Re: Connecting to NetShare with Vista boxes...problem continues

If the fix Elvis proposes doesn't work investigate cifs. MS has been moving away from the Netbios ports (137, 138, 139 and the like) to the cifs port 445 It's possible that your old V5R1 machine doesn't have the proper support for Windoze Vista. After all V5R1 was at end of support about the time Vista was rumored. I don't have any evidence that this is the problem as we have *NO vista machines at this time though I still have a V5R1 AS/400. Just tossing out some things that may be gettin in yer way.

- Larry

Elvis Budimlic wrote:

Chad,
Coworker of mine got Vista Premium with his new Dell PC. It looks nice but
security is just pain the neck. And he regrets getting Premium instead of
one of the higher level editions.
Anyway, he had trouble getting to IFS on our systems and in the end ask me
for help. It took a while but this is the email I sent him:

=========================

I figured out the issue with vista & ifs. It has to do with comm protocol
authentication handshake settings. Usually you'd alter these with
Secpol.msc program (Security Policy Management applet), but that is not
available on Premium edition.

So instead, you'll have to go and hack the registry for Vista Premium
edition:

1. Run the registry editor and open this key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

2. If it doesn't already exist, create a DWORD value named

LmCompatibilityLevel

3. Set the value to 1

4. Reboot

=========================

Everything's been working for him since.
Hope that helps you or others in similar situation.

Elvis

Celebrating 10-Years of SQL Performance Excellence
http://centerfieldtechnology.com/training.asp

-----Original Message-----
Subject: Connecting to NetShare with Vista boxes...problem continues

Hello all,
Awhile ago I posted on the PCTECH list that I was
having problems accessing a shared drive on our
iSeries with new Vista machines. I finally have found
some time to delve back into this issue and am once
again not succeeding.
A quick summary, we have 3 brand new Dell's running
Vista Business, all current with updates. I have all
of the Vista "enhancements" turned off, there does not
seem to be any security getting in the way. These
boxes are reaching internet, sharing with each other,
and sharing with older 2000 and XP machines that are
in the office without issue.
Our internal iSeries is a 270 running v5r1 that we
have run our office share off of for many years. This
is an extremely vanilla network. No domains, no
enhanced security, or anything that should get in the
way. Every win98, win2000 and winXP machine that we
have had in this office will connect to this share in
a matter of seconds.
The Vista boxes will not connect to this share. I can
ping the machine name, telnet, 5250, and ftp to this
machine fine. But no netshare. The 270 happens to be
out dhcp server as well, and the vista machines get an
IP no problem. I have tried all machine and user
naming conventions you can imagine and this does not
help

I have just as of today finished with the most
current PTF CUM and Hypers on this v5r1 machine hoping
that was the issue. All of these installed
successfully, but they did not fix the issue.

Now to make it more confusing is that we have an
external 800 running v5r2 that we can connect to
through firewall ip filtering, but this is still very
vanilla, no VPN. From these vista machines I CAN
EASILY connect to the Net Share that we are running on
the 800. File transfer works like a charm, no issues
at all.
>From what I have looked at the netshare on the two
machines are set up identically simple. I can not see
any server side settings that would prevent this. The
vista machines will pop up saying "unexpected network
error" but if you diagnose it, Vista tells you
everything is fine.
So, any of you out there getting Vista to access your
shares on a v5r1 machine? Anything different between
v5r1 and v5r2 that I missed that could be causing this
issue? This is either impossible, or I am missing
something so simple it's ridiculous.
Sorry for the long post but we are sort of at a loss
here. We call Dell support and after so long they say
"You have tried everything we can tell you to try, you
will have to contact Microsoft for more assistance".
Call Microsoft and they say "You bought it from Dell,
you have to call them for support".

Any ideas are greatly appreciated. I'm up for trying
anything.

Thank, Chad