why ipc$ access denied in WinXP

i have a administrator user,but ipc$ into the computer change the guest group

net use \\192.168.0.10\ipc$ "111" /u:administrator
The command completed successfully.
dir \\192.168.0.10\c$
Access is denied.

why? how to solve problem?

What does a net use g: \\192.168.0.10\c$ "111" /u:administrator do?

Maybe the administrator has no access to that c: drive.
Check the ACL on c:.

Quote:

---

Originally posted here by deadforg
i have a administrator user,but ipc$ into the computer change the guest group

net use \\192.168.0.10\ipc$ "111" /u:administrator
The command completed successfully.
dir \\192.168.0.10\c$
Access is denied.

why? how to solve problem?

---

try

net use\\192.168.0.1\c$ "111" /u:administrator
dir \\192.168.0.10\c$

IPC$ is the default share and you were trying to dir C$

This may not work since its ages since I've done anything like that.

Hey,

This will tell you about the net use command...

http://www.microsoft.com/windows2000...elp/ntcmds.htm

Maybe you need to incorperate some form of authentication when you go to connect.

Hope this helps.

--Peace :cool:

I didn't think you could take away administrator access to a windows root drive?

Quote:

---

Originally posted here by RoadClosed
I didn't think you could take away administrator access to a windows root drive?

---

Yes you can. Only SYSTEM needs read access to ntldr,ntdetect etc.
You have to make sure administrator can still access the other directories though.
So DON'T Replace permissions on subdirectories.

net use command in the win2000,use the ipc$ with administrators user ,is sucessful.
but in the winxp,use the ipc$ with administrators user,the system maybe auto changing the gust group, maybe is system Security Policy in the winxp system. please
try the "net use" to connect winxp system.see, if has same problem

if you have the "firewall" feature of XP turned on it will deny access to any IPC$ connection. I found that out on my home LAN while playing around a bit. With the "firewall" turned on you can go from the XP box out, but not from outside to the XP $ shares.


well while typing this I happend to look up and read your last post. Are you saying that a 2k admin can connect to the IPC$ on the XP box, but an XP admin can't? I haven't run in to anything like that before.

SirDice, maybe that doesn't work from the actual PC you are trying it on? I have never been successful, of course I just chalked it up to Windows and never pursued it? If I try and change permisions on the default share of c$ I always get an error saying that I cannot change permissions. Hmmm maybe I have to be local box admin vs. domain admin? (edit: nope doesn't work either)

Windows XP have these things disabled by default (security reasons)... You need to open the "share-tab" in properties when clicking on a drive (like C:) and enable something with sharing (don't know the english name... i've got swedish xp... :D ).

I think this only works for Pro...

Yes unsharing it works and then you can adjust permissions but I bet I just broke some things doing that! :eek:

Quote:

---

Originally posted here by RoadClosed
Yes unsharing it works and then you can adjust permissions but I bet I just broke some things doing that! :eek:

---

Have you this thing enabled? It's disabled by default...

Well... I had a similar problem a few month ago. I couldn't reach C$ on my WinXP Pro box with \\192.168.0.2\C$. But then I tried another "trick". I used \\computer_name\C$ instead and it worked! Weird isn't it? :rolleyes:

Quote:

---

Originally posted here by RoadClosed
SirDice, maybe that doesn't work from the actual PC you are trying it on? I have never been successful, of course I just chalked it up to Windows and never pursued it? If I try and change permisions on the default share of c$ I always get an error saying that I cannot change permissions. Hmmm maybe I have to be local box admin vs. domain admin? (edit: nope doesn't work either)

---

You cannot change the share permissions, that's correct. But you can change the file permissions. So then you would be able to connect to the share (because of the share permissions) but you cannot read anything (because of the ACL on the files/directories).

There are several things that could be the source of the problem.

1) Firewall (WinXP or 3rd party)

This will prevent all connections. But deadfrog is able to make a connection to IPC$. This wouldn't work when a firewall is active.

2) Admin shares disabled.

This will prevent connections to c$, d$ etc. It will allow you to connect to IPC$. When this is active it will give an error 51 if you try to connect to c$, d$ etc.

3) File level permissions (ACL).

This is the most likely candidate and when set to disable access for the administrator it will respond with an Access Denied. So check the ACLs on the machine you are connecting to.