Help with long term network problem

[Gallon_Jug]

Network problem

I have searched and read solutions on virtually every networking site I
could find to solve this network problem to no avail. I even offered
to pay a networking specialist who logged into the computers remotely
and gave up w/o any help in the end.

I have run browstat status, IPCONFIG /all etc. and have info for each
computer.

Here is a brief summary of the situation.

I have had networking up and running w/o problems for years in a small
office environment. I am a conservation biologist form the USA living
and working in Central America. All computers are running WINXP Pro
with SP2 OS. I have a wireless router connected to a satellite ISP.
The problem began the moment I attempted to connect a laptop to the
network via the wireless router. Full Internet security is in place
with firewall and antivirus all up to date. All computers have been
removed form the network and scanned for malware and all are clean.

· All computers on the network have full access the internet via the
router w/o a problem.
· Router is set with static IP addresses using MAC address and IP
address. Not using DHCP (although this has been toggled on and off to
see if that helped - it did not)
· All network cables are connected and working w/o problems.
· An HP Color laser printer that is only on the network with separate
IP address is accessible form all computers.
· All have basic NetBIOS- TCP/IP set up.
· On computer is being used as a "server" for shared files and a
shared B&W Laser printer.
· Network consists of 4 desktops wired directly to network switch
connected to router and intermittently 1-3 notebook computers
connecting via wireless.
· IPCONFIG verifies all computers are set as NODE TYPE Broadcast (was
Hybrid on all but changed based on several recommendations- no change),
IP routing NO, WINS no DHCP no.
· All computers set to classic sharing.
· All passwords and sharing is set as it has been for years and
worked.
· Computers can no longer connect to each other to share files or
access the shared B&W printer.
· If the acting server is rebooted it will allow one computer to
connect for anywhere from several minutes to hours then connection
becomes unavailable with the connection not restored on mapped drive
and message Local Device Name is already in USE.
· Only one computer can make the connection and the other 3 are not
able to connect.
· Network is set as a workgroup. The name has been changed several
times to reset everything to no avail.
· The Microsoft Windows Network either shows all computers under work
group or not.
· Not all computers are accessible from this link in Explorer.
· Browser service is activated on all computers. When BROWSTAT
status is run either the report indicates browser services are active
or randomly not.
· I have tried removing the ISP connection from the router and taken
down the firewalls on all computers and still have ping problems
between computers. Response varies depending on the cold boot sequence
of starting computers.

I am very very worried as I have not been able to complete full backups
for many months to computer acting as server and has the tape drive.
Idividual computers are backing up to local connected exteranal HDs but
I need to run FULL system wide BU to tape for remote off-site storage.

 

[Chuck]

Network problem

I have searched and read solutions on virtually every networking site I
could find to solve this network problem to no avail. I even offered
to pay a networking specialist who logged into the computers remotely
and gave up w/o any help in the end.

I have run browstat status, IPCONFIG /all etc. and have info for each
computer.

Here is a brief summary of the situation.

I have had networking up and running w/o problems for years in a small
office environment. I am a conservation biologist form the USA living
and working in Central America. All computers are running WINXP Pro
with SP2 OS. I have a wireless router connected to a satellite ISP.
The problem began the moment I attempted to connect a laptop to the
network via the wireless router. Full Internet security is in place
with firewall and antivirus all up to date. All computers have been
removed form the network and scanned for malware and all are clean.

· All computers on the network have full access the internet via the
router w/o a problem.
· Router is set with static IP addresses using MAC address and IP
address. Not using DHCP (although this has been toggled on and off to
see if that helped - it did not)
· All network cables are connected and working w/o problems.
· An HP Color laser printer that is only on the network with separate
IP address is accessible form all computers.
· All have basic NetBIOS- TCP/IP set up.
· On computer is being used as a "server" for shared files and a
shared B&W Laser printer.
· Network consists of 4 desktops wired directly to network switch
connected to router and intermittently 1-3 notebook computers
connecting via wireless.
· IPCONFIG verifies all computers are set as NODE TYPE Broadcast (was
Hybrid on all but changed based on several recommendations- no change),
IP routing NO, WINS no DHCP no.
· All computers set to classic sharing.
· All passwords and sharing is set as it has been for years and
worked.
· Computers can no longer connect to each other to share files or
access the shared B&W printer.
· If the acting server is rebooted it will allow one computer to
connect for anywhere from several minutes to hours then connection
becomes unavailable with the connection not restored on mapped drive
and message Local Device Name is already in USE.
· Only one computer can make the connection and the other 3 are not
able to connect.
· Network is set as a workgroup. The name has been changed several
times to reset everything to no avail.
· The Microsoft Windows Network either shows all computers under work
group or not.
· Not all computers are accessible from this link in Explorer.
· Browser service is activated on all computers. When BROWSTAT
status is run either the report indicates browser services are active
or randomly not.
· I have tried removing the ISP connection from the router and taken
down the firewalls on all computers and still have ping problems
between computers. Response varies depending on the cold boot sequence
of starting computers.

I am very very worried as I have not been able to complete full backups
for many months to computer acting as server and has the tape drive.
Idividual computers are backing up to local connected exteranal HDs but
I need to run FULL system wide BU to tape for remote off-site storage.

If the problem started when you connected wireless computers, I'd suspect that
the wireless computers are trying to act as the master browser. This will be a
problem. You have to keep the browser infrastructure stable; if WiFi computers
are acting as the master browser, you'll have problems.
<http://nitecruzr.blogspot.com/2005/04/nt-browser-or-why-cant-i-always-see.html
http://nitecruzr.blogspot.com/2005/04/nt-browser-or-why-cant-i-always-see.html

Let's start by looking at the browstat and ipconfig logs. Be sure to include
some desktops and some laptops, so we can get a good sample of the problem.

 

[Gallon_Jug]

Here are two reports

First is NEOABT my workstation:

Status for domain WCSBZ on transport
\Device\NetBT_Tcpip_{CF0813A7-220D-429B-A2DA-8FC2566D4BB8}
Browsing is active on domain.
Master browser name is: NEOBAT
Master browser is running build 2600
1 backup servers retrieved from master NEOBAT
\\NEOBAT
There are 3 servers in domain WCSBZ on transport
\Device\NetBT_Tcpip_{CF0813A7-220D-429B-A2DA-8FC2566D4BB8}
There are 1 domains in domain WCSBZ on transport
\Device\NetBT_Tcpip_{CF0813A7-220D-429B-A2DA-8FC2566D4BB8}
Usage: BROWSTAT LISTWFW <Domain>
List WFW servers that are actually running browser.

Windows IP Configuration Host Name . . . . . . . . . . . . :
NEOBAT Primary Dns Suffix . . . . . . . : Node Type .
.. . . . . . . . . . . : Broadcast IP Routing Enabled. . . . . .
.. . : No WINS Proxy Enabled. . . . . . . . : No Ethernet
adapter Local Area Connection: Connection-specific DNS Suffix
.. : Description . . . . . . . . . . . : Intel(R) PRO/1000 MTW
Network Connection Physical Address. . . . . . . . . :
00-12-3F-3B-29-A3 Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.4 Subnet Mask .
.. . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . .
.. . . : 192.168.0.10 DNS Servers . . . . . . . . . . . :
66.82.4.8 66.82.4.12
Computer DATA (used as file and print server)
For DATA

Status for domain WCSBZ on transport
\Device\NetBT_Tcpip_{1F02A786-7D73-4DC3-8F1B-3E88A6152BD3}
Browsing is active on domain.
Master name cannot be determined from GetAdapterStatus. Using
\\NEOBAT
Could not connect to registry, error = 53 Unable to determine
build of browser master: 53
Unable to determine server information for browser master: 53
1 backup servers retrieved from master NEOBAT
\\NEOBAT
Unable to retrieve server list from NEOBAT: 53
Usage: BROWSTAT LISTWFW <Domain>
List WFW servers that are actually running browser.

Windows IP Configuration Host Name . . . . . . . . . . . . :
Data Primary Dns Suffix . . . . . . . : Node Type . .
.. . . . . . . . . . : Broadcast IP Routing Enabled. . . . . . .
.. : No WINS Proxy Enabled. . . . . . . . : No Ethernet adapter
Local Area Connection 2: Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : 3Com 10/100 PCI NIC w/3XP
(3CR990-TX-97) Physical Address. . . . . . . . . :
00-50-DA-C9-AD-32 Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.2 Subnet Mask .
.. . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . .
.. . . : 192.168.0.10 DNS Servers . . . . . . . . . . . :
66.82.4.8 66.82.4.12

 

[Gallon_Jug]

For CMM computer
Windows IP Configuration
Host Name . . . . . . . . . . . . : CMM
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
Ethernet adapter Local Area Connection: Connection-specific DNS
Suffix . : Description . . . . . . . . . . . : CNet PRO200WL
PCI Fast Ethernet Adapter Physical Address. . . . . . . . . :
00-08-A1-22-B8-66
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.3
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.10
DNS Servers . . . . . . . . . . . : 66.82.4.8
66.82.4.12
Status for domain WCSBZ on transport
\Device\Nbf_NdisWanNbfIn{D33B0F75-10D0-41B4-8D98-BAF074274180}
Browsing is NOT active on domain.
Master name cannot be determined from GetAdapterStatus.

Status for domain WCSBZ on transport
\Device\Nbf_NdisWanNbfOut{2D26AC41-8B7A-47D6-B741-8E2F09B7EF2E}
Browsing is NOT active on domain.
Master name cannot be determined from GetAdapterStatus.

Status for domain WCSBZ on transport
\Device\Nbf_NdisWanNbfOut{AC7EE5E1-5393-4BE0-8D63-37CC52122AA7}
Browsing is NOT active on domain.
Master name cannot be determined from GetAdapterStatus.

Status for domain WCSBZ on transport
\Device\Nbf_NdisWanNbfOut{67922D76-B361-4EA3-90E4-C1118A2407CD}
Browsing is NOT active on domain.
Master name cannot be determined from GetAdapterStatus.

Status for domain WCSBZ on transport
\Device\Nbf_NdisWanNbfIn{26EA83C6-700B-4DCC-83CD-FE887D9322B1}
Browsing is NOT active on domain.
Master name cannot be determined from GetAdapterStatus.

Status for domain WCSBZ on transport
\Device\Nbf_NdisWanNbfIn{C6DDE2D3-DBE3-4B30-9386-95F780AC0AF3}
Browsing is NOT active on domain.
Master name cannot be determined from GetAdapterStatus.

Status for domain WCSBZ on transport
\Device\Nbf_{D97AE573-CE7F-418B-B2DD-DBFE7FE6D097}
Browsing is NOT active on domain.
Master name cannot be determined from GetAdapterStatus.

Status for domain WCSBZ on transport
\Device\NetBT_Tcpip_{D97AE573-CE7F-418B-B2DD-DBFE7FE6D097}
Browsing is NOT active on domain.
Master name cannot be determined from GetAdapterStatus.

 

[Chuck]

Here are two reports

First is NEOABT my workstation:

Status for domain WCSBZ on transport
\Device\NetBT_Tcpip_{CF0813A7-220D-429B-A2DA-8FC2566D4BB8}
Browsing is active on domain.
Master browser name is: NEOBAT
Master browser is running build 2600
1 backup servers retrieved from master NEOBAT
\\NEOBAT
There are 3 servers in domain WCSBZ on transport
\Device\NetBT_Tcpip_{CF0813A7-220D-429B-A2DA-8FC2566D4BB8}
There are 1 domains in domain WCSBZ on transport
\Device\NetBT_Tcpip_{CF0813A7-220D-429B-A2DA-8FC2566D4BB8}
Usage: BROWSTAT LISTWFW <Domain>
List WFW servers that are actually running browser.

Windows IP Configuration Host Name . . . . . . . . . . . . :
NEOBAT Primary Dns Suffix . . . . . . . : Node Type .
. . . . . . . . . . . : Broadcast IP Routing Enabled. . . . . .
. . : No WINS Proxy Enabled. . . . . . . . : No Ethernet
adapter Local Area Connection: Connection-specific DNS Suffix
. : Description . . . . . . . . . . . : Intel(R) PRO/1000 MTW
Network Connection Physical Address. . . . . . . . . :
00-12-3F-3B-29-A3 Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.4 Subnet Mask .
. . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . .
. . . : 192.168.0.10 DNS Servers . . . . . . . . . . . :
66.82.4.8 66.82.4.12
Computer DATA (used as file and print server)
For DATA

Status for domain WCSBZ on transport
\Device\NetBT_Tcpip_{1F02A786-7D73-4DC3-8F1B-3E88A6152BD3}
Browsing is active on domain.
Master name cannot be determined from GetAdapterStatus. Using
\\NEOBAT
Could not connect to registry, error = 53 Unable to determine
build of browser master: 53
Unable to determine server information for browser master: 53
1 backup servers retrieved from master NEOBAT
\\NEOBAT
Unable to retrieve server list from NEOBAT: 53
Usage: BROWSTAT LISTWFW <Domain>
List WFW servers that are actually running browser.

Windows IP Configuration Host Name . . . . . . . . . . . . :
Data Primary Dns Suffix . . . . . . . : Node Type . .
. . . . . . . . . . : Broadcast IP Routing Enabled. . . . . . .
. : No WINS Proxy Enabled. . . . . . . . : No Ethernet adapter
Local Area Connection 2: Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : 3Com 10/100 PCI NIC w/3XP
(3CR990-TX-97) Physical Address. . . . . . . . . :
00-50-DA-C9-AD-32 Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.2 Subnet Mask .
. . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . .
. . . : 192.168.0.10 DNS Servers . . . . . . . . . . . :
66.82.4.8 66.82.4.12

OK, this is a start, but only that.
# No computers show any signs of gratuitous protocols or transports, just NetBT.
# Both computers are on the same subnet 192.168.0/24, with same default gateway
192.168.0.10 and same DNS servers.
# Both computers show Node Type = Broadcast.
# Both computers are on the same domain / workgroup WCSBZ, and both acknowledge
same master browser NEOBAT.
# Computer NEOBAT sees 3 servers.
# Computer DATA cannot provide a server list because of an error 53 accessing
NEOBAT.

Please start with my article Error = 53. Make sure that the Remote Registry
service is running on Neobat.
<http://nitecruzr.blogspot.com/2005/06/mysterious-error-53-aka-name-not-found.html>
http://nitecruzr.blogspot.com/2005/06/mysterious-error-53-aka-name-not-found.html

And look at Neobat for a misconfigured or overlooked personal firewall, or other
security component. There are several other possibilities too, and any might be
the cause of your problem. Read this article with an open mind.
<http://nitecruzr.blogspot.com/2005/10/irregularities-in-workgroup-visibility.html>
http://nitecruzr.blogspot.com/2005/10/irregularities-in-workgroup-visibility.html

Note that running "browstat listwfw" is a waste of time. You should run
"browstat listwfw wcsbz" if and only if you have computers with Windows 9x (95,
98, ME).
<http://nitecruzr.blogspot.com/2005/05/browstat-utility-from-microsoft.html#Error53>
http://nitecruzr.blogspot.com/2005/05/browstat-utility-from-microsoft.html#Error53

And provide a complete inventory of all computers involved, plus browstat and
ipconfig from at least one other desktop client, and one laptop.

 

[Chuck]

For CMM computer
Windows IP Configuration
Host Name . . . . . . . . . . . . : CMM
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
Ethernet adapter Local Area Connection: Connection-specific DNS
Suffix . : Description . . . . . . . . . . . : CNet PRO200WL
PCI Fast Ethernet Adapter Physical Address. . . . . . . . . :
00-08-A1-22-B8-66
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.3
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.10
DNS Servers . . . . . . . . . . . : 66.82.4.8
66.82.4.12
Status for domain WCSBZ on transport
\Device\Nbf_NdisWanNbfIn{D33B0F75-10D0-41B4-8D98-BAF074274180}
Browsing is NOT active on domain.
Master name cannot be determined from GetAdapterStatus.

Status for domain WCSBZ on transport
\Device\Nbf_NdisWanNbfOut{2D26AC41-8B7A-47D6-B741-8E2F09B7EF2E}
Browsing is NOT active on domain.
Master name cannot be determined from GetAdapterStatus.

Status for domain WCSBZ on transport
\Device\Nbf_NdisWanNbfOut{AC7EE5E1-5393-4BE0-8D63-37CC52122AA7}
Browsing is NOT active on domain.
Master name cannot be determined from GetAdapterStatus.

Status for domain WCSBZ on transport
\Device\Nbf_NdisWanNbfOut{67922D76-B361-4EA3-90E4-C1118A2407CD}
Browsing is NOT active on domain.
Master name cannot be determined from GetAdapterStatus.

Status for domain WCSBZ on transport
\Device\Nbf_NdisWanNbfIn{26EA83C6-700B-4DCC-83CD-FE887D9322B1}
Browsing is NOT active on domain.
Master name cannot be determined from GetAdapterStatus.

Status for domain WCSBZ on transport
\Device\Nbf_NdisWanNbfIn{C6DDE2D3-DBE3-4B30-9386-95F780AC0AF3}
Browsing is NOT active on domain.
Master name cannot be determined from GetAdapterStatus.

Status for domain WCSBZ on transport
\Device\Nbf_{D97AE573-CE7F-418B-B2DD-DBFE7FE6D097}
Browsing is NOT active on domain.
Master name cannot be determined from GetAdapterStatus.

Status for domain WCSBZ on transport
\Device\NetBT_Tcpip_{D97AE573-CE7F-418B-B2DD-DBFE7FE6D097}
Browsing is NOT active on domain.
Master name cannot be determined from GetAdapterStatus.

OK, this is getting better. CMM has NetBEUI protocol, and NetBT. Make sure
that NetBT is explicitly Enabled on all computers, and remove NETBEUI.
<http://nitecruzr.blogspot.com/2005/05/fix-network-problems-but-clean-up.html>
http://nitecruzr.blogspot.com/2005/05/fix-network-problems-but-clean-up.html

When you manually assign IP addresses, are all computers getting unique
addresses? Do all computers have consistent Internet service?

 

[Gallon_Jug]

YES all IP addresses are unique and no duplication.

Will remove the Nebeui crom CMM, thought I had done so previously.

Will once again look at you error 53 messages, have follwed that
exhaustively before and when I reboot computer DATA some of that goes
away for awhile ehn comes back after 20 minutes or more so I have been
suspecting browser problems.

 

[Gallon_Jug]

Remote registry service on NEOBAT is started and running

All computers can ping the router and have consistent access to the
Internet.

 

[Chuck]

YES all IP addresses are unique and no duplication.

Will remove the Nebeui crom CMM, thought I had done so previously.

Will once again look at you error 53 messages, have follwed that
exhaustively before and when I reboot computer DATA some of that goes
away for awhile ehn comes back after 20 minutes or more so I have been
suspecting browser problems.

Be persistent and imaginative. I've listed all of the KNOWN causes for the
error = 53. The Remote Registry service issue we just discovered a couple
months ago. Maybe there are more. If you find a new cause, you won't be the
only one to benefit.

Read my browser article, and the linked Microsoft article. There's a lot of
detail in the MS article that might apply to your situation.
<http://nitecruzr.blogspot.com/2005/04/nt-browser-or-why-cant-i-always-see.html>
http://nitecruzr.blogspot.com/2005/04/nt-browser-or-why-cant-i-always-see.html

And keep posting here. Even if nobody here can help you today, there might be
somebody new here next month.

 

[Gallon_Jug]

I have disconnected the ISP and router from the network switch and
taken down all fire walls on the three computers and still have error
53 on Browstat status on DATA.
On CMM I have error message =5
All report Browsing is active on domain but Master name can not be
determined form GetAdapterStatus Using \\NEOBAT
Could not connect to registry, error = 53 or =5

So this does not seem like a firewall issue?

Firewall back up on all computers to connect again

 

[Gallon_Jug]

Can I simply disable Browser services on the WIFI connecting computers
to avoid the problems?

 

[Chuck]

Can I simply disable Browser services on the WIFI connecting computers
to avoid the problems?

The best approach to avoid a browser conflict is to identify 2 computers that
absolutely will be up and online at all times, and make sure the browser service
is running on both. Then Stop and Disable the service on all others, including
any mobile or wireless ones.
<http://nitecruzr.blogspot.com/2005/04/nt-browser-or-why-cant-i-always-see.html#Prevent>
http://nitecruzr.blogspot.com/2005/04/nt-browser-or-why-cant-i-always-see.html#Prevent

BUT you have another problem. The error = 53 did not come from a simple browser
conflict, nor is it your main problem - it's just a symptom. Please read about
personal firewalls and other security components, and the problems that they may
cause.
<http://nitecruzr.blogspot.com/2005/05/your-personal-firewall-can-either-help.html>
http://nitecruzr.blogspot.com/2005/05/your-personal-firewall-can-either-help.html

When you kill the browser on the extra computers, you'll likely get more
problems. But those problems are symptoms of the greater problem. You're going
to have to solve the greater problem.
<http://nitecruzr.blogspot.com/2005/08/solving-network-problems-tutorial.html>
http://nitecruzr.blogspot.com/2005/08/solving-network-problems-tutorial.html

 

[Gallon_Jug]

Hi Chuck,

OK I have stopped and disabled all browser services ecept on two
primary desktops.

We are not using MS Windows Firewall but Panda Internet Security. It
has run fine for a few years w/o any conflicts. Any experience with
it? Seems to be excellent at stopping hackers etc. and has loads of
tweakable settings that include allowing TCP/IP communications from
trusted Network cards that are listed by address. I can also allow or
block specific ports if necessary.

I will once again read through your listings as I have for the past 2
months, but have yet to isolate a possible cause or find a fix. If
nothing else I am persistant.

Thanks.

Chees from the jundles of Belize,
Bruce

 

[Chuck]

I have disconnected the ISP and router from the network switch and
taken down all fire walls on the three computers and still have error
53 on Browstat status on DATA.
On CMM I have error message =5
All report Browsing is active on domain but Master name can not be
determined form GetAdapterStatus Using \\NEOBAT
Could not connect to registry, error = 53 or =5

So this does not seem like a firewall issue?

Firewall back up on all computers to connect again

Bruce,

The "error = 5" ("access denied") and "error = 53" ("name not found") symptoms
can have several causes.
# No connection to the host in question.
# Connection, but blocked by personal firewall or other network level security
component.
# Connection, but blocked by permissions (authentication / authorisation).
That's a very brief summary. You might find my articles more complete.
<http://nitecruzr.blogspot.com/2005/06/mysterious-error-5-aka-access-denied.html>
http://nitecruzr.blogspot.com/2005/06/mysterious-error-5-aka-access-denied.html
<http://nitecruzr.blogspot.com/2005/06/mysterious-error-53-aka-name-not-found.html>
http://nitecruzr.blogspot.com/2005/06/mysterious-error-53-aka-name-not-found.html

Personal firewalls here are known for causing problems, even when "taken down".
<http://nitecruzr.blogspot.com/2005/05/your-personal-firewall-can-either-help.html>
http://nitecruzr.blogspot.com/2005/05/your-personal-firewall-can-either-help.html

You said WinXP Pro. Is it with Simple File Sharing, or Advanced File Sharing?
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Simple>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Simple

 

[Chuck]

Hi Chuck,

OK I have stopped and disabled all browser services ecept on two
primary desktops.

We are not using MS Windows Firewall but Panda Internet Security. It
has run fine for a few years w/o any conflicts. Any experience with
it? Seems to be excellent at stopping hackers etc. and has loads of
tweakable settings that include allowing TCP/IP communications from
trusted Network cards that are listed by address. I can also allow or
block specific ports if necessary.

I will once again read through your listings as I have for the past 2
months, but have yet to isolate a possible cause or find a fix. If
nothing else I am persistant.

Thanks.

Chees from the jundles of Belize,
Bruce

Bruce,

I have no doubt that Panda is a fine software product. I have to keep wondering
if those that named it looked at the initials though?

By "run fine", I take it you mean all computers were protected but it caused no
file sharing problems as you are experiencing now? Thinking carefully, can
you recall any system changes, about the time when you connected the first
laptop to the network? Are you aware of the Windows Update selection "Review
your update history"? Have you tried that, on NEOBAT and the others?

Did you remove NetBEUI from CMM? Did you rerun browstat to verify its
successful removal?

I would suggest that you run browstat and ipconfig on each computer, including
the laptops, and labouriously compare each with the other. Post each here,
again, if necessary.
<http://nitecruzr.blogspot.com/2005/05/browstat-utility-from-microsoft.html>
http://nitecruzr.blogspot.com/2005/05/browstat-utility-from-microsoft.html
<http://nitecruzr.blogspot.com/2005/05/reading-ipconfig-and-diagnosing.html>
http://nitecruzr.blogspot.com/2005/05/reading-ipconfig-and-diagnosing.html

 

[Gallon_Jug]

Tnx again Chuck,

I see I did not answer one of your previous queries..

Advanced file sharing is in place on all machines.

Yes NetBeui was removed from CMM and machine rebooted.

I booted up the 4th computer and stopped and disabled browsing and also
edited registry as it was set a hybrid when I ran ipconfig /all and
changed to braodcast like all other.

But this machine does not connect to the network either- but full acces
to the router and internet.

the Panda Internet Security has not cased any file sahring problems. I
replaced the Symantec/Norton Antivirus on all machine about 2 years ago
after running into problems.

I will once again go through the step by step approach you have on your
site.
I see nothing under the Firewall section that applies other thanthere
could be some hidden factor connected with this that remains unknown.

Over the week end I could disconnect several computers from the router
and uninstall the Panda complely and run browstat status or try
pinging. THen reinstall and register it again.

The MS Network GURU who loggied into our sytem remotely tried pinging
but was unable to ping several computer on the network suggesting some
blocking somewhere.

MS Firewall is OFF with Panda running. I can turn Off Panda FW adn
turn on the MS Firewall if there is any benefit to that?

 

[Gallon_Jug]

Browstat status for DATA now
Status for domain WCSBZ on transport
\Device\NetBT_Tcpip_{1F02A786-7D73-4DC3-8F1B-3E88A6152BD3}
Browsing is active on domain.
Master name cannot be determined from GetAdapterStatus. Using
\\NEOBAT
Could not connect to registry, error = 5
Unable to determine build of browser master: 5
Unable to determine server information for browser master: 5
1 backup servers retrieved from master NEOBAT
\\NEOBAT
There are 4 servers in domain WCSBZ on transport
\Device\NetBT_Tcpip_{1F02A786-7D73-4DC3-8F1B-3E88A6152BD3}
There are 2 domains in domain WCSBZ on transport
\Device\NetBT_Tcpip_{1F02A786-7D73-4DC3-8F1B-3E88A6152BD3}

This is result of Dell-8400 Browstat status
Status for domain WCSBZ on transport
\Device\NetBT_Tcpip_{D36A89D0-B62B-4C28-8BFC-35C5C6B66222}
Browsing is NOT active on domain.
Master name cannot be determined from GetAdapterStatus.

Again for Dell-8400
Windows IP Configuration
Host Name . . . . . . . . . . . . : Dell8400
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme 57xx
Gigabit Controller
Physical Address. . . . . . . . . : 00-11-11-3D-F2-29
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.5
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.10
DNS Servers . . . . . . . . . . . : 66.82.4.8
66.82.4.12

NEOBAT again
Status for domain WCSBZ on transport
\Device\NetBT_Tcpip_{CF0813A7-220D-429B-A2DA-8FC2566D4BB8}
Browsing is active on domain.
Master browser name is: NEOBAT
Master browser is running build 2600
1 backup servers retrieved from master NEOBAT
\\NEOBAT
There are 4 servers in domain WCSBZ on transport
\Device\NetBT_Tcpip_{CF0813A7-220D-429B-A2DA-8FC2566D4BB8}
There are 2 domains in domain WCSBZ on transport
\Device\NetBT_Tcpip_{CF0813A7-220D-429B-A2DA-8FC2566D4BB8}

Notebook


Windows IP Configuration
Host Name . . . . . . . . . . . . : Dell_D510
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
Ethernet adapter Wireless Network Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/Wireless
2200BG Network Connection
Physical Address. . . . . . . . . : 00-13-CE-11-52-93
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.7
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.10
DNS Servers . . . . . . . . . . . : 66.82.4.8

66.82.4.12
Notebook Browstat status
Status for domain WCSBZ on transport
\Device\NetBT_Tcpip_{BAF7C207-B703-4D2A-9B58-97D3DF561B0F}
Browsing is active on domain.
Master name cannot be determined from GetAdapterStatus. Using
\\NEOBAT
Could not connect to registry, error = 53 Unable to determine
build of browser master: 53
Unable to determine server information for browser master: 53
1 backup servers retrieved from master NEOBAT
\\NEOBAT
Unable to retrieve server list from NEOBAT: 53

 

[Chuck]

Browstat status for DATA now
Status for domain WCSBZ on transport
\Device\NetBT_Tcpip_{1F02A786-7D73-4DC3-8F1B-3E88A6152BD3}
Browsing is active on domain.
Master name cannot be determined from GetAdapterStatus. Using
\\NEOBAT
Could not connect to registry, error = 5
Unable to determine build of browser master: 5
Unable to determine server information for browser master: 5
1 backup servers retrieved from master NEOBAT
\\NEOBAT
There are 4 servers in domain WCSBZ on transport
\Device\NetBT_Tcpip_{1F02A786-7D73-4DC3-8F1B-3E88A6152BD3}
There are 2 domains in domain WCSBZ on transport
\Device\NetBT_Tcpip_{1F02A786-7D73-4DC3-8F1B-3E88A6152BD3}

This is result of Dell-8400 Browstat status
Status for domain WCSBZ on transport
\Device\NetBT_Tcpip_{D36A89D0-B62B-4C28-8BFC-35C5C6B66222}
Browsing is NOT active on domain.
Master name cannot be determined from GetAdapterStatus.

Again for Dell-8400
Windows IP Configuration
Host Name . . . . . . . . . . . . : Dell8400
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme 57xx
Gigabit Controller
Physical Address. . . . . . . . . : 00-11-11-3D-F2-29
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.5
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.10
DNS Servers . . . . . . . . . . . : 66.82.4.8
66.82.4.12

NEOBAT again
Status for domain WCSBZ on transport
\Device\NetBT_Tcpip_{CF0813A7-220D-429B-A2DA-8FC2566D4BB8}
Browsing is active on domain.
Master browser name is: NEOBAT
Master browser is running build 2600
1 backup servers retrieved from master NEOBAT
\\NEOBAT
There are 4 servers in domain WCSBZ on transport
\Device\NetBT_Tcpip_{CF0813A7-220D-429B-A2DA-8FC2566D4BB8}
There are 2 domains in domain WCSBZ on transport
\Device\NetBT_Tcpip_{CF0813A7-220D-429B-A2DA-8FC2566D4BB8}

Notebook


Windows IP Configuration
Host Name . . . . . . . . . . . . : Dell_D510
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
Ethernet adapter Wireless Network Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/Wireless
2200BG Network Connection
Physical Address. . . . . . . . . : 00-13-CE-11-52-93
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.7
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.10
DNS Servers . . . . . . . . . . . : 66.82.4.8

66.82.4.12
Notebook Browstat status
Status for domain WCSBZ on transport
\Device\NetBT_Tcpip_{BAF7C207-B703-4D2A-9B58-97D3DF561B0F}
Browsing is active on domain.
Master name cannot be determined from GetAdapterStatus. Using
\\NEOBAT
Could not connect to registry, error = 53 Unable to determine
build of browser master: 53
Unable to determine server information for browser master: 53
1 backup servers retrieved from master NEOBAT
\\NEOBAT
Unable to retrieve server list from NEOBAT: 53

Bruce,

This is going to be fun. If you can take it that way, we can get started.

From your sample of diagnostics, I can see a couple significant symptoms:
# Browstats for Data and Neobat acknowledge Neobat as the master browser.
# Browstats for Data and Neobat both note a segmented workgroup ("There are 2
domains in domain WCSBZ").
# Browstat for Dell_D510 acknowledges Neobat as the master browser, but gets the
"error = 53" when trying to access its registry.
# Browstat for Dell8400 acknowledges no master browser.
# IPConfig for Dell8400 and Dell_D510 shows no gratuitous protocols, and shows
both computers on subnet 192.168.0/24, as Data and Neobat previously shown.

Comparing with previous diagnostics,
# Browstat for Data previous showed "error = 53" on Neobat, as Dell_D510 does
now.
# Browstat for Neobat previously showed 3 servers and 1 domain, and now shows 4
servers and 2 domains.

Now then, you have several problems, maybe related.
# Name resolution: "error = 53". Are all computers set up as Node Type =
Broadcast?
# Browser advertisement: "There are 2 domains in domain WCSBZ".
# Server access: "Could not connect to registry, error = 5".

Are all computers running NetBT? That is, has NetBT been explicitly Enabled in
TCP/IP Properties - Advanced - WINS? If so, you are going to have to look at
your personal firewalls. And in your case, looking at them means un installing
them on each computer. Since you're behind a router, you're protected from the
Internet. A personal firewall is generally significant, when used on a LAN and
behind a router, to protect each computer from the other computers.

Since your file sharing has problems, you need to start with no personal
firewalls. And I don't mean disabling them, I mean un installing each personal
firewall, from each computer, very thoroughly. I can't stress how thoroughly.
If you half do this, and you don't solve at least some of the above problems,
what are you going to do next? We need to eliminate PIS as a possible problem.

Hoping that you read my browser article, I now show you the Microsoft NT Browser
article, which has a section on Microsoft TCP/IP and Name Resolution.
<http://www.microsoft.com/technet/archive/winntas/deploy/prodspecs/ntbrowse.mspx?mfr=true>
http://www.microsoft.com/technet/archive/winntas/deploy/prodspecs/ntbrowse.mspx?mfr=true

That's where you need to start, for background information. Both name
resolution and server advertisement uses NetBIOS Over TCP broadcasts. Something
on the various computers - probably a personal firewall - is blocking the
broadcast packets, and causing the problems. That is, if NetBT is ENABLED on
EACH computer.

And did Dell_D510 has Internet access when the browstat was performed? Lack of
connectivity, however brief, could be a problem too. That will give
inconsistent results. Always make sure that every computer is reliably
connected, when performing any diagnostics.

I'll let you get to work reading this now. Don't be too long.

 

[Gallon_Jug]

Hi Chuck,

We are on a diferent time zone here no Day light time so 2 hours
different than you Pacific Time.

I will read through the MS paper you pointed to. I will set up the the
PIS so I can reinstall and register, but will remove it completely from
a few computers at a time and try pinging.

It will be Friday before I get back to this, I am persistant and I have
been working on this for nearly 2 months or more intermitantly. Being
20:30 here now I need to get on to other things and we are normally up
here at 04:30 and after I run int the morning I will tackle this again
after 07:30 here.

FYI I had the dude from the Chicago Web site who is also a MS Net
guru... he gave up after 3 days.

But seems he did not have the level of detail you have on your site.

Is there any benefit to running the CDIAG script you set up and
reporting?

Thanks,

Bruce

 

[Gallon_Jug]

One more thing. I read on one of the sites months ago was that you can
force a machine to be the master browser by editing the registry. I
lost my notes on that change and I may have edited the DATA computer
registry to force that. The Chicago guy had me edit some other stuff
but whn none of it worked I did a restore to previous date by a month
to clear all of those changes. In any case browser services are
stopped on the DATA computer now in any case.