Microsoft KB Archive/298060

= Error Message: Access Denied; Specified User Is Not a Member of TelnetClients Group =

Article ID: 298060

Article Last Modified on 1/15/2006

-

APPLIES TO


 * Microsoft Windows XP Professional

-



This article was previously published under Q298060



SYMPTOMS
When you attempt to connect to a computer that is running Windows XP Professional, you can receive the following error message:

Access Denied: Specified user is not a member of TelnetClients group. Server administrator must add this user to the above group.

Telnet Server has closed the connection.



CAUSE
This behavior can occur because Windows XP, by default, forces all of the incoming network connections (except when they are joined to a domain) to a &quot;guest&quot; level of access. This default behavior ensures that an incoming connection has only guest-level access even if a username and password is specified. NTLM automatically authenticates any network connection that uses the local account credentials as a guest.



RESOLUTION
To work around this behavior, change the default behavior to enable the local administrator and the members of the TelnetClients group to connect to the network with their proper identities, not as guests:
 * 1) In Control Panel, double-click Administrative Tools.
 * 2) Click Local Security Policy.
 * 3) Locate the policy in the &quot;Security Settings\Local Policies\Security Options\Network Access: Sharing and security model for local accounts&quot; folder.
 * 4) Right-click the policy, and then click Properties.
 * 5) In the box, click Classic - local users authenticate as themselves.
 * 6) Click OK.



STATUS
This behavior is by design.

Keywords: kberrmsg kbnetwork kbprb KB298060

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.