LAN Network drive problems in Windows 2000
Zhanshan Dong
Last Friday, some of computers in the lab could not be accessed by other computers through LAN netwrok drive. And two machines with IIS server on prompted a dialog to ask people enter username and password to browse webpages. That was terrible because I just put a PowerPoint file on the server and indicated a person in New York to download it. He could not get it because of the password problem. The problem appeared after I tested the link and went back home to have lunch. It was about half an hour. But there are several other computers did not find this problem. What happened the these computers? It is a mystery to me. I tried to solve the problem several times, but I failed. To successfully attack the problem is important to me. I even asked the computer techinicians in our department, they told me I should wait some time. The issue is that I do not want to wait. I visited Microsoft website and went to Windows 2000 and searched for "Logon failure: the user has not been granted the requested logon type at this computer." I got the following message:
Error Message:
Logon failure: the user has not been granted the requested logon type at this computer.
Explanation:
You may be trying to log on interactively to a computer you can only access over a network, or vice versa.
User Action:
Change your logon location. Try to log on either locally (interactively) or remotely (over the network), as appropriate. You may want to ask the person who administers computer security to change the security database so you can log on either locally or remotely.
So, that means something wrong in the computer that I tried to access is the security settings. I opened "Settings -> Control Panel -> Administrative Tools -> Local Security Policy" to view and modify the security settings. I found that "Access this computer from the network" under "Local policies" -> "User rights assignment" was set to "HelpAssistants". That is not right. In this computer system, there was not a username called "HelpAssistants". My first response is virus attack. Somehow an unknown virus attacked my computers and added a new account with administrator's rights and changed the computer settings. In order to restore the systems security settings and increase the whole security of these computers, I did the following two things:
1) I set "Access this computer from the network" to my account only. In this way, other people can not access my computers anymore.
2) Delete the username called "HelpAssistants" in all attacked computers.
Ok, all the computers now can be accessed by me through the LAN. I do not know who attacked the computer. I should find a way to detect that.
|
