Troubleshooting › Boot Server Share Access Restrictions on Windows Server 2003, 2008, and XP

Boot Server Share Access Restrictions on Windows Server 2003, 2008, and XP

Symptom:

Accessing the boot server's DOS share from the OSIM client fails with an "Access Denied" error message or results in "Error 93".

Solution:

You need to configure the security settings of the boot server share.

Perform the following steps depending on the boot server operating system:

Windows 2003 or Windows 2008 boot servers:

1. From the Control Panel, navigate to Administrative Tools, Local Security Policy, Security Settings, Local Policies, Security Options.

   The security settings pertaining to the local security policy appear.

2. Ensure that the following policies have the required settings as given below:
   • Microsoft Network server: Digitally sign communication (always) is disabled.
   • Network security: Do not store LAN Manager hash value on next password change is disabled.

     Note: You must restart the boot server after changing this configuration.

   • Network security: LAN Manager Authentication level is set to one of the following values:
     • Send LM & NTLM responses
     • Send LM & NTLM - use NTLMv2 session security if negotiated
     • Sent NTLM response only
     • Send NTLMv2 response only

Windows XP boot servers:

The boot server on Windows XP must have extended file-sharing support. Therefore, you must deactivate the "Use simple file sharing" option. From the Windows Explorer, click Tools, Folder Options, click the View tab, and then clear the "Use simple file sharing" check box.

Note: Boot Server on Windows XP SP3 cannot provide shares for DOS access.