Windows Client TechCenter > Windows 7 Forums > Windows 7 Networking > Cannot authenticate to Windows 2000 share on workgroup after upgrade from Vista to Windows 7
Ask a questionAsk a question
 

AnswerCannot authenticate to Windows 2000 share on workgroup after upgrade from Vista to Windows 7

  • Tuesday, November 03, 2009 1:16 AMGX400 Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    After upgrading a PC from Vista to Windows 7 (32), I cannot access a share on another computer on my home network (workgroup).
    I can see the machine, but it prompts me for a login.  I can't login with a pw I know is correct.  I've tried win_2000_machine_name\user_name and .\user_name
    when I just type in the user name, it assumes it is win_7_machine_name\user_name
    I've tried opening up the file share to everyone, but still no luck.

    Thanks,

Answers

  • Thursday, November 05, 2009 7:22 AMArthur XieMSFT, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer

    Hi,

    Since your system is Windows 7 Home Premium, please

    1. Run gpedit.
    2. Navigate to:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

    3. Create a DWORD value under Lsa

    LmCompatibilityLevel

    4. Set the value to 1
    5. Restart


    Arthur Xie - MSFT

All Replies

  • Tuesday, November 03, 2009 3:09 AMBill GrantMVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
      You could always map the share with a net use command, then connect to it.

       I have not had any problems using machinename\usename. I don't have any W2k machines but it works on XP, W2k3 server and Vista. 
    Bill
  • Tuesday, November 03, 2009 9:43 AMArthur XieMSFT, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     

    Please try to change the authentication level to “Send LM & NTLM - use NTLMv2 session security if negotiated”.

    Network security: LAN Manager authentication level


    Arthur Xie - MSFT
  • Wednesday, November 04, 2009 1:51 AMGX400 Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Thanks Arthur.
    I can't figure out how to edit my security policy on Windows 7 Home premium.  (or how to otherewise change the authentication level)
  • Wednesday, November 04, 2009 4:01 AMTimeBomb Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     

    I did manage to fix the exact error mentionned, just follow these steps :

    In Windows 2000 server go to start, run, type gpedit.msc and click ok.
    Under computer comfiguration, windows settings, security setting, local policies, security options.
    Look for LAN Manager Authentication Level.  Set it to SEND LM & NTLM - use NTLMv2 session security if negociated.  Click OK.
    Then run these commands :
    secedit /refreshpolicy user_policy
    secedit /refreshpolicy machine_policy

    Now we have to do the same on Windows 7...
    But you run this command to apply the settings : gpupdate /force

    You should now be able to access the shares.

    Aloha!

    _____________________
    TimeBomb

  • Thursday, November 05, 2009 7:22 AMArthur XieMSFT, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer

    Hi,

    Since your system is Windows 7 Home Premium, please

    1. Run gpedit.
    2. Navigate to:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

    3. Create a DWORD value under Lsa

    LmCompatibilityLevel

    4. Set the value to 1
    5. Restart


    Arthur Xie - MSFT
  • Wednesday, December 02, 2009 3:34 AMGX400 Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    AHA!   I tried and tried to run gpedit.msc, but you meant regedit, not gpedit.  ;)

    and...  IT WORKED!  Thank you!!!  thank you, thank you

    I did this part too:
    In Windows 2000: go to start, run, type gpedit.msc and click ok.
    Under computer comfiguration, windows settings, security setting, local policies, security options.
    Look for LAN Manager Authentication Level.  Set it to SEND LM & NTLM - use NTLMv2 session security if negociated.  Click OK.
    Then run these commands :
    secedit /refreshpolicy user_policy
    secedit /refreshpolicy machine_policy

    and on my win7 box, gpupdate /force instead of rebooting (so I wouldn't have to nav back to this site to tell you 'thank you')
  • 3 hours 17 minutes agorednek699 Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    this worked for me too...thank you very much and i know a few places to get this word out. thank you again!!!