NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Munitions
Sep 15, 2013Aspirant
Windows 7 Folder Access
Hi,
Fairly new NAS user here - forgive me if this has already been asked but I have looked on this forum.....
I'm running Windows 7 64 bit.
I own a ReadyNAS 102 with a single installed Seagate 1TB RED drive.
I can see my device via the network in Windows Explorer and I can see all the shares. I can view all the files inside each share if anonymous access is turned on. For certain shares however, I don't want all machines on my network to have access. For example, I have a share called "Backup" and I only want me to have access. I have therefore created a separate user on the NAS firmware menu. This is at version 6.1.2. I have given this user read/write access to the share (along with Admin which appears to be mandatory). When I attempt to connect to this share, I get a Windows 7 "Enter Network Password" dialogue box which will not accept ether the "Admin" username and password or the specific username for the user I created and password. I know my Admin username and password is correct because I can log into the firmware via IE.
It seems the only way to access shares via Windows 7 explorer is to "Allow anonymous access" in the share network access settings but I only want users that I specify to do so. I have checked this by switching the "Allow anonymous access" box on and off. When its off, it asks for a username and password and never lets me in. When its on, it lets me in.
Please, please can someone tell me where I am going wrong?
Cheers,
Munitions.
Fairly new NAS user here - forgive me if this has already been asked but I have looked on this forum.....
I'm running Windows 7 64 bit.
I own a ReadyNAS 102 with a single installed Seagate 1TB RED drive.
I can see my device via the network in Windows Explorer and I can see all the shares. I can view all the files inside each share if anonymous access is turned on. For certain shares however, I don't want all machines on my network to have access. For example, I have a share called "Backup" and I only want me to have access. I have therefore created a separate user on the NAS firmware menu. This is at version 6.1.2. I have given this user read/write access to the share (along with Admin which appears to be mandatory). When I attempt to connect to this share, I get a Windows 7 "Enter Network Password" dialogue box which will not accept ether the "Admin" username and password or the specific username for the user I created and password. I know my Admin username and password is correct because I can log into the firmware via IE.
It seems the only way to access shares via Windows 7 explorer is to "Allow anonymous access" in the share network access settings but I only want users that I specify to do so. I have checked this by switching the "Allow anonymous access" box on and off. When its off, it asks for a username and password and never lets me in. When its on, it lets me in.
Please, please can someone tell me where I am going wrong?
Cheers,
Munitions.
19 Replies
Replies have been turned off for this discussion
- evan2NETGEAR ExpertHi Munitions,
Please try below setting on your Windows 7,
1. from the run command or from a cmd window run secpol.msc
2. go to “Local Policies” -> “Security Options” -> “Network Security: LAN Manager authentication level”
3. change to “LM and NTLM – use NTLMV2 session security if negotiated”
4. Press the OK button - MunitionsAspirantHi,
I am running Windows 7 64 Home Premium. secpol.msc is not a recognised program or command from the run menu or the command prompt.
Is there an alternative solution?
Thanks
Munitions. - DeeCee521Aspirant
Munitions wrote: Hi,
I am running Windows 7 64 Home Premium. secpol.msc is not a recognised program or command from the run menu or the command prompt.
Is there an alternative solution?
Thanks
Munitions.
If you have administrative rights to your computer, your can go to the Control Panel --> System and Security --> Administrative Tools --> Local Security Policy --> Security Options --> LAN Manager authentication level. If you enter that, you will get a drop down box to make your change. I cannot vouch for the change that was suggested. Mine says not defined and I am having trouble with permissions. Obviously YMMV on the change that was suggested. - MunitionsAspirantHi and thanks for the advice. I'm pretty sure I have full admin rights. I did look into this and the suggestions on the web are similar. What I don't understand is that I can get to Control Panel --> System and Security --> Administrative Tools but then "Local Security Policy" does not exist as an option/entry/shortcut. What I do see is:
Component Services
Computer Management
Data Sources
Event Viewer
iSCSI Initiator
Performance Monitor
Services
System Configuration
Task Scheduler
Windows Firewall
Windows Memory Diagnostic
Windows Powershell Modules
...but no Local Security Policy.
Sorry if I'm missing something obvious but any further help is welcome.
Cheers,
Munitions - mdgm-ntgrNETGEAR Employee RetiredMaybe try upgrading to Windows 7 Professional?
- MunitionsAspirantHmmm, nice answer but that wasn't really one of the selling points of this device. Maybe I missed the small print about owning W7 Professional to be able to perform 'basic' file and permission management. Still hoping for a simple answer otherwise I'll be asking Mr. Amazon very nicely for a refund.
- StephenBGuru - Experienced UserMaybe try Netgear support first.
- mdgm-ntgrNETGEAR Employee RetiredYou can manually edit the registry setting that secpol.msc changes. See http://answers.microsoft.com/en-us/windows/forum/windows_7-desktop/unable-to-find-secpolmsc-service-in-windows-7-home/fc083a41-442e-459c-9d17-73b7c1060733?msgId=b630d7fe-e994-4319-8f01-2bb3463c45db
- MunitionsAspirantThanks for the replies everyone.
Using the link supplied, I now have an Excel file from Microsoft. I have filtered by Windows 7 support options. Under the security TAB, he available options are:
Microsoft network server: Server SPN target name validation level
Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers
Network security: Restrict NTLM: Incoming NTLM traffic
Network security: Restrict NTLM: Audit Incoming NTLM Traffic
Network security: Restrict NTLM: NTLM authentication in this domain
Network security: Restrict NTLM: Audit NTLM authentication in this domain
Network security: Restrict NTLM: Add remote server exceptions for NTLM authentication
Network security: Restrict NTLM: Add server exceptions in this domain
Network security: Allow LocalSystem NULL session fallback
Network security: Allow Local System to use computer identity for NTLM
Network security: Allow PKU2U authentication requests to this computer to use online identities.
Network security: Configure encryption types allowed for Kerberos
None of which exactly correspond to the advice of changing the settings of "Network Security: LAN Manager authentication level"
Is there anyone who is way better than me at explaining what registry entry I need to go to and what settings I need to alter to achieve the above?
For what it's worth, there are many queries about this problem on the net and it does seem to be a Windows 7 Home Premium (my version) issue. I really hope there is a way to restrict shares to certain users on my network as opposed to giving all users all the Shares :?
Thanks,
Munitions. - John_RourkeAspirantHi,
I've encountered a similar situation at work while configuring several budget machines for our sales team.
I'm sorry to say, Win 7 Home doesn't have full Permissions capabilities as Win 7 Pro.
If you're looking to implement advanced security features, your only real option is to upgrade.
You really can't blame Netgear for the limitations Microsoft has within it's own environment. This is exactly why there are different version of Win 7. You get what you pay for.
Sorry I couldn't be more help.
Related Content
NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!