logon failure: unknown user name or bad password. Windows 7 machine trying to connect to Vista

Question

I have bought a W7 PC and am trying to log on to other PCs on the network. I can connect to one, can't connect to the other but can see them both in the network and sharing centre/view network computers and devices. When I try to log into the non-connecting device, the system automatically changes the user ID - I'm on ADMIN, trying to connect to GUEST - it changes my sign in from GUEST to ADMIN_PC\GUEST.

I connect to the LAN from the W7 machine wirelessly. The Vista machine I can log onto is connected via ethernet link to the router. The machine I can see but cannot log into is connected to a switch via ethernet and then connected via ethernet to the router. 

Having read discussion boards, it looks like this problem can be fixed by making changes to Local Security Policy - Network security: LAN Manager authentication level but I cannot find where to do this.

I am at the end of my thether - I believed the hype and thought that W7 would be easy to use. What do I have to do to get this thing to work?

Answer 1

You don't need to change anything with LAN Manager. The problem is probably related to Item C below. Here are general network troubleshooting steps. Not everything may be applicable to your situation, so just take the bits that are. It may look daunting, but if you follow the steps at the links and suggestions below systematically and calmly, you will have no difficulty in setting up your sharing.

Problems sharing files between computers on a network are generally caused by 1) a misconfigured firewall or overlooked firewall (including a stateful firewall in a VPN); or 2) inadvertently running two firewalls such as the built-in Windows Firewall and a third-party firewall; and/or 3) not having identical user accounts and passwords on all Workgroup machines; 4) trying to create shares where the operating system does not permit it.

In Windows 7, go to Control Panel>All Control Panel Items>Network and Sharing Center. Click on "Change advanced sharing settings". You don't want to use Homegroup unless you have all Windows 7 machines. If you do and you want to use Homegroup, see Windows 7's Help & Support. Otherwise, in the Advanced Sharing:

Turn ON network discovery

Turn ON file and printer sharing

Turn ON sharing in the Public folder sharing section

Turn ON password protected sharing

A. Configure firewalls on all machines to allow the Local Area Network (LAN) traffic as trusted. With Windows Firewall, turning on Window's File and Printer Sharing as above will take care of this for you. In XP you can run the Network Setup Wizard or just enable File/Printer Sharing in the Windows XP Firewall's exceptions. If you aren't running a third-party firewall or have an antivirus/security program with its own firewall component, then you're fine.  With third-party firewalls, I usually configure the LAN allowance with an IP range. Ex. would be 192.168.1.0-192.168.1.254. Obviously you would substitute your correct subnet. Refer to any third party security program's Help or user forums for how to properly configure its firewall. Do not run more than one firewall. DO NOT TURN OFF FIREWALLS; CONFIGURE THEM CORRECTLY.

B. For ease of organization, put all computers in the same Workgroup. This is done from the System applet in Control Panel, Computer Name tab.

C. Create matching user accounts and passwords on all machines. You do not need to be logged into the same account on all machines and the passwords assigned to each user account can be different; the accounts/passwords just need to exist and match on all machines. DO NOT NEGLECT TO CREATE PASSWORDS, EVEN IF ONLY SIMPLE ONES . If you wish a machine to boot directly to the Desktop (into one particular user's account) for convenience, you can do this:

Start>Search box>type: netplwiz [enter]

Click on Continue (or supply an administrator's password) when prompted by UAC

Uncheck the option "Users must enter a user name and password to use this computer". Select a user account to automatically log on by clicking on the desired account to highlight it and then hit OK. Enter the correct password for that user account (if there is one) when prompted. Leave it blank if there is no password (null).

XP - Configure Windows to Automatically Login (MVP Ramesh) - http://windowsxp.mvps.org/Autologon.htm

D. If one or more of the computers on your network is XP Pro or Media Center, turn off Simple File Sharing (Folder Options>View tab).

E. Create shares as desired. In Windows 7 I usually share out the user's Desktop and the Public directory.

---

MS-MVP - Elephant Boy Computers - Don't Panic!

Answer 2

My Win7 computer consistently fails to connect or quits connecting to a WinVista computer (but ok V->7). Somehow on Win7 computer, under Win Firewall, under "allow a program or feature through Win Firewall", the "Netlogon Service" is unchecked. My Win7 PC is experiencing "issues" which I believe are windows system files becoming corrupted, but simply checking this(allowing access through the firewall), my Win7 immediately connected to WinVista PC.

Amazingly, I have searched like many of us have and I have never seen this simple solution!

Answer 3

Hi I'm having a similar problem (symptom); 

I've done ALL the things suggested, for sharing files/folders, which has worked in the past.

Another very strange symptom: I cannot access shares on \AMD-FX2 {Win7-Professional} machine from either Win-Vista (running Norton 360) or Win7-Home Premium laptop (running either NO firewall, or AVG).

However, I CAN access the problem machine, by using \192.168.1.82 (its IP address)

I know that you cannot have more than 1 user logged into a given machine with 2 different user-names. The IP number approach is a workaround for this.

So, is there some place (registry) where windows stores login-usernames? Can these be flushed and forced to re-initialize?

Is there some way I can get more details on why the system is not allowing access? (even though the UserName/PW are the same on all machines!)

totally baffled

-J H Peterng

Answer 4

Since you aren't the original poster - who hasn't returned since May - please make a new post all your own and include all pertinent details about *your* specific situation per:

http://www.elephantboycomputers.com/page2.html#Tech_Support - See "How to Write a Post" section

http://support.microsoft.com/default.aspx/kb/555375 - How to Ask a Question

If a server is involved, then a better forum would be one of the TechNet forums for your particular server operating system.

http://social.technet.microsoft.com/Forums/en/categories/

---

MS-MVP - Elephant Boy Computers - Don't Panic!

Answer 5

Option C did not help.  I am unable to create any account in the format of:  <WIN7 PC Name>&lt;username> on the Win2kPro machines I need to connect to.   The "" character is invalid. 

THEY can connect to the Win7 machine just fine, but I NEED to map drives on the older machines as well. 

Is there a way to get rid of the "domain" portion of the userid on the Win7 machine?

TIA

Desraeli