SP2 and inbound connections

[Guest]

Got 2 PCs that have this problem since they got SP2 installed - they are not
accepting external connections.

One - 'compliance' - has a printer that is shared out; a co-worker in that
office was able to print from her iMac to the 'compliance' PC until it got
SP2 installed. Now when we try to browse to that PC in the domain list (a
3rd-party PC-Mac app is installed on the Mac), we can hit almost any other PC
which will give us a "log in please" prompt but when we come to the
'compliance' PC, it simply stops and says "PC not found". you CAN ping the PC
and bring up the C$ share, so it has SOME connectivity.

The other - 'camp' - was brought down here as it was acting up after SP2 did
not complete installation. Un/reinstalled SP2 and it's running smoother - but
only thing - it is not allowing ANY inbound traffic other than Email / Web /
IM. For example, you can't even ping it OR access the C$ share - it's like
it's not there. Also, we are unable to connect to it using VNC OR remote
desktop.

In both cases, we have a group policy that prevents the firewall from
starting - these are the ONLY 2 so far that are not allowing connections. Our
network is behind a stout firewall, so we have no need for Windows' firewall
on our corporate machines.

any help in getting this resolved would be MUCH appreciated!

Dave

 

[Chuck]

On Wed, 23 Mar 2005 14:25:08 -0800, "Dave Dahle" <Dave

Got 2 PCs that have this problem since they got SP2 installed - they are not
accepting external connections.

One - 'compliance' - has a printer that is shared out; a co-worker in that
office was able to print from her iMac to the 'compliance' PC until it got
SP2 installed. Now when we try to browse to that PC in the domain list (a
3rd-party PC-Mac app is installed on the Mac), we can hit almost any other PC
which will give us a "log in please" prompt but when we come to the
'compliance' PC, it simply stops and says "PC not found". you CAN ping the PC
and bring up the C$ share, so it has SOME connectivity.

The other - 'camp' - was brought down here as it was acting up after SP2 did
not complete installation. Un/reinstalled SP2 and it's running smoother - but
only thing - it is not allowing ANY inbound traffic other than Email / Web /
IM. For example, you can't even ping it OR access the C$ share - it's like
it's not there. Also, we are unable to connect to it using VNC OR remote
desktop.

In both cases, we have a group policy that prevents the firewall from
starting - these are the ONLY 2 so far that are not allowing connections. Our
network is behind a stout firewall, so we have no need for Windows' firewall
on our corporate machines.

any help in getting this resolved would be MUCH appreciated!

Dave

Dave,

Let's look at these two computers, Compliance and Camp, as separate cases.

Look at Compliance. Do other computers also have trouble connecting to it?
I'll have diagnostics which I'll suggest that you run, from other Windows
computers, but for an iMac, I'll refer you to some useful websites.
http://www.macwindows.com
http://www.joelshoemaker.com
http://www.macosxhints.com/article.php?story=20031113060738627&query=...
http://www.macmend.com
http://www.chicagotech.net/browser.htm
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/netm...

Look at Camp. This sounds like a possible LSP/Winsock or TCP/IP problem.
http://support.microsoft.com/?id=318584
http://support.microsoft.com/?id=811259

1. Start - Run - "cmd".
2. Type "netsh winsock reset catalog" into the command window.

Give LSP-Fix <http://www.cexx.org/lspfix.htm>, WinsockFix
<http://www.tacktech.com/display.cfm?ttid=257>, or WinsockXPFix
<http://www.spychecker.com/program/winsockxpfix.html> a shot, if no success from
the netsh command.

If no help yet, reset TCP/IP.
http://support.microsoft.com/?id=299357

Start - Run - "cmd". Type "netsh int ip reset c:\netsh.txt" into the command
window.

Having researched the iMAC possibilities, and having checked the LSP/Winsock
situation on Camp, lets look at those two computers, PLUS a third Windows
computer with no known problem, that we will need as a control.

Please provide ipconfig information for at least those three computers.
Start - Run - "cmd" - Type "ipconfig /all >c:\ipconfig.txt" into the command
window. Open Notepad, make sure that Format - Word Wrap is NOT checked!, open
file c:\ipconfig.txt, copy and paste entire contents into your next post.
Identify operating system (by name, version, and SP level) with each ipconfig
listing.

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
My email is AT DOT
actual address pchuck sonic net.

 

[Guest]

Dave,

Let's look at these two computers, Compliance and Camp, as separate cases.

Look at Compliance. Do other computers also have trouble connecting to it?
I'll have diagnostics which I'll suggest that you run, from other Windows
computers, but for an iMac, I'll refer you to some useful websites.
http://www.macwindows.com
http://www.joelshoemaker.com
http://www.macosxhints.com/article.php?story=20031113060738627&query=...
http://www.macmend.com
http://www.chicagotech.net/browser.htm
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/netm...

Look at Camp. This sounds like a possible LSP/Winsock or TCP/IP problem.
http://support.microsoft.com/?id=318584
http://support.microsoft.com/?id=811259

1. Start - Run - "cmd".
2. Type "netsh winsock reset catalog" into the command window.

Give LSP-Fix <http://www.cexx.org/lspfix.htm>, WinsockFix
<http://www.tacktech.com/display.cfm?ttid=257>, or WinsockXPFix
<http://www.spychecker.com/program/winsockxpfix.html> a shot, if no success from
the netsh command.

If no help yet, reset TCP/IP.
http://support.microsoft.com/?id=299357

Start - Run - "cmd". Type "netsh int ip reset c:\netsh.txt" into the command
window.

Having researched the iMAC possibilities, and having checked the LSP/Winsock
situation on Camp, lets look at those two computers, PLUS a third Windows
computer with no known problem, that we will need as a control.

Please provide ipconfig information for at least those three computers.
Start - Run - "cmd" - Type "ipconfig /all >c:\ipconfig.txt" into the command
window. Open Notepad, make sure that Format - Word Wrap is NOT checked!, open
file c:\ipconfig.txt, copy and paste entire contents into your next post.
Identify operating system (by name, version, and SP level) with each ipconfig
listing.

Let's use mine as a control then... it is and always has been set for full
DHCP - present IP 192.168.1.120

re: OS, ALL 3 PCs are Windows XP with SP2 installed (mine was upgraded to
SP2 manually, but the other 2 had it pushed via SUS).

The iMac has OS X 10.3.8 and uses the admitMac software from Thursby - this
is already being used successfully on the Macs in our graphic arts department
(this staffer used to be in that department and don't wanna go PC )

Normally, the 'Compliance' PC has no resources shared out but like I said, I
have no problem pinging it or pulling up the C$ share. It has a static IP -
192.168.1.204 (for 1/1 NAT to allow incoming video calls via Netmeeting). The
sole reason for sharing out the printer was so the iMac user can print out
documents that would not be advisable to print to the common printer in the
breakroom.

The 'camp' PC is presently set for DHCP (present IP 192.168.1.147) since
it's down here, but when it's back up in the office, it too has a static IP
for 1/1 NAT for incoming video calls (its regular IP is 192.168.17.253)

This is all the info I can pull up for now - as soon as practical, I'll give
more info. I'll try the solutions to get the 'camp' PC back up as that staff
person returns Monday.

Dave

 

[Guest]

The 'camp' computer is fixed! Yay!

(the netshell utility did the trick)

Dave

 

[Chuck]

The 'camp' computer is fixed! Yay!

(the netshell utility did the trick)

Dave

One down, one to go. Thanks for the update.

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
My email is AT DOT
actual address pchuck sonic net.

 

[Guest]

Just a VERY delayed follow-on to / closing summary of this issue.

Never did get the 'Compliance' machine to accept printer traffic from the
iMac, so I ended up changing the printer over to a networked one (HP
JetDirect) and the assistant was able to print to it at long last.

Case closed...

Dave