Hi there,
I have what is surely a Win 7 Pro security configuration "problem", but I can't figure out what it is. I've searched this very helpful forum for a day or so and have done things like changing the local security policy option for LAN Manager authentication to LM /NTLM with NTLMv2 "if negotiated", and so on, but still have no luck.
My home network has a NAS device, an HP MediaVault MV5150 to be precise, where I store all my documents, pictures, videos and music. I have the files on the NAS publicly shared so there is not supposed to be a need to enter a login/password to see them, basically if you're in my home network you should see the files there. It's assigned the workgroup name MSHOME, which was the default for some old version of Windows that I habitually use for my home network which is behind a router firewall anyway.
I have 7 PCs in my home, plus iPhones and whatnot, and they can all connect to the device either as a shared file system or as a media server. 3 computers are running Windows XP Pro, 3 others are running Windows 7 Home x32, and also one iMac. Oh, and one RedHat Linux system too, one of the XP laptops is a dual booter. On the non-Windows systems I had to configure seeing the NAS by IP address - 192.168.1.4 - but other than that, piece o' cake. In the Windows file browsers I can enter either "\\hpmediavault\documents" or "\\192.168.1.4\pictures", for example, to access the shared folders "documents" or "pictures" (or "music" or "videos"), map a network drive for each shared folder, and forget about it.
Of the 3 Win 7 PCs, one of them is a computer which I just did a completely clean installation on earlier this week, flattening a Win XP box with a Win 7 x32 home install in order to hand it off to my Dad. This PC is able to see my NAS right after installation. Yesterday, I got its replacement unit running, this one my first PC running Windows 7 Pro x64 with 8GB of RAM. I then ran the recommended updates and rebooted.
The first thing I noticed is that my login screen on bootup does not show the menu of configured logins with the mini-icons, as all my other Windows computers have, it has textbox prompts for login and password. So I can tell security defaults are different. (On a separate but much less urgent note, I did the local policies "Interactive logon: Do not require CTRL+ALT+DEL" change to "Enabled" but I still get presented with the text boxes on reboot.)
The second thing I noticed is that despite joining that MSHOME workgroup, I don't see my hpmediavault in my listing of Network devices. And even if I enter \\192.168.1.4\music, I can't connect to the files either. It does show up under "Media Devices" (this would be the uPnP server built-in to the MV5150 that my iPhone and Roku can stream from as well), but it doesn't talk to the device even as a media server.
This Win 7 Pro x64 box is definitely otherwise a good citizen of my home network though, it found my network printer and I can even login to the NAS device via HTTP to check its configuration and whatnot. It's just the file server and media server aspects that are closed off.
I have already checked and changed the following Local Policies / Security Options:
Network access: Let Everyone permissions apply to anonymous users = ENABLED
Network access: Allow anonymous SID/Name translation = ENABLED
Network access: Do not allow anonymous enumeration of SAM accounts and shares = DISABLED
Network access: Restrict anonymous access to Named Pipes and Shares = DISABLED
Network security: LAN Manager authentication level = Send LM & NTLM - use NTLMv2 session security if negotiated
Any suggestions on what I should look at and do next?
I have what is surely a Win 7 Pro security configuration "problem", but I can't figure out what it is. I've searched this very helpful forum for a day or so and have done things like changing the local security policy option for LAN Manager authentication to LM /NTLM with NTLMv2 "if negotiated", and so on, but still have no luck.
My home network has a NAS device, an HP MediaVault MV5150 to be precise, where I store all my documents, pictures, videos and music. I have the files on the NAS publicly shared so there is not supposed to be a need to enter a login/password to see them, basically if you're in my home network you should see the files there. It's assigned the workgroup name MSHOME, which was the default for some old version of Windows that I habitually use for my home network which is behind a router firewall anyway.
I have 7 PCs in my home, plus iPhones and whatnot, and they can all connect to the device either as a shared file system or as a media server. 3 computers are running Windows XP Pro, 3 others are running Windows 7 Home x32, and also one iMac. Oh, and one RedHat Linux system too, one of the XP laptops is a dual booter. On the non-Windows systems I had to configure seeing the NAS by IP address - 192.168.1.4 - but other than that, piece o' cake. In the Windows file browsers I can enter either "\\hpmediavault\documents" or "\\192.168.1.4\pictures", for example, to access the shared folders "documents" or "pictures" (or "music" or "videos"), map a network drive for each shared folder, and forget about it.
Of the 3 Win 7 PCs, one of them is a computer which I just did a completely clean installation on earlier this week, flattening a Win XP box with a Win 7 x32 home install in order to hand it off to my Dad. This PC is able to see my NAS right after installation. Yesterday, I got its replacement unit running, this one my first PC running Windows 7 Pro x64 with 8GB of RAM. I then ran the recommended updates and rebooted.
The first thing I noticed is that my login screen on bootup does not show the menu of configured logins with the mini-icons, as all my other Windows computers have, it has textbox prompts for login and password. So I can tell security defaults are different. (On a separate but much less urgent note, I did the local policies "Interactive logon: Do not require CTRL+ALT+DEL" change to "Enabled" but I still get presented with the text boxes on reboot.)
The second thing I noticed is that despite joining that MSHOME workgroup, I don't see my hpmediavault in my listing of Network devices. And even if I enter \\192.168.1.4\music, I can't connect to the files either. It does show up under "Media Devices" (this would be the uPnP server built-in to the MV5150 that my iPhone and Roku can stream from as well), but it doesn't talk to the device even as a media server.
This Win 7 Pro x64 box is definitely otherwise a good citizen of my home network though, it found my network printer and I can even login to the NAS device via HTTP to check its configuration and whatnot. It's just the file server and media server aspects that are closed off.
I have already checked and changed the following Local Policies / Security Options:
Network access: Let Everyone permissions apply to anonymous users = ENABLED
Network access: Allow anonymous SID/Name translation = ENABLED
Network access: Do not allow anonymous enumeration of SAM accounts and shares = DISABLED
Network access: Restrict anonymous access to Named Pipes and Shares = DISABLED
Network security: LAN Manager authentication level = Send LM & NTLM - use NTLMv2 session security if negotiated
Any suggestions on what I should look at and do next?
My Computer
At a glance
Windows 7 Professional x64Intel i7-s600 "Sandy Bridge" - 3.4GHz Quad Core8 GB 1600 MHz PC3 12800 DDR3sEVGA GeForce GTX 550 Ti
- Computer Manufacturer/Model Number
- custom
- OS
- Windows 7 Professional x64
- CPU
- Intel i7-s600 "Sandy Bridge" - 3.4GHz Quad Core
- Motherboard
- ASUS P8H67-M PRO
- Memory
- 8 GB 1600 MHz PC3 12800 DDR3s
- Graphics Card(s)
- EVGA GeForce GTX 550 Ti
- Sound Card
- on-board
- Monitor(s) Displays
- 2x Dell 1908FP
- Hard Drives
- 1TB Western Digital SATA2 drive
