"account currently disabled" when accessing share, even before logging in

Question

When I try to access a share folder, say \\share-folder, I get the following error message:

logon failure: account currently disabled

This seems strange to me, since there is no 'account' to be disabled: I wasn't even presented with a login dialog. (The account that I would have used isn't disabled...)

The client (the one with the error message) is running Windows XP SP3. The server is running Windows 7; its firewall is set to allow file sharing from any computer in our /16 CIDR (the client, naturally, is in this large block).

How can I get the server to recognize the client? I can change settings on either.

Answer 1

It sounds like your client machine is not giving you the opportunity to specify credentials for the "share" username that you have created on your server.

In a workgroup environment, the easiest way to force Windows to log into a network share with specific credentials is as follows:

net use \\server\share /delete
net use \\server\share /user:server\username <password>

Mapping a drive letter to the share is optional, e.g.:

net use \\server\share /delete
net use S: /delete
net use S: \\server\share /user:server\username <password>

In your specific case, the username above would be "share".

By the way: how many clients are accessing this "server" concurrently? Windows 7 has a limit of 20 connections, up from 10 in Windows XP. It's been a long time since I've worked in an environment that was using a Windows client OS as a file server, but it seems plausible that, if the limit were reached, additional connections could be denied with a non-intuitive error message.

Answer 2

Take a look at the Credential Manager on the XP machine.

Control Panel -> User Accounts -> Manage My Network Passwords (on left of screen)

Here you will see a list of stored usernames\passwords and the server\share that they are used against.

Delete the server\share in question, and next time you connect to the share it should prompt you for a username and password.

Edit:

Another thing to check would be the number of open sessions on the Windows 7 machine hosting the share. Windows 7 has a limit of 10 concurrent sessions.

You can check this in computer management on the Windows 7 machine -

On the start menu right click "computer" and choose manage, then navigate to System Tools - Shared folders - Open Sessions.

Answer 3

This is caused by there not being a password on your account on the pc you are trying to connect From

Click through Control Panel - user accounts and set a password for your current login

then when you try to access the network share it will prompt for a username and password. use the correct one to access the share at this point.

Answer 4

Try typing 'net use' at the command prompt and see if any credentials for that server have been cached and delete accordingly.

Answer 5

Which versions of Windows are you running? Win7 Home Premium/Professional/Ultimate? Windows XP Home/Professional?

Do you have simple file sharing turned on or off?

Have you tried to map the share to a drive and tell it to connect using a different username?

Edit: I am also curious which system is throwing the account disabled error. Can you look in your event viewer to see? The event log should also tell you exactly which account it is referring to. My thought is that it is trying to use the Guest account.

Answer 6

Can you verify if you have Antivirus running on either of the machines? Also, check the Application Event Viewer when you get this error. You might get some clue there :)

Happy troubleshooting

Answer 7

My guess is that it has something to do with incompatible security settings in local or group policy. Look through the options in the Group Policy Editor on the Windows 7 box and see what you can find. It's most likely somewhere under: Computer Configuration --> Windows Settings --> Security Settings --> Local Policies --> User Rights Assignment or Security Options.

Are these domain members, by the way, or workgroup computers?

Note: Launch the Local Group Policy Editor by running "gpedit.msc" from the Run prompt.

Answer 8

I have several computers on a AD domain - and "suddenly" one of my Win7 boxes could not log into a Linux SMB share that I use as a main file store.

There were other machines, including Win7 machines, that were able to access it just fine.

The solution about editing the "Manage Credentials" list was spot on! I found a cached credential for the SMB server, deleted it, and all was well.

Answer 9

On the Win7 'server' is there a user with the same name as the user you're logged into the XP machine with? If so, you won't ever get a password prompt as Windows will try to use the session credentials by default, and this is failing with bad password instead of "user doesn't exist" which is why it's not asking you for replacement credentials.

In fact it might be that the account is disabled, so it's flat-out denying the connection, rather than spotting the bad password and asking you to retry.

Answer 10

You have to enable the Guest account on both ends of the anonymous share connection. However a 2008R2 server accessing an anonymous share will still prompt for a user name and password for some reason I have not tracked down yet. But typing in Guest with blank password makes the connection.