Error Message: Access Denied; Specified User Is Not a Member of TelnetClients Group (298060)


The information in this article applies to:

  • Microsoft Windows XP Professional
This article was previously published under Q298060

SYMPTOMS

When you attempt to connect to a computer that is running Windows XP Professional, you can receive the following error message:
Access Denied: Specified user is not a member of TelnetClients group. Server administrator must add this user to the above group.

Telnet Server has closed the connection.

CAUSE

This behavior can occur because Windows XP, by default, forces all of the incoming network connections (except when they are joined to a domain) to a "guest" level of access. This default behavior ensures that an incoming connection has only guest-level access even if a username and password is specified. NTLM automatically authenticates any network connection that uses the local account credentials as a guest.

RESOLUTION

To work around this behavior, change the default behavior to enable the local administrator and the members of the TelnetClients group to connect to the network with their proper identities, not as guests:
  1. In Control Panel, double-click Administrative Tools.
  2. Click Local Security Policy.
  3. Locate the policy in the "Security Settings\Local Policies\Security Options\Network Access: Sharing and security model for local accounts" folder.
  4. Right-click the policy, and then click Properties.
  5. In the box, click Classic - local users authenticate as themselves.
  6. Click OK.

STATUS

This behavior is by design.
Modification Type:MinorLast Reviewed:1/15/2006
Keywords:kberrmsg kbnetwork kbprb KB298060
©2004 Microsoft Corporation. All rights reserved.