"Zaphod Beeblebrox" <> wrote in
message news:jcntbj$tf5$...
>
> "Philip Herlihy" <> wrote in message
> news:...
>> In article <>,
>> says...
>>>
>>> I get authentication errors when I try to map a drive on my XP
>>> Home
>>> Premium PC to a share on an old Windows 2000 Professional PC.
>>> I've
>>> searched the web but advice is inconsistent. What's the trick?
>>
>> I'm grateful to Wolf and to Zaphod for taking the time to respond
>> but
>> I'm embarassed to own up to a significant typo: where I wrote 'XP'
>> I
>> meant 'Windows 7' - this rather changes the question! I'm sorry
>> for
>> wasting your time. My question should have read:
>>
>> I get authentication errors when I try to map a drive on my W7 Home
>> Premium PC to a share on an old Windows 2000 Professional PC. I've
>> searched the web but advice is inconsistent. What's the trick?
>>
>> - just to expand: I have a new PC running Windows 7 Home Premium
>> and I
>> want to transfer files on demand from an old machine running
>> Windows
>> 2000 Pro. I thought I'd simply map a drive, but I get
>> authentication
>> errors. I gather this is a common situation but I can't find any
>> consensus on the solution, so before I start tampering with the
>> registry
>> on the new machine I thought I'd seek advice here.
>>
> Indeed, that does alter the equation. Windows 7 by default will
> only use NT LanMan v2 authentication. If this was a non-Home
> version of Windows 7, you could use Local Security Policy editor to
> change the default. However, since you are on Home Premium you'll
> have to edit the registry. You'll need to change
> HKLM\System\CurrentControlSet\Control\Lsa\LmCompatibilityLevel to 2
> (or create it as a REG_DWORD value and set it to 2 if it isn't
> already there). I suspect you'll need to reboot afterward, but I
> don't know for sure.
>
Actually, it just occurred to me that it might be better to raise the
authentication level of the Windows 2000 PC rather than lowering it on
the Windows 7 machine. Since that machine is running a Professional
version of Windows, you should be able to use the Local Security
Policy editor to change it. Run secpol.msc and go to Local Policies -
Security Options, scroll down to Network Security: LAN Manager
Authentication Level. Double click it, and bump the setting up to one
of the options that starts "Send NTLMv2 response only" - I'd be
tempted to bump it up as high as it will go (I can't remember what
options Win2k has for this setting).
Good luck, and let us know how it goes.
--
Zaphod
Voted "Worst Dressed Sentient Being in the Known Universe" for seven
years in a row.