. For SQL
| > Server, although Windows Authentication is more secure than
| > SQL Authentication, I'd probably use that option instead of
| > enabling the guest account. Make sure to turn on security
| > audits, limit the number of SQL logins and make sure all SQL
| > logins have strong passwords - mixed case, alpha numeric
| > with special characters, no known words, etc.
| >
| > -Sue
| >
| > On Tue, 1 Feb 2005 18:44:54 -0500, "Maer"
| > <maer@.auditleverage.com> wrote:
| >
| >> Thank you, Sue!
| >>
| >> That clarifies so much! Would I be right in assuming that using
| >> windows
| >>authentication is not an option when logging in remotely to Xp Home
since
| >>it
| >>always uses Guest? Is there a work-around?
| >>
| >> Maer
| >>
| >>
| >>"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
| >> news:k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.
4ax.com...
| >>> With XP home, authentication is done using the guest account
| >>> as simple file sharing is always enabled on XP Home. Refer
| >>> to the following for more info:
| >>> SQL Server clients are authenticated as guests if Simple
| >>> File Sharing is enabled
| >>> http://support.microsoft.com/?id=831133
| >>>
| >>> -Sue
| >>>
| >>> On Tue, 1 Feb 2005 15:42:45 -0500, "Maer"
| >>> <maer@.auditleverage.com> wrote:
| >>>
| >>>> Hi - I have two computers, one running Xp Pro and one Xp Home. I
| >>>> created
| >>>>a windows user account on both machines with the same password. I
added
| >>>>those accounts to SQL Server on both machines and I want to be able to
| >>>>connect to each other using a trusted connection.
| >>>>
| >>>> If I try to remotely connect to the Xp Pro machine from the Home
| >>>> machine
| >>>>using windows authentication, everything works fine. But, if I try to
| >>>>remotely connect to the Home machine it says that login failed for
| >>>>Server\Guest. My understanding is that it tries to log in as guest if
| >>>>the
| >>>>windows account is not found.
| >>>>
| >>>> Why does it work on one computer but not the other? Is it because
it
| >>>> is
| >>>>Home edition? Is there something else I need to do?
| >>>>
| >>>> BTW, standard authentication works fine on both machines and the
| >>>> Guest
| >>>>account is turned off.
| >>>>
| >>>> Thanks,
| >>>> Maer
| >>>>
| >>>
| >>
| >
|
|
||||Peter,
Not necessarily. In your testing, I would guess you are
using XP Pro and do not have simple file sharing enabled.
There are scenarios with XP where you are authenticated as
guest and the use of the same account/password does not
work. Refer to the following knowledge base article:
SQL Server clients are authenticated as guests if Simple
File Sharing is enabled
http://support.microsoft.com/?id=831133
-Sue
On Mon, 14 Feb 2005 07:08:38 GMT,
petery@.online.microsoft.com (Peter Yang [MSFT]) wrote:
>Hello Maer,
>I think it is not a limitation in Windows 2000. Based on my test, I could
>access SQL server on Win2000 server by using Windows authenctication if I
>use same password for Administrator account on both Win2000 and WinXP
>computers. I suggest that you check security policy settings on both
>computers to see if they match:
>1. Run gpedit.msc
>2. Check Computer configuration->Windows settings->Security Settings->Local
>Policies->Security Options and make sure the following settings:
>Digitally sign client communication (always) Not defined
>Digitally sign client communication (when possible) Not defined
>Digitally sign server communication (always) Not defined
>Digitally sign server communication (when possible) Not defined
>LAN Manager Authentication Level Not defined
>Secure channel: Digitally encrypt or sign secure channel data (always) Not
>defined
>Secure channel: Digitally encrypt secure channel data (when possible) Not
>defined
>Secure channel: Digitally sign secure channel data (when possible) Not
>defined
>Secure channel: Require strong (Windows 2000 or later) session key Not
>defined
>3. Check Computer configuration->Windows settings->Security Settings->Local
>Policies->User Rights assigment, and make sure Deny access this computer
>from network is not configured.
>Thanks & Regards,
>Peter Yang
>MCSE2000/2003, MCSA, MCDBA
>Microsoft Online Partner Support
>When responding to posts, please "Reply to Group" via your newsreader so
>that others may learn and benefit from your issue.
> ========================================
=============
>This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
>--
>| From: "Maer" <maer@.auditleverage.com>
>| References: <esy#R5JCFHA.3592@.TK2MSFTNGP11.phx.gbl>
><k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.4ax.com>
><#5wLGfLCFHA.1296@.TK2MSFTNGP10.phx.gbl>
><gg8001d3s2nhf3kjd1i61srhmh5264arvc@.4ax.com>
>| Subject: Re: Login failed for Server\Guest
>| Date: Thu, 10 Feb 2005 19:33:17 -0500
>| Lines: 87
>| X-Priority: 3
>| X-MSMail-Priority: Normal
>| X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>| X-RFC2646: Format=Flowed; Original
>| Message-ID: <eUzy8D9DFHA.936@.TK2MSFTNGP12.phx.gbl>
>| Newsgroups: microsoft.public.sqlserver.connect
>| NNTP-Posting-Host: pcp08367474pcs.lndsd201.pa.comcast.net 68.42.29.253
>| Path:
>TK2MSFTNGXA01.phx.gbl!cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP1
2
>phx.gbl
>| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.sqlserver.connect:3409
>| X-Tomcat-NG: microsoft.public.sqlserver.connect
>|
>| Thank you, Sue. Your suggestion seems to be the way to go.
>|
>| I have noticed that when I try to log in using Windows Authentication
>to
>| a Windows 2000 machine from my XP machine, it tries to log me in as
>| "Server\Administrator" and, of course, fails. My account is part of the
>| Administrator's group. However, the other way around (from Win 2000 to
>XP)
>| works fine.
>|
>| Is there a limitation in Windows 2000 too?
>|
>| Thanks again,
>| Maer
>|
>|
>|
>| "Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
>| news:gg8001d3s2nhf3kjd1i61srhmh5264arvc@.
4ax.com...
>| > Hi Maer,
>| > You can enable the guest account but that's a security risk
>| > - especially if exposed to the outside world. For SQL
>| > Server, although Windows Authentication is more secure than
>| > SQL Authentication, I'd probably use that option instead of
>| > enabling the guest account. Make sure to turn on security
>| > audits, limit the number of SQL logins and make sure all SQL
>| > logins have strong passwords - mixed case, alpha numeric
>| > with special characters, no known words, etc.
>| >
>| > -Sue
>| >
>| > On Tue, 1 Feb 2005 18:44:54 -0500, "Maer"
>| > <maer@.auditleverage.com> wrote:
>| >
>| >> Thank you, Sue!
>| >>
>| >> That clarifies so much! Would I be right in assuming that using
>| >> windows
>| >>authentication is not an option when logging in remotely to Xp Home
>since
>| >>it
>| >>always uses Guest? Is there a work-around?
>| >>
>| >> Maer
>| >>
>| >>
>| >>"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
>| >> news:k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.
4ax.com...
>| >>> With XP home, authentication is done using the guest account
>| >>> as simple file sharing is always enabled on XP Home. Refer
>| >>> to the following for more info:
>| >>> SQL Server clients are authenticated as guests if Simple
>| >>> File Sharing is enabled
>| >>> http://support.microsoft.com/?id=831133
>| >>>
>| >>> -Sue
>| >>>
>| >>> On Tue, 1 Feb 2005 15:42:45 -0500, "Maer"
>| >>> <maer@.auditleverage.com> wrote:
>| >>>
>| >>>> Hi - I have two computers, one running Xp Pro and one Xp Home. I
>| >>>> created
>| >>>>a windows user account on both machines with the same password. I
>added
>| >>>>those accounts to SQL Server on both machines and I want to be able t
o
>| >>>>connect to each other using a trusted connection.
>| >>>>
>| >>>> If I try to remotely connect to the Xp Pro machine from the Home
>| >>>> machine
>| >>>>using windows authentication, everything works fine. But, if I try to
>| >>>>remotely connect to the Home machine it says that login failed for
>| >>>>Server\Guest. My understanding is that it tries to log in as guest if
>| >>>>the
>| >>>>windows account is not found.
>| >>>>
>| >>>> Why does it work on one computer but not the other? Is it because
>it
>| >>>> is
>| >>>>Home edition? Is there something else I need to do?
>| >>>>
>| >>>> BTW, standard authentication works fine on both machines and the
>| >>>> Guest
>| >>>>account is turned off.
>| >>>>
>| >>>> Thanks,
>| >>>> Maer
>| >>>>
>| >>>
>| >>
>| >
>|
>|
>||||Not in terms of the same type of thing with the guest
account.When it's a specific account failing, that's a
different matter than attempted authentication via the guest
account.
-Sue
On Thu, 10 Feb 2005 19:33:17 -0500, "Maer"
<maer@.auditleverage.com> wrote:
> Thank you, Sue. Your suggestion seems to be the way to go.
> I have noticed that when I try to log in using Windows Authentication t
o
>a Windows 2000 machine from my XP machine, it tries to log me in as
>"Server\Administrator" and, of course, fails. My account is part of the
>Administrator's group. However, the other way around (from Win 2000 to XP)
>works fine.
> Is there a limitation in Windows 2000 too?
> Thanks again,
> Maer
>
>"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
> news:gg8001d3s2nhf3kjd1i61srhmh5264arvc@.
4ax.com...
>|||Hello Sue,
I agree with you that WinXP home has this issue because of simple file
sharing. I mean that it is not a limitation in Win2000. It shall work the
same as WinXP pro based on my test. Sorry for the confustion brought. :-)
Best Regards,
Peter Yang
MCSE2000/2003, MCSA, MCDBA
Microsoft Online Partner Support
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
========================================
=============
This posting is provided "AS IS" with no warranties, and confers no rights.
| From: Sue Hoegemeier <Sue_H@.nomail.please>
| Subject: Re: Login failed for Server\Guest
| Date: Mon, 14 Feb 2005 07:44:48 -0700
| Message-ID: <c6e111poj51vkc5a37vs1kjbq92c46f2g6@.4ax.com>
| References: <esy#R5JCFHA.3592@.TK2MSFTNGP11.phx.gbl>
<k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.4ax.com>
<#5wLGfLCFHA.1296@.TK2MSFTNGP10.phx.gbl>
<gg8001d3s2nhf3kjd1i61srhmh5264arvc@.4ax.com>
<eUzy8D9DFHA.936@.TK2MSFTNGP12.phx.gbl>
<pgtqGQmEFHA.3900@.TK2MSFTNGXA01.phx.gbl>
| X-Newsreader: Forte Agent 2.0/32.652
| MIME-Version: 1.0
| Content-Type: text/plain; charset=us-ascii
| Content-Transfer-Encoding: 7bit
| Newsgroups: microsoft.public.sqlserver.connect
| NNTP-Posting-Host: 0-2pool82-42.nas33.thornton1.co.us.da.qwest.net
67.4.82.42
| Lines: 1
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.sqlserver.connect:3422
| X-Tomcat-NG: microsoft.public.sqlserver.connect
|
| Peter,
| Not necessarily. In your testing, I would guess you are
| using XP Pro and do not have simple file sharing enabled.
| There are scenarios with XP where you are authenticated as
| guest and the use of the same account/password does not
| work. Refer to the following knowledge base article:
| SQL Server clients are authenticated as guests if Simple
| File Sharing is enabled
| http://support.microsoft.com/?id=831133
|
| -Sue
|
| On Mon, 14 Feb 2005 07:08:38 GMT,
| petery@.online.microsoft.com (Peter Yang [MSFT]) wrote:
|
| >Hello Maer,
| >
| >I think it is not a limitation in Windows 2000. Based on my test, I
could
| >access SQL server on Win2000 server by using Windows authenctication if
I
| >use same password for Administrator account on both Win2000 and WinXP
| >computers. I suggest that you check security policy settings on both
| >computers to see if they match:
| >
| >1. Run gpedit.msc
| >
| >2. Check Computer configuration->Windows settings->Security
Settings->Local
| >Policies->Security Options and make sure the following settings:
| >
| >Digitally sign client communication (always) Not defined
| >
| >Digitally sign client communication (when possible) Not defined
| >
| >Digitally sign server communication (always) Not defined
| >
| >Digitally sign server communication (when possible) Not defined
| >
| >LAN Manager Authentication Level Not defined
| >
| >Secure channel: Digitally encrypt or sign secure channel data (always)
Not
| >defined
| >
| >Secure channel: Digitally encrypt secure channel data (when possible)
Not
| >defined
| >
| >Secure channel: Digitally sign secure channel data (when possible) Not
| >defined
| >
| >Secure channel: Require strong (Windows 2000 or later) session key Not
| >defined
| >
| >3. Check Computer configuration->Windows settings->Security
Settings->Local
| >Policies->User Rights assigment, and make sure Deny access this computer
| >from network is not configured.
| >
| >Thanks & Regards,
| >
| >Peter Yang
| >MCSE2000/2003, MCSA, MCDBA
| >Microsoft Online Partner Support
| >
| >When responding to posts, please "Reply to Group" via your newsreader so
| >that others may learn and benefit from your issue.
| >
| > ========================================
=============
| >
| >This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| >
| >
| >
| >--
| >| From: "Maer" <maer@.auditleverage.com>
| >| References: <esy#R5JCFHA.3592@.TK2MSFTNGP11.phx.gbl>
| ><k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.4ax.com>
| ><#5wLGfLCFHA.1296@.TK2MSFTNGP10.phx.gbl>
| ><gg8001d3s2nhf3kjd1i61srhmh5264arvc@.4ax.com>
| >| Subject: Re: Login failed for Server\Guest
| >| Date: Thu, 10 Feb 2005 19:33:17 -0500
| >| Lines: 87
| >| X-Priority: 3
| >| X-MSMail-Priority: Normal
| >| X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
| >| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
| >| X-RFC2646: Format=Flowed; Original
| >| Message-ID: <eUzy8D9DFHA.936@.TK2MSFTNGP12.phx.gbl>
| >| Newsgroups: microsoft.public.sqlserver.connect
| >| NNTP-Posting-Host: pcp08367474pcs.lndsd201.pa.comcast.net 68.42.29.253
| >| Path:
|
>TK2MSFTNGXA01.phx.gbl!cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP1
2
| >phx.gbl
| >| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.sqlserver.connect:3409
| >| X-Tomcat-NG: microsoft.public.sqlserver.connect
| >|
| >| Thank you, Sue. Your suggestion seems to be the way to go.
| >|
| >| I have noticed that when I try to log in using Windows
Authentication
| >to
| >| a Windows 2000 machine from my XP machine, it tries to log me in as
| >| "Server\Administrator" and, of course, fails. My account is part of
the
| >| Administrator's group. However, the other way around (from Win 2000 to
| >XP)
| >| works fine.
| >|
| >| Is there a limitation in Windows 2000 too?
| >|
| >| Thanks again,
| >| Maer
| >|
| >|
| >|
| >| "Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
| >| news:gg8001d3s2nhf3kjd1i61srhmh5264arvc@.
4ax.com...
| >| > Hi Maer,
| >| > You can enable the guest account but that's a security risk
| >| > - especially if exposed to the outside world. For SQL
| >| > Server, although Windows Authentication is more secure than
| >| > SQL Authentication, I'd probably use that option instead of
| >| > enabling the guest account. Make sure to turn on security
| >| > audits, limit the number of SQL logins and make sure all SQL
| >| > logins have strong passwords - mixed case, alpha numeric
| >| > with special characters, no known words, etc.
| >| >
| >| > -Sue
| >| >
| >| > On Tue, 1 Feb 2005 18:44:54 -0500, "Maer"
| >| > <maer@.auditleverage.com> wrote:
| >| >
| >| >> Thank you, Sue!
| >| >>
| >| >> That clarifies so much! Would I be right in assuming that using
| >| >> windows
| >| >>authentication is not an option when logging in remotely to Xp Home
| >since
| >| >>it
| >| >>always uses Guest? Is there a work-around?
| >| >>
| >| >> Maer
| >| >>
| >| >>
| >| >>"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
| >| >> news:k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.
4ax.com...
| >| >>> With XP home, authentication is done using the guest account
| >| >>> as simple file sharing is always enabled on XP Home. Refer
| >| >>> to the following for more info:
| >| >>> SQL Server clients are authenticated as guests if Simple
| >| >>> File Sharing is enabled
| >| >>> http://support.microsoft.com/?id=831133
| >| >>>
| >| >>> -Sue
| >| >>>
| >| >>> On Tue, 1 Feb 2005 15:42:45 -0500, "Maer"
| >| >>> <maer@.auditleverage.com> wrote:
| >| >>>
| >| >>>> Hi - I have two computers, one running Xp Pro and one Xp Home.
I
| >| >>>> created
| >| >>>>a windows user account on both machines with the same password. I
| >added
| >| >>>>those accounts to SQL Server on both machines and I want to be
able to
| >| >>>>connect to each other using a trusted connection.
| >| >>>>
| >| >>>> If I try to remotely connect to the Xp Pro machine from the
Home
| >| >>>> machine
| >| >>>>using windows authentication, everything works fine. But, if I try
to
| >| >>>>remotely connect to the Home machine it says that login failed for
| >| >>>>Server\Guest. My understanding is that it tries to log in as guest
if
| >| >>>>the
| >| >>>>windows account is not found.
| >| >>>>
| >| >>>> Why does it work on one computer but not the other? Is it
because
| >it
| >| >>>> is
| >| >>>>Home edition? Is there something else I need to do?
| >| >>>>
| >| >>>> BTW, standard authentication works fine on both machines and
the
| >| >>>> Guest
| >| >>>>account is turned off.
| >| >>>>
| >| >>>> Thanks,
| >| >>>> Maer
| >| >>>>
| >| >>>
| >| >>
| >| >
| >|
| >|
| >|
|
||||No problem...I just didn't want the poster or anyone
following to get confused! As I posted back, the issue hit
the second time around would be different as the login
failed for Administrator not guest. Even though it wasn't
explained which version of XP was used on the second case,
it would likely have been XP Pro without simple file sharing
enabled and consequently more likely related to security
settings.
-Sue
On Tue, 15 Feb 2005 04:13:27 GMT,
petery@.online.microsoft.com (Peter Yang [MSFT]) wrote:
>Hello Sue,
>I agree with you that WinXP home has this issue because of simple file
>sharing. I mean that it is not a limitation in Win2000. It shall work the
>same as WinXP pro based on my test. Sorry for the confustion brought. :-)
>Best Regards,
>Peter Yang
>MCSE2000/2003, MCSA, MCDBA
>Microsoft Online Partner Support
>When responding to posts, please "Reply to Group" via your newsreader so
>that others may learn and benefit from your issue.
> ========================================
=============
>This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
>--
>| From: Sue Hoegemeier <Sue_H@.nomail.please>
>| Subject: Re: Login failed for Server\Guest
>| Date: Mon, 14 Feb 2005 07:44:48 -0700
>| Message-ID: <c6e111poj51vkc5a37vs1kjbq92c46f2g6@.4ax.com>
>| References: <esy#R5JCFHA.3592@.TK2MSFTNGP11.phx.gbl>
><k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.4ax.com>
><#5wLGfLCFHA.1296@.TK2MSFTNGP10.phx.gbl>
><gg8001d3s2nhf3kjd1i61srhmh5264arvc@.4ax.com>
><eUzy8D9DFHA.936@.TK2MSFTNGP12.phx.gbl>
><pgtqGQmEFHA.3900@.TK2MSFTNGXA01.phx.gbl>
>| X-Newsreader: Forte Agent 2.0/32.652
>| MIME-Version: 1.0
>| Content-Type: text/plain; charset=us-ascii
>| Content-Transfer-Encoding: 7bit
>| Newsgroups: microsoft.public.sqlserver.connect
>| NNTP-Posting-Host: 0-2pool82-42.nas33.thornton1.co.us.da.qwest.net
>67.4.82.42
>| Lines: 1
>| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
>| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.sqlserver.connect:3422
>| X-Tomcat-NG: microsoft.public.sqlserver.connect
>|
>| Peter,
>| Not necessarily. In your testing, I would guess you are
>| using XP Pro and do not have simple file sharing enabled.
>| There are scenarios with XP where you are authenticated as
>| guest and the use of the same account/password does not
>| work. Refer to the following knowledge base article:
>| SQL Server clients are authenticated as guests if Simple
>| File Sharing is enabled
>| http://support.microsoft.com/?id=831133
>|
>| -Sue
>|
>| On Mon, 14 Feb 2005 07:08:38 GMT,
>| petery@.online.microsoft.com (Peter Yang [MSFT]) wrote:
>|
>| >Hello Maer,
>| >
>| >I think it is not a limitation in Windows 2000. Based on my test, I
>could
>| >access SQL server on Win2000 server by using Windows authenctication if
>I
>| >use same password for Administrator account on both Win2000 and WinXP
>| >computers. I suggest that you check security policy settings on both
>| >computers to see if they match:
>| >
>| >1. Run gpedit.msc
>| >
>| >2. Check Computer configuration->Windows settings->Security
>Settings->Local
>| >Policies->Security Options and make sure the following settings:
>| >
>| >Digitally sign client communication (always) Not defined
>| >
>| >Digitally sign client communication (when possible) Not defined
>| >
>| >Digitally sign server communication (always) Not defined
>| >
>| >Digitally sign server communication (when possible) Not defined
>| >
>| >LAN Manager Authentication Level Not defined
>| >
>| >Secure channel: Digitally encrypt or sign secure channel data (always)
>Not
>| >defined
>| >
>| >Secure channel: Digitally encrypt secure channel data (when possible)
>Not
>| >defined
>| >
>| >Secure channel: Digitally sign secure channel data (when possible) Not
>| >defined
>| >
>| >Secure channel: Require strong (Windows 2000 or later) session key Not
>| >defined
>| >
>| >3. Check Computer configuration->Windows settings->Security
>Settings->Local
>| >Policies->User Rights assigment, and make sure Deny access this computer
>| >from network is not configured.
>| >
>| >Thanks & Regards,
>| >
>| >Peter Yang
>| >MCSE2000/2003, MCSA, MCDBA
>| >Microsoft Online Partner Support
>| >
>| >When responding to posts, please "Reply to Group" via your newsreader so
>| >that others may learn and benefit from your issue.
>| >
>| > ========================================
=============
>| >
>| >This posting is provided "AS IS" with no warranties, and confers no
>rights.
>| >
>| >
>| >
>| >
>| >--
>| >| From: "Maer" <maer@.auditleverage.com>
>| >| References: <esy#R5JCFHA.3592@.TK2MSFTNGP11.phx.gbl>
>| ><k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.4ax.com>
>| ><#5wLGfLCFHA.1296@.TK2MSFTNGP10.phx.gbl>
>| ><gg8001d3s2nhf3kjd1i61srhmh5264arvc@.4ax.com>
>| >| Subject: Re: Login failed for Server\Guest
>| >| Date: Thu, 10 Feb 2005 19:33:17 -0500
>| >| Lines: 87
>| >| X-Priority: 3
>| >| X-MSMail-Priority: Normal
>| >| X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>| >| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>| >| X-RFC2646: Format=Flowed; Original
>| >| Message-ID: <eUzy8D9DFHA.936@.TK2MSFTNGP12.phx.gbl>
>| >| Newsgroups: microsoft.public.sqlserver.connect
>| >| NNTP-Posting-Host: pcp08367474pcs.lndsd201.pa.comcast.net 68.42.29.253
>| >| Path:
>|
>2
>| >phx.gbl
>| >| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.sqlserver.connect:3409
>| >| X-Tomcat-NG: microsoft.public.sqlserver.connect
>| >|
>| >| Thank you, Sue. Your suggestion seems to be the way to go.
>| >|
>| >| I have noticed that when I try to log in using Windows
>Authentication
>| >to
>| >| a Windows 2000 machine from my XP machine, it tries to log me in as
>| >| "Server\Administrator" and, of course, fails. My account is part of
>the
>| >| Administrator's group. However, the other way around (from Win 2000 to
>| >XP)
>| >| works fine.
>| >|
>| >| Is there a limitation in Windows 2000 too?
>| >|
>| >| Thanks again,
>| >| Maer
>| >|
>| >|
>| >|
>| >| "Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
>| >| news:gg8001d3s2nhf3kjd1i61srhmh5264arvc@.
4ax.com...
>| >| > Hi Maer,
>| >| > You can enable the guest account but that's a security risk
>| >| > - especially if exposed to the outside world. For SQL
>| >| > Server, although Windows Authentication is more secure than
>| >| > SQL Authentication, I'd probably use that option instead of
>| >| > enabling the guest account. Make sure to turn on security
>| >| > audits, limit the number of SQL logins and make sure all SQL
>| >| > logins have strong passwords - mixed case, alpha numeric
>| >| > with special characters, no known words, etc.
>| >| >
>| >| > -Sue
>| >| >
>| >| > On Tue, 1 Feb 2005 18:44:54 -0500, "Maer"
>| >| > <maer@.auditleverage.com> wrote:
>| >| >
>| >| >> Thank you, Sue!
>| >| >>
>| >| >> That clarifies so much! Would I be right in assuming that using
>| >| >> windows
>| >| >>authentication is not an option when logging in remotely to Xp Home
>| >since
>| >| >>it
>| >| >>always uses Guest? Is there a work-around?
>| >| >>
>| >| >> Maer
>| >| >>
>| >| >>
>| >| >>"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
>| >| >> news:k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.
4ax.com...
>| >| >>> With XP home, authentication is done using the guest account
>| >| >>> as simple file sharing is always enabled on XP Home. Refer
>| >| >>> to the following for more info:
>| >| >>> SQL Server clients are authenticated as guests if Simple
>| >| >>> File Sharing is enabled
>| >| >>> http://support.microsoft.com/?id=831133
>| >| >>>
>| >| >>> -Sue
>| >| >>>
>| >| >>> On Tue, 1 Feb 2005 15:42:45 -0500, "Maer"
>| >| >>> <maer@.auditleverage.com> wrote:
>| >| >>>
>| >| >>>> Hi - I have two computers, one running Xp Pro and one Xp Home.
>I
>| >| >>>> created
>| >| >>>>a windows user account on both machines with the same password. I
>| >added
>| >| >>>>those accounts to SQL Server on both machines and I want to be
>able to
>| >| >>>>connect to each other using a trusted connection.
>| >| >>>>
>| >| >>>> If I try to remotely connect to the Xp Pro machine from the
>Home
>| >| >>>> machine
>| >| >>>>using windows authentication, everything works fine. But, if I try
>to
>| >| >>>>remotely connect to the Home machine it says that login failed for
>| >| >>>>Server\Guest. My understanding is that it tries to log in as guest
>if
>| >| >>>>the
>| >| >>>>windows account is not found.
>| >| >>>>
>| >| >>>> Why does it work on one computer but not the other? Is it
>because
>| >it
>| >| >>>> is
>| >| >>>>Home edition? Is there something else I need to do?
>| >| >>>>
>| >| >>>> BTW, standard authentication works fine on both machines and
>the
>| >| >>>> Guest
>| >| >>>>account is turned off.
>| >| >>>>
>| >| >>>> Thanks,
>| >| >>>> Maer
>| >| >>>>
>| >| >>>
>| >| >>
>| >| >
>| >|
>| >|
>| >|
>|
>|sql
a windows user account on both machines with the same password. I added
those accounts to SQL Server on both machines and I want to be able to
connect to each other using a trusted connection.
If I try to remotely connect to the Xp Pro machine from the Home machine
using windows authentication, everything works fine. But, if I try to
remotely connect to the Home machine it says that login failed for
Server\Guest. My understanding is that it tries to log in as guest if the
windows account is not found.
Why does it work on one computer but not the other? Is it because it is
Home edition? Is there something else I need to do?
BTW, standard authentication works fine on both machines and the Guest
account is turned off.
Thanks,
MaerWith XP home, authentication is done using the guest account
as simple file sharing is always enabled on XP Home. Refer
to the following for more info:
SQL Server clients are authenticated as guests if Simple
File Sharing is enabled
http://support.microsoft.com/?id=831133
-Sue
On Tue, 1 Feb 2005 15:42:45 -0500, "Maer"
<maer@.auditleverage.com> wrote:
> Hi - I have two computers, one running Xp Pro and one Xp Home. I create
d
>a windows user account on both machines with the same password. I added
>those accounts to SQL Server on both machines and I want to be able to
>connect to each other using a trusted connection.
> If I try to remotely connect to the Xp Pro machine from the Home machin
e
>using windows authentication, everything works fine. But, if I try to
>remotely connect to the Home machine it says that login failed for
>Server\Guest. My understanding is that it tries to log in as guest if the
>windows account is not found.
> Why does it work on one computer but not the other? Is it because it is
>Home edition? Is there something else I need to do?
> BTW, standard authentication works fine on both machines and the Guest
>account is turned off.
> Thanks,
> Maer
>|||Thank you, Sue!
That clarifies so much! Would I be right in assuming that using windows
authentication is not an option when logging in remotely to Xp Home since it
always uses Guest? Is there a work-around?
Maer
"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
news:k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.
4ax.com...
> With XP home, authentication is done using the guest account
> as simple file sharing is always enabled on XP Home. Refer
> to the following for more info:
> SQL Server clients are authenticated as guests if Simple
> File Sharing is enabled
> http://support.microsoft.com/?id=831133
> -Sue
> On Tue, 1 Feb 2005 15:42:45 -0500, "Maer"
> <maer@.auditleverage.com> wrote:
>
>|||Hi Maer,
You can enable the guest account but that's a security risk
- especially if exposed to the outside world. For SQL
Server, although Windows Authentication is more secure than
SQL Authentication, I'd probably use that option instead of
enabling the guest account. Make sure to turn on security
audits, limit the number of SQL logins and make sure all SQL
logins have strong passwords - mixed case, alpha numeric
with special characters, no known words, etc.
-Sue
On Tue, 1 Feb 2005 18:44:54 -0500, "Maer"
<maer@.auditleverage.com> wrote:
> Thank you, Sue!
> That clarifies so much! Would I be right in assuming that using windows
>authentication is not an option when logging in remotely to Xp Home since i
t
>always uses Guest? Is there a work-around?
> Maer
>
>"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
> news:k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.
4ax.com...
>|||Thank you, Sue. Your suggestion seems to be the way to go.
I have noticed that when I try to log in using Windows Authentication to
a Windows 2000 machine from my XP machine, it tries to log me in as
"Server\Administrator" and, of course, fails. My account is part of the
Administrator's group. However, the other way around (from Win 2000 to XP)
works fine.
Is there a limitation in Windows 2000 too?
Thanks again,
Maer
"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
news:gg8001d3s2nhf3kjd1i61srhmh5264arvc@.
4ax.com...
> Hi Maer,
> You can enable the guest account but that's a security risk
> - especially if exposed to the outside world. For SQL
> Server, although Windows Authentication is more secure than
> SQL Authentication, I'd probably use that option instead of
> enabling the guest account. Make sure to turn on security
> audits, limit the number of SQL logins and make sure all SQL
> logins have strong passwords - mixed case, alpha numeric
> with special characters, no known words, etc.
> -Sue
> On Tue, 1 Feb 2005 18:44:54 -0500, "Maer"
> <maer@.auditleverage.com> wrote:
>
>|||Hello Maer,
I think it is not a limitation in Windows 2000. Based on my test, I could
access SQL server on Win2000 server by using Windows authenctication if I
use same password for Administrator account on both Win2000 and WinXP
computers. I suggest that you check security policy settings on both
computers to see if they match:
1. Run gpedit.msc
2. Check Computer configuration->Windows settings->Security Settings->Local
Policies->Security Options and make sure the following settings:
Digitally sign client communication (always) Not defined
Digitally sign client communication (when possible) Not defined
Digitally sign server communication (always) Not defined
Digitally sign server communication (when possible) Not defined
LAN Manager Authentication Level Not defined
Secure channel: Digitally encrypt or sign secure channel data (always) Not
defined
Secure channel: Digitally encrypt secure channel data (when possible) Not
defined
Secure channel: Digitally sign secure channel data (when possible) Not
defined
Secure channel: Require strong (Windows 2000 or later) session key Not
defined
3. Check Computer configuration->Windows settings->Security Settings->Local
Policies->User Rights assigment, and make sure Deny access this computer
from network is not configured.
Thanks & Regards,
Peter Yang
MCSE2000/2003, MCSA, MCDBA
Microsoft Online Partner Support
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
========================================
=============
This posting is provided "AS IS" with no warranties, and confers no rights.
| From: "Maer" <maer@.auditleverage.com>
| References: <esy#R5JCFHA.3592@.TK2MSFTNGP11.phx.gbl>
<k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.4ax.com>
<#5wLGfLCFHA.1296@.TK2MSFTNGP10.phx.gbl>
<gg8001d3s2nhf3kjd1i61srhmh5264arvc@.4ax.com>
| Subject: Re: Login failed for Server\Guest
| Date: Thu, 10 Feb 2005 19:33:17 -0500
| Lines: 87
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
| X-RFC2646: Format=Flowed; Original
| Message-ID: <eUzy8D9DFHA.936@.TK2MSFTNGP12.phx.gbl>
| Newsgroups: microsoft.public.sqlserver.connect
| NNTP-Posting-Host: pcp08367474pcs.lndsd201.pa.comcast.net 68.42.29.253
| Path:
TK2MSFTNGXA01.phx.gbl!cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP12
.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.sqlserver.connect:3409
| X-Tomcat-NG: microsoft.public.sqlserver.connect
|
| Thank you, Sue. Your suggestion seems to be the way to go.
|
| I have noticed that when I try to log in using Windows Authentication
to
| a Windows 2000 machine from my XP machine, it tries to log me in as
| "Server\Administrator" and, of course, fails. My account is part of the
| Administrator's group. However, the other way around (from Win 2000 to
XP)
| works fine.
|
| Is there a limitation in Windows 2000 too?
|
| Thanks again,
| Maer
|
|
|
| "Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
| news:gg8001d3s2nhf3kjd1i61srhmh5264arvc@.
4ax.com...
| > Hi Maer,
| > You can enable the guest account but that's a security risk
| > - especially if exposed to the outside world. For SQL
| > Server, although Windows Authentication is more secure than
| > SQL Authentication, I'd probably use that option instead of
| > enabling the guest account. Make sure to turn on security
| > audits, limit the number of SQL logins and make sure all SQL
| > logins have strong passwords - mixed case, alpha numeric
| > with special characters, no known words, etc.
| >
| > -Sue
| >
| > On Tue, 1 Feb 2005 18:44:54 -0500, "Maer"
| > <maer@.auditleverage.com> wrote:
| >
| >> Thank you, Sue!
| >>
| >> That clarifies so much! Would I be right in assuming that using
| >> windows
| >>authentication is not an option when logging in remotely to Xp Home
since
| >>it
| >>always uses Guest? Is there a work-around?
| >>
| >> Maer
| >>
| >>
| >>"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
| >> news:k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.
4ax.com...
| >>> With XP home, authentication is done using the guest account
| >>> as simple file sharing is always enabled on XP Home. Refer
| >>> to the following for more info:
| >>> SQL Server clients are authenticated as guests if Simple
| >>> File Sharing is enabled
| >>> http://support.microsoft.com/?id=831133
| >>>
| >>> -Sue
| >>>
| >>> On Tue, 1 Feb 2005 15:42:45 -0500, "Maer"
| >>> <maer@.auditleverage.com> wrote:
| >>>
| >>>> Hi - I have two computers, one running Xp Pro and one Xp Home. I
| >>>> created
| >>>>a windows user account on both machines with the same password. I
added
| >>>>those accounts to SQL Server on both machines and I want to be able to
| >>>>connect to each other using a trusted connection.
| >>>>
| >>>> If I try to remotely connect to the Xp Pro machine from the Home
| >>>> machine
| >>>>using windows authentication, everything works fine. But, if I try to
| >>>>remotely connect to the Home machine it says that login failed for
| >>>>Server\Guest. My understanding is that it tries to log in as guest if
| >>>>the
| >>>>windows account is not found.
| >>>>
| >>>> Why does it work on one computer but not the other? Is it because
it
| >>>> is
| >>>>Home edition? Is there something else I need to do?
| >>>>
| >>>> BTW, standard authentication works fine on both machines and the
| >>>> Guest
| >>>>account is turned off.
| >>>>
| >>>> Thanks,
| >>>> Maer
| >>>>
| >>>
| >>
| >
|
|
||||Peter,
Not necessarily. In your testing, I would guess you are
using XP Pro and do not have simple file sharing enabled.
There are scenarios with XP where you are authenticated as
guest and the use of the same account/password does not
work. Refer to the following knowledge base article:
SQL Server clients are authenticated as guests if Simple
File Sharing is enabled
http://support.microsoft.com/?id=831133
-Sue
On Mon, 14 Feb 2005 07:08:38 GMT,
petery@.online.microsoft.com (Peter Yang [MSFT]) wrote:
>Hello Maer,
>I think it is not a limitation in Windows 2000. Based on my test, I could
>access SQL server on Win2000 server by using Windows authenctication if I
>use same password for Administrator account on both Win2000 and WinXP
>computers. I suggest that you check security policy settings on both
>computers to see if they match:
>1. Run gpedit.msc
>2. Check Computer configuration->Windows settings->Security Settings->Local
>Policies->Security Options and make sure the following settings:
>Digitally sign client communication (always) Not defined
>Digitally sign client communication (when possible) Not defined
>Digitally sign server communication (always) Not defined
>Digitally sign server communication (when possible) Not defined
>LAN Manager Authentication Level Not defined
>Secure channel: Digitally encrypt or sign secure channel data (always) Not
>defined
>Secure channel: Digitally encrypt secure channel data (when possible) Not
>defined
>Secure channel: Digitally sign secure channel data (when possible) Not
>defined
>Secure channel: Require strong (Windows 2000 or later) session key Not
>defined
>3. Check Computer configuration->Windows settings->Security Settings->Local
>Policies->User Rights assigment, and make sure Deny access this computer
>from network is not configured.
>Thanks & Regards,
>Peter Yang
>MCSE2000/2003, MCSA, MCDBA
>Microsoft Online Partner Support
>When responding to posts, please "Reply to Group" via your newsreader so
>that others may learn and benefit from your issue.
> ========================================
=============
>This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
>--
>| From: "Maer" <maer@.auditleverage.com>
>| References: <esy#R5JCFHA.3592@.TK2MSFTNGP11.phx.gbl>
><k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.4ax.com>
><#5wLGfLCFHA.1296@.TK2MSFTNGP10.phx.gbl>
><gg8001d3s2nhf3kjd1i61srhmh5264arvc@.4ax.com>
>| Subject: Re: Login failed for Server\Guest
>| Date: Thu, 10 Feb 2005 19:33:17 -0500
>| Lines: 87
>| X-Priority: 3
>| X-MSMail-Priority: Normal
>| X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>| X-RFC2646: Format=Flowed; Original
>| Message-ID: <eUzy8D9DFHA.936@.TK2MSFTNGP12.phx.gbl>
>| Newsgroups: microsoft.public.sqlserver.connect
>| NNTP-Posting-Host: pcp08367474pcs.lndsd201.pa.comcast.net 68.42.29.253
>| Path:
>TK2MSFTNGXA01.phx.gbl!cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP1
2
>phx.gbl
>| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.sqlserver.connect:3409
>| X-Tomcat-NG: microsoft.public.sqlserver.connect
>|
>| Thank you, Sue. Your suggestion seems to be the way to go.
>|
>| I have noticed that when I try to log in using Windows Authentication
>to
>| a Windows 2000 machine from my XP machine, it tries to log me in as
>| "Server\Administrator" and, of course, fails. My account is part of the
>| Administrator's group. However, the other way around (from Win 2000 to
>XP)
>| works fine.
>|
>| Is there a limitation in Windows 2000 too?
>|
>| Thanks again,
>| Maer
>|
>|
>|
>| "Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
>| news:gg8001d3s2nhf3kjd1i61srhmh5264arvc@.
4ax.com...
>| > Hi Maer,
>| > You can enable the guest account but that's a security risk
>| > - especially if exposed to the outside world. For SQL
>| > Server, although Windows Authentication is more secure than
>| > SQL Authentication, I'd probably use that option instead of
>| > enabling the guest account. Make sure to turn on security
>| > audits, limit the number of SQL logins and make sure all SQL
>| > logins have strong passwords - mixed case, alpha numeric
>| > with special characters, no known words, etc.
>| >
>| > -Sue
>| >
>| > On Tue, 1 Feb 2005 18:44:54 -0500, "Maer"
>| > <maer@.auditleverage.com> wrote:
>| >
>| >> Thank you, Sue!
>| >>
>| >> That clarifies so much! Would I be right in assuming that using
>| >> windows
>| >>authentication is not an option when logging in remotely to Xp Home
>since
>| >>it
>| >>always uses Guest? Is there a work-around?
>| >>
>| >> Maer
>| >>
>| >>
>| >>"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
>| >> news:k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.
4ax.com...
>| >>> With XP home, authentication is done using the guest account
>| >>> as simple file sharing is always enabled on XP Home. Refer
>| >>> to the following for more info:
>| >>> SQL Server clients are authenticated as guests if Simple
>| >>> File Sharing is enabled
>| >>> http://support.microsoft.com/?id=831133
>| >>>
>| >>> -Sue
>| >>>
>| >>> On Tue, 1 Feb 2005 15:42:45 -0500, "Maer"
>| >>> <maer@.auditleverage.com> wrote:
>| >>>
>| >>>> Hi - I have two computers, one running Xp Pro and one Xp Home. I
>| >>>> created
>| >>>>a windows user account on both machines with the same password. I
>added
>| >>>>those accounts to SQL Server on both machines and I want to be able t
o
>| >>>>connect to each other using a trusted connection.
>| >>>>
>| >>>> If I try to remotely connect to the Xp Pro machine from the Home
>| >>>> machine
>| >>>>using windows authentication, everything works fine. But, if I try to
>| >>>>remotely connect to the Home machine it says that login failed for
>| >>>>Server\Guest. My understanding is that it tries to log in as guest if
>| >>>>the
>| >>>>windows account is not found.
>| >>>>
>| >>>> Why does it work on one computer but not the other? Is it because
>it
>| >>>> is
>| >>>>Home edition? Is there something else I need to do?
>| >>>>
>| >>>> BTW, standard authentication works fine on both machines and the
>| >>>> Guest
>| >>>>account is turned off.
>| >>>>
>| >>>> Thanks,
>| >>>> Maer
>| >>>>
>| >>>
>| >>
>| >
>|
>|
>||||Not in terms of the same type of thing with the guest
account.When it's a specific account failing, that's a
different matter than attempted authentication via the guest
account.
-Sue
On Thu, 10 Feb 2005 19:33:17 -0500, "Maer"
<maer@.auditleverage.com> wrote:
> Thank you, Sue. Your suggestion seems to be the way to go.
> I have noticed that when I try to log in using Windows Authentication t
o
>a Windows 2000 machine from my XP machine, it tries to log me in as
>"Server\Administrator" and, of course, fails. My account is part of the
>Administrator's group. However, the other way around (from Win 2000 to XP)
>works fine.
> Is there a limitation in Windows 2000 too?
> Thanks again,
> Maer
>
>"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
> news:gg8001d3s2nhf3kjd1i61srhmh5264arvc@.
4ax.com...
>|||Hello Sue,
I agree with you that WinXP home has this issue because of simple file
sharing. I mean that it is not a limitation in Win2000. It shall work the
same as WinXP pro based on my test. Sorry for the confustion brought. :-)
Best Regards,
Peter Yang
MCSE2000/2003, MCSA, MCDBA
Microsoft Online Partner Support
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
========================================
=============
This posting is provided "AS IS" with no warranties, and confers no rights.
| From: Sue Hoegemeier <Sue_H@.nomail.please>
| Subject: Re: Login failed for Server\Guest
| Date: Mon, 14 Feb 2005 07:44:48 -0700
| Message-ID: <c6e111poj51vkc5a37vs1kjbq92c46f2g6@.4ax.com>
| References: <esy#R5JCFHA.3592@.TK2MSFTNGP11.phx.gbl>
<k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.4ax.com>
<#5wLGfLCFHA.1296@.TK2MSFTNGP10.phx.gbl>
<gg8001d3s2nhf3kjd1i61srhmh5264arvc@.4ax.com>
<eUzy8D9DFHA.936@.TK2MSFTNGP12.phx.gbl>
<pgtqGQmEFHA.3900@.TK2MSFTNGXA01.phx.gbl>
| X-Newsreader: Forte Agent 2.0/32.652
| MIME-Version: 1.0
| Content-Type: text/plain; charset=us-ascii
| Content-Transfer-Encoding: 7bit
| Newsgroups: microsoft.public.sqlserver.connect
| NNTP-Posting-Host: 0-2pool82-42.nas33.thornton1.co.us.da.qwest.net
67.4.82.42
| Lines: 1
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.sqlserver.connect:3422
| X-Tomcat-NG: microsoft.public.sqlserver.connect
|
| Peter,
| Not necessarily. In your testing, I would guess you are
| using XP Pro and do not have simple file sharing enabled.
| There are scenarios with XP where you are authenticated as
| guest and the use of the same account/password does not
| work. Refer to the following knowledge base article:
| SQL Server clients are authenticated as guests if Simple
| File Sharing is enabled
| http://support.microsoft.com/?id=831133
|
| -Sue
|
| On Mon, 14 Feb 2005 07:08:38 GMT,
| petery@.online.microsoft.com (Peter Yang [MSFT]) wrote:
|
| >Hello Maer,
| >
| >I think it is not a limitation in Windows 2000. Based on my test, I
could
| >access SQL server on Win2000 server by using Windows authenctication if
I
| >use same password for Administrator account on both Win2000 and WinXP
| >computers. I suggest that you check security policy settings on both
| >computers to see if they match:
| >
| >1. Run gpedit.msc
| >
| >2. Check Computer configuration->Windows settings->Security
Settings->Local
| >Policies->Security Options and make sure the following settings:
| >
| >Digitally sign client communication (always) Not defined
| >
| >Digitally sign client communication (when possible) Not defined
| >
| >Digitally sign server communication (always) Not defined
| >
| >Digitally sign server communication (when possible) Not defined
| >
| >LAN Manager Authentication Level Not defined
| >
| >Secure channel: Digitally encrypt or sign secure channel data (always)
Not
| >defined
| >
| >Secure channel: Digitally encrypt secure channel data (when possible)
Not
| >defined
| >
| >Secure channel: Digitally sign secure channel data (when possible) Not
| >defined
| >
| >Secure channel: Require strong (Windows 2000 or later) session key Not
| >defined
| >
| >3. Check Computer configuration->Windows settings->Security
Settings->Local
| >Policies->User Rights assigment, and make sure Deny access this computer
| >from network is not configured.
| >
| >Thanks & Regards,
| >
| >Peter Yang
| >MCSE2000/2003, MCSA, MCDBA
| >Microsoft Online Partner Support
| >
| >When responding to posts, please "Reply to Group" via your newsreader so
| >that others may learn and benefit from your issue.
| >
| > ========================================
=============
| >
| >This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| >
| >
| >
| >--
| >| From: "Maer" <maer@.auditleverage.com>
| >| References: <esy#R5JCFHA.3592@.TK2MSFTNGP11.phx.gbl>
| ><k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.4ax.com>
| ><#5wLGfLCFHA.1296@.TK2MSFTNGP10.phx.gbl>
| ><gg8001d3s2nhf3kjd1i61srhmh5264arvc@.4ax.com>
| >| Subject: Re: Login failed for Server\Guest
| >| Date: Thu, 10 Feb 2005 19:33:17 -0500
| >| Lines: 87
| >| X-Priority: 3
| >| X-MSMail-Priority: Normal
| >| X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
| >| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
| >| X-RFC2646: Format=Flowed; Original
| >| Message-ID: <eUzy8D9DFHA.936@.TK2MSFTNGP12.phx.gbl>
| >| Newsgroups: microsoft.public.sqlserver.connect
| >| NNTP-Posting-Host: pcp08367474pcs.lndsd201.pa.comcast.net 68.42.29.253
| >| Path:
|
>TK2MSFTNGXA01.phx.gbl!cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP1
2
| >phx.gbl
| >| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.sqlserver.connect:3409
| >| X-Tomcat-NG: microsoft.public.sqlserver.connect
| >|
| >| Thank you, Sue. Your suggestion seems to be the way to go.
| >|
| >| I have noticed that when I try to log in using Windows
Authentication
| >to
| >| a Windows 2000 machine from my XP machine, it tries to log me in as
| >| "Server\Administrator" and, of course, fails. My account is part of
the
| >| Administrator's group. However, the other way around (from Win 2000 to
| >XP)
| >| works fine.
| >|
| >| Is there a limitation in Windows 2000 too?
| >|
| >| Thanks again,
| >| Maer
| >|
| >|
| >|
| >| "Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
| >| news:gg8001d3s2nhf3kjd1i61srhmh5264arvc@.
4ax.com...
| >| > Hi Maer,
| >| > You can enable the guest account but that's a security risk
| >| > - especially if exposed to the outside world. For SQL
| >| > Server, although Windows Authentication is more secure than
| >| > SQL Authentication, I'd probably use that option instead of
| >| > enabling the guest account. Make sure to turn on security
| >| > audits, limit the number of SQL logins and make sure all SQL
| >| > logins have strong passwords - mixed case, alpha numeric
| >| > with special characters, no known words, etc.
| >| >
| >| > -Sue
| >| >
| >| > On Tue, 1 Feb 2005 18:44:54 -0500, "Maer"
| >| > <maer@.auditleverage.com> wrote:
| >| >
| >| >> Thank you, Sue!
| >| >>
| >| >> That clarifies so much! Would I be right in assuming that using
| >| >> windows
| >| >>authentication is not an option when logging in remotely to Xp Home
| >since
| >| >>it
| >| >>always uses Guest? Is there a work-around?
| >| >>
| >| >> Maer
| >| >>
| >| >>
| >| >>"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
| >| >> news:k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.
4ax.com...
| >| >>> With XP home, authentication is done using the guest account
| >| >>> as simple file sharing is always enabled on XP Home. Refer
| >| >>> to the following for more info:
| >| >>> SQL Server clients are authenticated as guests if Simple
| >| >>> File Sharing is enabled
| >| >>> http://support.microsoft.com/?id=831133
| >| >>>
| >| >>> -Sue
| >| >>>
| >| >>> On Tue, 1 Feb 2005 15:42:45 -0500, "Maer"
| >| >>> <maer@.auditleverage.com> wrote:
| >| >>>
| >| >>>> Hi - I have two computers, one running Xp Pro and one Xp Home.
I
| >| >>>> created
| >| >>>>a windows user account on both machines with the same password. I
| >added
| >| >>>>those accounts to SQL Server on both machines and I want to be
able to
| >| >>>>connect to each other using a trusted connection.
| >| >>>>
| >| >>>> If I try to remotely connect to the Xp Pro machine from the
Home
| >| >>>> machine
| >| >>>>using windows authentication, everything works fine. But, if I try
to
| >| >>>>remotely connect to the Home machine it says that login failed for
| >| >>>>Server\Guest. My understanding is that it tries to log in as guest
if
| >| >>>>the
| >| >>>>windows account is not found.
| >| >>>>
| >| >>>> Why does it work on one computer but not the other? Is it
because
| >it
| >| >>>> is
| >| >>>>Home edition? Is there something else I need to do?
| >| >>>>
| >| >>>> BTW, standard authentication works fine on both machines and
the
| >| >>>> Guest
| >| >>>>account is turned off.
| >| >>>>
| >| >>>> Thanks,
| >| >>>> Maer
| >| >>>>
| >| >>>
| >| >>
| >| >
| >|
| >|
| >|
|
||||No problem...I just didn't want the poster or anyone
following to get confused! As I posted back, the issue hit
the second time around would be different as the login
failed for Administrator not guest. Even though it wasn't
explained which version of XP was used on the second case,
it would likely have been XP Pro without simple file sharing
enabled and consequently more likely related to security
settings.
-Sue
On Tue, 15 Feb 2005 04:13:27 GMT,
petery@.online.microsoft.com (Peter Yang [MSFT]) wrote:
>Hello Sue,
>I agree with you that WinXP home has this issue because of simple file
>sharing. I mean that it is not a limitation in Win2000. It shall work the
>same as WinXP pro based on my test. Sorry for the confustion brought. :-)
>Best Regards,
>Peter Yang
>MCSE2000/2003, MCSA, MCDBA
>Microsoft Online Partner Support
>When responding to posts, please "Reply to Group" via your newsreader so
>that others may learn and benefit from your issue.
> ========================================
=============
>This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
>--
>| From: Sue Hoegemeier <Sue_H@.nomail.please>
>| Subject: Re: Login failed for Server\Guest
>| Date: Mon, 14 Feb 2005 07:44:48 -0700
>| Message-ID: <c6e111poj51vkc5a37vs1kjbq92c46f2g6@.4ax.com>
>| References: <esy#R5JCFHA.3592@.TK2MSFTNGP11.phx.gbl>
><k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.4ax.com>
><#5wLGfLCFHA.1296@.TK2MSFTNGP10.phx.gbl>
><gg8001d3s2nhf3kjd1i61srhmh5264arvc@.4ax.com>
><eUzy8D9DFHA.936@.TK2MSFTNGP12.phx.gbl>
><pgtqGQmEFHA.3900@.TK2MSFTNGXA01.phx.gbl>
>| X-Newsreader: Forte Agent 2.0/32.652
>| MIME-Version: 1.0
>| Content-Type: text/plain; charset=us-ascii
>| Content-Transfer-Encoding: 7bit
>| Newsgroups: microsoft.public.sqlserver.connect
>| NNTP-Posting-Host: 0-2pool82-42.nas33.thornton1.co.us.da.qwest.net
>67.4.82.42
>| Lines: 1
>| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
>| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.sqlserver.connect:3422
>| X-Tomcat-NG: microsoft.public.sqlserver.connect
>|
>| Peter,
>| Not necessarily. In your testing, I would guess you are
>| using XP Pro and do not have simple file sharing enabled.
>| There are scenarios with XP where you are authenticated as
>| guest and the use of the same account/password does not
>| work. Refer to the following knowledge base article:
>| SQL Server clients are authenticated as guests if Simple
>| File Sharing is enabled
>| http://support.microsoft.com/?id=831133
>|
>| -Sue
>|
>| On Mon, 14 Feb 2005 07:08:38 GMT,
>| petery@.online.microsoft.com (Peter Yang [MSFT]) wrote:
>|
>| >Hello Maer,
>| >
>| >I think it is not a limitation in Windows 2000. Based on my test, I
>could
>| >access SQL server on Win2000 server by using Windows authenctication if
>I
>| >use same password for Administrator account on both Win2000 and WinXP
>| >computers. I suggest that you check security policy settings on both
>| >computers to see if they match:
>| >
>| >1. Run gpedit.msc
>| >
>| >2. Check Computer configuration->Windows settings->Security
>Settings->Local
>| >Policies->Security Options and make sure the following settings:
>| >
>| >Digitally sign client communication (always) Not defined
>| >
>| >Digitally sign client communication (when possible) Not defined
>| >
>| >Digitally sign server communication (always) Not defined
>| >
>| >Digitally sign server communication (when possible) Not defined
>| >
>| >LAN Manager Authentication Level Not defined
>| >
>| >Secure channel: Digitally encrypt or sign secure channel data (always)
>Not
>| >defined
>| >
>| >Secure channel: Digitally encrypt secure channel data (when possible)
>Not
>| >defined
>| >
>| >Secure channel: Digitally sign secure channel data (when possible) Not
>| >defined
>| >
>| >Secure channel: Require strong (Windows 2000 or later) session key Not
>| >defined
>| >
>| >3. Check Computer configuration->Windows settings->Security
>Settings->Local
>| >Policies->User Rights assigment, and make sure Deny access this computer
>| >from network is not configured.
>| >
>| >Thanks & Regards,
>| >
>| >Peter Yang
>| >MCSE2000/2003, MCSA, MCDBA
>| >Microsoft Online Partner Support
>| >
>| >When responding to posts, please "Reply to Group" via your newsreader so
>| >that others may learn and benefit from your issue.
>| >
>| > ========================================
=============
>| >
>| >This posting is provided "AS IS" with no warranties, and confers no
>rights.
>| >
>| >
>| >
>| >
>| >--
>| >| From: "Maer" <maer@.auditleverage.com>
>| >| References: <esy#R5JCFHA.3592@.TK2MSFTNGP11.phx.gbl>
>| ><k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.4ax.com>
>| ><#5wLGfLCFHA.1296@.TK2MSFTNGP10.phx.gbl>
>| ><gg8001d3s2nhf3kjd1i61srhmh5264arvc@.4ax.com>
>| >| Subject: Re: Login failed for Server\Guest
>| >| Date: Thu, 10 Feb 2005 19:33:17 -0500
>| >| Lines: 87
>| >| X-Priority: 3
>| >| X-MSMail-Priority: Normal
>| >| X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>| >| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>| >| X-RFC2646: Format=Flowed; Original
>| >| Message-ID: <eUzy8D9DFHA.936@.TK2MSFTNGP12.phx.gbl>
>| >| Newsgroups: microsoft.public.sqlserver.connect
>| >| NNTP-Posting-Host: pcp08367474pcs.lndsd201.pa.comcast.net 68.42.29.253
>| >| Path:
>|
>2
>| >phx.gbl
>| >| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.sqlserver.connect:3409
>| >| X-Tomcat-NG: microsoft.public.sqlserver.connect
>| >|
>| >| Thank you, Sue. Your suggestion seems to be the way to go.
>| >|
>| >| I have noticed that when I try to log in using Windows
>Authentication
>| >to
>| >| a Windows 2000 machine from my XP machine, it tries to log me in as
>| >| "Server\Administrator" and, of course, fails. My account is part of
>the
>| >| Administrator's group. However, the other way around (from Win 2000 to
>| >XP)
>| >| works fine.
>| >|
>| >| Is there a limitation in Windows 2000 too?
>| >|
>| >| Thanks again,
>| >| Maer
>| >|
>| >|
>| >|
>| >| "Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
>| >| news:gg8001d3s2nhf3kjd1i61srhmh5264arvc@.
4ax.com...
>| >| > Hi Maer,
>| >| > You can enable the guest account but that's a security risk
>| >| > - especially if exposed to the outside world. For SQL
>| >| > Server, although Windows Authentication is more secure than
>| >| > SQL Authentication, I'd probably use that option instead of
>| >| > enabling the guest account. Make sure to turn on security
>| >| > audits, limit the number of SQL logins and make sure all SQL
>| >| > logins have strong passwords - mixed case, alpha numeric
>| >| > with special characters, no known words, etc.
>| >| >
>| >| > -Sue
>| >| >
>| >| > On Tue, 1 Feb 2005 18:44:54 -0500, "Maer"
>| >| > <maer@.auditleverage.com> wrote:
>| >| >
>| >| >> Thank you, Sue!
>| >| >>
>| >| >> That clarifies so much! Would I be right in assuming that using
>| >| >> windows
>| >| >>authentication is not an option when logging in remotely to Xp Home
>| >since
>| >| >>it
>| >| >>always uses Guest? Is there a work-around?
>| >| >>
>| >| >> Maer
>| >| >>
>| >| >>
>| >| >>"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
>| >| >> news:k2tvv01h3cqitqs4jefqnnoa9s3obd5rv1@.
4ax.com...
>| >| >>> With XP home, authentication is done using the guest account
>| >| >>> as simple file sharing is always enabled on XP Home. Refer
>| >| >>> to the following for more info:
>| >| >>> SQL Server clients are authenticated as guests if Simple
>| >| >>> File Sharing is enabled
>| >| >>> http://support.microsoft.com/?id=831133
>| >| >>>
>| >| >>> -Sue
>| >| >>>
>| >| >>> On Tue, 1 Feb 2005 15:42:45 -0500, "Maer"
>| >| >>> <maer@.auditleverage.com> wrote:
>| >| >>>
>| >| >>>> Hi - I have two computers, one running Xp Pro and one Xp Home.
>I
>| >| >>>> created
>| >| >>>>a windows user account on both machines with the same password. I
>| >added
>| >| >>>>those accounts to SQL Server on both machines and I want to be
>able to
>| >| >>>>connect to each other using a trusted connection.
>| >| >>>>
>| >| >>>> If I try to remotely connect to the Xp Pro machine from the
>Home
>| >| >>>> machine
>| >| >>>>using windows authentication, everything works fine. But, if I try
>to
>| >| >>>>remotely connect to the Home machine it says that login failed for
>| >| >>>>Server\Guest. My understanding is that it tries to log in as guest
>if
>| >| >>>>the
>| >| >>>>windows account is not found.
>| >| >>>>
>| >| >>>> Why does it work on one computer but not the other? Is it
>because
>| >it
>| >| >>>> is
>| >| >>>>Home edition? Is there something else I need to do?
>| >| >>>>
>| >| >>>> BTW, standard authentication works fine on both machines and
>the
>| >| >>>> Guest
>| >| >>>>account is turned off.
>| >| >>>>
>| >| >>>> Thanks,
>| >| >>>> Maer
>| >| >>>>
>| >| >>>
>| >| >>
>| >| >
>| >|
>| >|
>| >|
>|
>|sql
Monday, March 19, 2012
Login Failed - XP Home Edtion accessing SQL Server
Hi All.
I have an application (VB 6) that access a database in a SQL Server.
But, I cant access the database when I try to run the application using
XP Home Edtion, even logging in domain (by "map network drives).
I can access the shares in SQL server normally, but when I run the
application appears the error window attached.
Any idea?
Tks in advance
Dan Pinhiero
Rio de Janeiro - Brasil
You might try the connection string below ('User Id' omitted):
"Provider=SQLOLEDB;Data Source=SERV_MT207\DROGASM1;Initial
Catalog=master;Integrated Security=SSPI;Application
Name=CallCenter;Pooling=True"
Hope this helps.
Dan Guzman
SQL Server MVP
"Dan Pinheiro" <dan_pinheirorj@.hotmail.com> wrote in message
news:uqOKXEWHEHA.3820@.tk2msftngp13.phx.gbl...
> Hi All.
> I have an application (VB 6) that access a database in a SQL Server.
> But, I cant access the database when I try to run the application using
> XP Home Edtion, even logging in domain (by "map network drives).
> I can access the shares in SQL server normally, but when I run the
> application appears the error window attached.
> Any idea?
> Tks in advance
> Dan Pinhiero
> Rio de Janeiro - Brasil
>
|||Dan Guzman escreveu:
> You might try the connection string below ('User Id' omitted):
> "Provider=SQLOLEDB;Data Source=SERV_MT207\DROGASM1;Initial
> Catalog=master;Integrated Security=SSPI;Application
> Name=CallCenter;Pooling=True"
>
Hi Dan, thanks for your help, but the application needs the "user id",
due permissions settings. Is there some way to bypass this problem
changing the role/security settings?
Best Regards
Dan Pinheiro
Rio de Janeiro - Brasil.
|||If you want to connect using standard SQL Security, you can specify both
UserId and Password in the connection string and omit the Integrated
Security keyword. Your server will need to be configured to allow both
Windows and SQL authentication.
Hope this helps.
Dan Guzman
SQL Server MVP
"Dan Pinheiro" <dan_pinheirorj@.hotmail.com> wrote in message
news:exOROLXHEHA.3144@.TK2MSFTNGP10.phx.gbl...
> Dan Guzman escreveu:
>
> Hi Dan, thanks for your help, but the application needs the "user id",
> due permissions settings. Is there some way to bypass this problem
> changing the role/security settings?
> Best Regards
> Dan Pinheiro
> Rio de Janeiro - Brasil.
>
I have an application (VB 6) that access a database in a SQL Server.
But, I cant access the database when I try to run the application using
XP Home Edtion, even logging in domain (by "map network drives).
I can access the shares in SQL server normally, but when I run the
application appears the error window attached.
Any idea?
Tks in advance
Dan Pinhiero
Rio de Janeiro - Brasil
You might try the connection string below ('User Id' omitted):
"Provider=SQLOLEDB;Data Source=SERV_MT207\DROGASM1;Initial
Catalog=master;Integrated Security=SSPI;Application
Name=CallCenter;Pooling=True"
Hope this helps.
Dan Guzman
SQL Server MVP
"Dan Pinheiro" <dan_pinheirorj@.hotmail.com> wrote in message
news:uqOKXEWHEHA.3820@.tk2msftngp13.phx.gbl...
> Hi All.
> I have an application (VB 6) that access a database in a SQL Server.
> But, I cant access the database when I try to run the application using
> XP Home Edtion, even logging in domain (by "map network drives).
> I can access the shares in SQL server normally, but when I run the
> application appears the error window attached.
> Any idea?
> Tks in advance
> Dan Pinhiero
> Rio de Janeiro - Brasil
>
|||Dan Guzman escreveu:
> You might try the connection string below ('User Id' omitted):
> "Provider=SQLOLEDB;Data Source=SERV_MT207\DROGASM1;Initial
> Catalog=master;Integrated Security=SSPI;Application
> Name=CallCenter;Pooling=True"
>
Hi Dan, thanks for your help, but the application needs the "user id",
due permissions settings. Is there some way to bypass this problem
changing the role/security settings?
Best Regards
Dan Pinheiro
Rio de Janeiro - Brasil.
|||If you want to connect using standard SQL Security, you can specify both
UserId and Password in the connection string and omit the Integrated
Security keyword. Your server will need to be configured to allow both
Windows and SQL authentication.
Hope this helps.
Dan Guzman
SQL Server MVP
"Dan Pinheiro" <dan_pinheirorj@.hotmail.com> wrote in message
news:exOROLXHEHA.3144@.TK2MSFTNGP10.phx.gbl...
> Dan Guzman escreveu:
>
> Hi Dan, thanks for your help, but the application needs the "user id",
> due permissions settings. Is there some way to bypass this problem
> changing the role/security settings?
> Best Regards
> Dan Pinheiro
> Rio de Janeiro - Brasil.
>
Login Failed - XP Home Edtion accessing SQL Server
Hi All.
I have an application (VB 6) that access a database in a SQL Server.
But, I cant access the database when I try to run the application using
XP Home Edtion, even logging in domain (by "map network drives).
I can access the shares in SQL server normally, but when I run the
application appears the error window attached.
Any idea?
Tks in advance
Dan Pinhiero
Rio de Janeiro - BrasilYou might try the connection string below ('User Id' omitted):
"Provider=SQLOLEDB;Data Source=SERV_MT207\DROGASM1;Initial
Catalog=master;Integrated Security=SSPI;Application
Name=CallCenter;Pooling=True"
Hope this helps.
Dan Guzman
SQL Server MVP
"Dan Pinheiro" <dan_pinheirorj@.hotmail.com> wrote in message
news:uqOKXEWHEHA.3820@.tk2msftngp13.phx.gbl...
> Hi All.
> I have an application (VB 6) that access a database in a SQL Server.
> But, I cant access the database when I try to run the application using
> XP Home Edtion, even logging in domain (by "map network drives).
> I can access the shares in SQL server normally, but when I run the
> application appears the error window attached.
> Any idea?
> Tks in advance
> Dan Pinhiero
> Rio de Janeiro - Brasil
>
----
--|||Dan Guzman escreveu:
> You might try the connection string below ('User Id' omitted):
> "Provider=SQLOLEDB;Data Source=SERV_MT207\DROGASM1;Initial
> Catalog=master;Integrated Security=SSPI;Application
> Name=CallCenter;Pooling=True"
>
Hi Dan, thanks for your help, but the application needs the "user id",
due permissions settings. Is there some way to bypass this problem
changing the role/security settings?
Best Regards
Dan Pinheiro
Rio de Janeiro - Brasil.|||If you want to connect using standard SQL Security, you can specify both
UserId and Password in the connection string and omit the Integrated
Security keyword. Your server will need to be configured to allow both
Windows and SQL authentication.
Hope this helps.
Dan Guzman
SQL Server MVP
"Dan Pinheiro" <dan_pinheirorj@.hotmail.com> wrote in message
news:exOROLXHEHA.3144@.TK2MSFTNGP10.phx.gbl...
> Dan Guzman escreveu:
>
> Hi Dan, thanks for your help, but the application needs the "user id",
> due permissions settings. Is there some way to bypass this problem
> changing the role/security settings?
> Best Regards
> Dan Pinheiro
> Rio de Janeiro - Brasil.
>
I have an application (VB 6) that access a database in a SQL Server.
But, I cant access the database when I try to run the application using
XP Home Edtion, even logging in domain (by "map network drives).
I can access the shares in SQL server normally, but when I run the
application appears the error window attached.
Any idea?
Tks in advance
Dan Pinhiero
Rio de Janeiro - BrasilYou might try the connection string below ('User Id' omitted):
"Provider=SQLOLEDB;Data Source=SERV_MT207\DROGASM1;Initial
Catalog=master;Integrated Security=SSPI;Application
Name=CallCenter;Pooling=True"
Hope this helps.
Dan Guzman
SQL Server MVP
"Dan Pinheiro" <dan_pinheirorj@.hotmail.com> wrote in message
news:uqOKXEWHEHA.3820@.tk2msftngp13.phx.gbl...
> Hi All.
> I have an application (VB 6) that access a database in a SQL Server.
> But, I cant access the database when I try to run the application using
> XP Home Edtion, even logging in domain (by "map network drives).
> I can access the shares in SQL server normally, but when I run the
> application appears the error window attached.
> Any idea?
> Tks in advance
> Dan Pinhiero
> Rio de Janeiro - Brasil
>
----
--|||Dan Guzman escreveu:
> You might try the connection string below ('User Id' omitted):
> "Provider=SQLOLEDB;Data Source=SERV_MT207\DROGASM1;Initial
> Catalog=master;Integrated Security=SSPI;Application
> Name=CallCenter;Pooling=True"
>
Hi Dan, thanks for your help, but the application needs the "user id",
due permissions settings. Is there some way to bypass this problem
changing the role/security settings?
Best Regards
Dan Pinheiro
Rio de Janeiro - Brasil.|||If you want to connect using standard SQL Security, you can specify both
UserId and Password in the connection string and omit the Integrated
Security keyword. Your server will need to be configured to allow both
Windows and SQL authentication.
Hope this helps.
Dan Guzman
SQL Server MVP
"Dan Pinheiro" <dan_pinheirorj@.hotmail.com> wrote in message
news:exOROLXHEHA.3144@.TK2MSFTNGP10.phx.gbl...
> Dan Guzman escreveu:
>
> Hi Dan, thanks for your help, but the application needs the "user id",
> due permissions settings. Is there some way to bypass this problem
> changing the role/security settings?
> Best Regards
> Dan Pinheiro
> Rio de Janeiro - Brasil.
>
Login Failed - Accessing through XP Home Edition
Hi All.
I have an application (VB 6) that access a database in a SQL Server.
But, I cant access the database when I try to run the application using
XP Home Edtion, even logging in domain (by "map network drives).
I can access the shares in SQL server normally, but when I run the
application appears the error window attached.
Any idea?
Tks in advance
Dan Pinhiero
Rio de Janeiro - Brasil
The null in "login failed for user null" indicates that the domain
controller didn't send a valid, authenticated windows login to SQL Server.
There may be a problem with the DC (out of date, permissions, etc.) or with
something on the network. From the XP workstation you need to see if you
can get to other network resources on the domain without having to enter
credentials and fix it if you can't. You can also see what logonserver (DC)
that workstation is pointed to (run SET from a cmd prompt) and see if you
can point it to a different DC.
Cindy Gross, MCDBA, MCSE
http://cindygross.tripod.com
This posting is provided "AS IS" with no warranties, and confers no rights.
I have an application (VB 6) that access a database in a SQL Server.
But, I cant access the database when I try to run the application using
XP Home Edtion, even logging in domain (by "map network drives).
I can access the shares in SQL server normally, but when I run the
application appears the error window attached.
Any idea?
Tks in advance
Dan Pinhiero
Rio de Janeiro - Brasil
The null in "login failed for user null" indicates that the domain
controller didn't send a valid, authenticated windows login to SQL Server.
There may be a problem with the DC (out of date, permissions, etc.) or with
something on the network. From the XP workstation you need to see if you
can get to other network resources on the domain without having to enter
credentials and fix it if you can't. You can also see what logonserver (DC)
that workstation is pointed to (run SET from a cmd prompt) and see if you
can point it to a different DC.
Cindy Gross, MCDBA, MCSE
http://cindygross.tripod.com
This posting is provided "AS IS" with no warranties, and confers no rights.
Friday, March 9, 2012
login 101..
What is the difference between 'Windows Authentication' login and 'SQL
login'? I have IIS, MSDE installed on my home computer and I don't log
into windows. So how does 'Windows Authentication' apply in this case?
Thanks,
RABMissouriIt depends on what operating system you are running at home.
In some cases, even though you don't explicitly log in, you
are being logged in when the computer starts up. It's just
transparent to the user.
What OS are you running at home?
-Sue
On 22 May 2006 08:31:41 -0700, "RAB" <rabmissouri@.yahoo.com>
wrote:
>What is the difference between 'Windows Authentication' login and 'SQL
>login'? I have IIS, MSDE installed on my home computer and I don't log
>into windows. So how does 'Windows Authentication' apply in this case?
>
>Thanks,
>RABMissouri|||On 22 May 2006 08:31:41 -0700, RAB wrote:
>What is the difference between 'Windows Authentication' login and 'SQL
>login'?
Hi RABMissouri,
Windows authentication - SQL Server uses a special protocol to ask
Windows for the details of the currently logged-in user. If the Windows
user is in the list of allowed logins, the login succeeds wiithout the
user having to enter anything. If the Windows login is not registered as
a SQL Server login, an error message follows.
Advantages: no extra login prompts for user; SQL Server security
benefits from Windows login policies (such as password aging, etc).
Disadvantages: doesn't lend itself for testing; Windows users with admin
rights are automatically logged in as SQL Server admin.
SQL Server login - SQL Server prompts user for loginname and password,
then compares this to list of loginnames and (encrypted) passwords in
system table master..syslogins. On a match, you are logged in.
Advantages: easy when you have to test seecurity for different roles.
Disadvantages: no password expiration, password complexity checks, etc.
> I have IIS, MSDE installed on my home computer and I don't log
>into windows. So how does 'Windows Authentication' apply in this case?
What version of Windows are yoou using?
Hugo Kornelis, SQL Server MVP|||Windows XP Professional...
Thanks,
RABMissouri|||Just a correction for the SQL Authentication description:
On Windows 2003, SQL Server 2005 can enforce the Windows password complexity
and expiration policy for SQL logins.
Thanks
Laurentiu Cristofor [MSFT]
Software Design Engineer
SQL Server Engine
http://blogs.msdn.com/lcris/
This posting is provided "AS IS" with no warranties, and confers no rights.
"Hugo Kornelis" <hugo@.perFact.REMOVETHIS.info.INVALID> wrote in message
news:bsf472h1m7vuhpjlhfi55eekqe47r7nte3@.
4ax.com...
> On 22 May 2006 08:31:41 -0700, RAB wrote:
>
> Hi RABMissouri,
> Windows authentication - SQL Server uses a special protocol to ask
> Windows for the details of the currently logged-in user. If the Windows
> user is in the list of allowed logins, the login succeeds wiithout the
> user having to enter anything. If the Windows login is not registered as
> a SQL Server login, an error message follows.
> Advantages: no extra login prompts for user; SQL Server security
> benefits from Windows login policies (such as password aging, etc).
> Disadvantages: doesn't lend itself for testing; Windows users with admin
> rights are automatically logged in as SQL Server admin.
> SQL Server login - SQL Server prompts user for loginname and password,
> then compares this to list of loginnames and (encrypted) passwords in
> system table master..syslogins. On a match, you are logged in.
> Advantages: easy when you have to test seecurity for different roles.
> Disadvantages: no password expiration, password complexity checks, etc.
>
> What version of Windows are yoou using?
> --
> Hugo Kornelis, SQL Server MVP|||If you aren't logging in then I would guess you are using
the Welcome screen login option. The user you select is the
user that is logged into windows for you. That is the login
that would access MSDE on your computer if you were using
osql, admin tools, etc. Depending on other settings but
generally if your web site is using Windows Authentication,
it will log into SQL Server using the ComputerName\ASPNET
login.
That's basically how it would work. There is a login
associated with you as well as IIS that can be used as
windows logins in SQL Server.
-Sue
On 22 May 2006 18:40:57 -0700, "RAB" <rabmissouri@.yahoo.com>
wrote:
>Windows XP Professional...
>Thanks,
>RABMissouri
login'? I have IIS, MSDE installed on my home computer and I don't log
into windows. So how does 'Windows Authentication' apply in this case?
Thanks,
RABMissouriIt depends on what operating system you are running at home.
In some cases, even though you don't explicitly log in, you
are being logged in when the computer starts up. It's just
transparent to the user.
What OS are you running at home?
-Sue
On 22 May 2006 08:31:41 -0700, "RAB" <rabmissouri@.yahoo.com>
wrote:
>What is the difference between 'Windows Authentication' login and 'SQL
>login'? I have IIS, MSDE installed on my home computer and I don't log
>into windows. So how does 'Windows Authentication' apply in this case?
>
>Thanks,
>RABMissouri|||On 22 May 2006 08:31:41 -0700, RAB wrote:
>What is the difference between 'Windows Authentication' login and 'SQL
>login'?
Hi RABMissouri,
Windows authentication - SQL Server uses a special protocol to ask
Windows for the details of the currently logged-in user. If the Windows
user is in the list of allowed logins, the login succeeds wiithout the
user having to enter anything. If the Windows login is not registered as
a SQL Server login, an error message follows.
Advantages: no extra login prompts for user; SQL Server security
benefits from Windows login policies (such as password aging, etc).
Disadvantages: doesn't lend itself for testing; Windows users with admin
rights are automatically logged in as SQL Server admin.
SQL Server login - SQL Server prompts user for loginname and password,
then compares this to list of loginnames and (encrypted) passwords in
system table master..syslogins. On a match, you are logged in.
Advantages: easy when you have to test seecurity for different roles.
Disadvantages: no password expiration, password complexity checks, etc.
> I have IIS, MSDE installed on my home computer and I don't log
>into windows. So how does 'Windows Authentication' apply in this case?
What version of Windows are yoou using?
Hugo Kornelis, SQL Server MVP|||Windows XP Professional...
Thanks,
RABMissouri|||Just a correction for the SQL Authentication description:
On Windows 2003, SQL Server 2005 can enforce the Windows password complexity
and expiration policy for SQL logins.
Thanks
Laurentiu Cristofor [MSFT]
Software Design Engineer
SQL Server Engine
http://blogs.msdn.com/lcris/
This posting is provided "AS IS" with no warranties, and confers no rights.
"Hugo Kornelis" <hugo@.perFact.REMOVETHIS.info.INVALID> wrote in message
news:bsf472h1m7vuhpjlhfi55eekqe47r7nte3@.
4ax.com...
> On 22 May 2006 08:31:41 -0700, RAB wrote:
>
> Hi RABMissouri,
> Windows authentication - SQL Server uses a special protocol to ask
> Windows for the details of the currently logged-in user. If the Windows
> user is in the list of allowed logins, the login succeeds wiithout the
> user having to enter anything. If the Windows login is not registered as
> a SQL Server login, an error message follows.
> Advantages: no extra login prompts for user; SQL Server security
> benefits from Windows login policies (such as password aging, etc).
> Disadvantages: doesn't lend itself for testing; Windows users with admin
> rights are automatically logged in as SQL Server admin.
> SQL Server login - SQL Server prompts user for loginname and password,
> then compares this to list of loginnames and (encrypted) passwords in
> system table master..syslogins. On a match, you are logged in.
> Advantages: easy when you have to test seecurity for different roles.
> Disadvantages: no password expiration, password complexity checks, etc.
>
> What version of Windows are yoou using?
> --
> Hugo Kornelis, SQL Server MVP|||If you aren't logging in then I would guess you are using
the Welcome screen login option. The user you select is the
user that is logged into windows for you. That is the login
that would access MSDE on your computer if you were using
osql, admin tools, etc. Depending on other settings but
generally if your web site is using Windows Authentication,
it will log into SQL Server using the ComputerName\ASPNET
login.
That's basically how it would work. There is a login
associated with you as well as IIS that can be used as
windows logins in SQL Server.
-Sue
On 22 May 2006 18:40:57 -0700, "RAB" <rabmissouri@.yahoo.com>
wrote:
>Windows XP Professional...
>Thanks,
>RABMissouri
Subscribe to:
Posts (Atom)