XP-SP2 Pro cannot map or see drives on XP-SP2 Home

[Richard Fink]

HELP: XP-Pro cannot map or see drives on XP-SP2 Home -

1) Simple File Sharing is ON in XP Pro
2) Firewalls are off on both machines.
3) NetBIOS setting is now "Enable NetBIOS over TCP/IP
but same when in the Default setting.
4) Router is a Netgear RO318.
5) Both are using the same Workgroup names
6) Guest Logon is being allowed on both machines.
7) XP Pro local logon is as Administrator
8) XP Home local logon is as a user (with the typical admin rights)
9) XP Pro has a user admin account with the same name and password
as the logon used on XP Home.

Have I missed anything ?

XP Home can browse, see, and map to any of the XP Pro drives. No problem.

XP Pro cannot even expand the workgroup name, and so cannot map to a
drive on XP Home. Interestingly, if I type in the XP Home share
\\machine\sharename
directly into XP Pro's mapping, the volume's contents will be listed on XP
Pro, but it is not
listed as a mapped drive, the icon is dim, and it cannot be disconnected,
though the drive
letter on XP Pro is not returned for use by another mapping. Weird.

Please, I know this is like so many messages here but I have done the due
diligence here
and I am totally stumped.

Thanks.

-Ric

 

[Chuck]

HELP: XP-Pro cannot map or see drives on XP-SP2 Home -

1) Simple File Sharing is ON in XP Pro
2) Firewalls are off on both machines.
3) NetBIOS setting is now "Enable NetBIOS over TCP/IP
but same when in the Default setting.
4) Router is a Netgear RO318.
5) Both are using the same Workgroup names
6) Guest Logon is being allowed on both machines.
7) XP Pro local logon is as Administrator
8) XP Home local logon is as a user (with the typical admin rights)
9) XP Pro has a user admin account with the same name and password
as the logon used on XP Home.

Have I missed anything ?

XP Home can browse, see, and map to any of the XP Pro drives. No problem.

XP Pro cannot even expand the workgroup name, and so cannot map to a
drive on XP Home. Interestingly, if I type in the XP Home share
\\machine\sharename
directly into XP Pro's mapping, the volume's contents will be listed on XP
Pro, but it is not
listed as a mapped drive, the icon is dim, and it cannot be disconnected,
though the drive
letter on XP Pro is not returned for use by another mapping. Weird.

Please, I know this is like so many messages here but I have done the due
diligence here
and I am totally stumped.

Thanks.

-Ric

Ric,

When you enabled the Guest account, was it done using Start - Run - "cmd" - type
"net user guest /active:yes" in the command window?

Look at registry key [HKLM\System\CurrentControlSet\Control\Lsa], value
restrictanonymous, on the XP Home computer.
<http://www.microsoft.com/windows200...2000/techinfo/reskit/en-us/regentry/46688.asp>
<http://www.jsifaq.com/subf/tip2600/rh2625.htm>

The above articles refer to Windows 2000. Remember WinXP is NT V5.1, and Win2K
is NT V5.0.

Have you used the Registry Editor before? If not, it's a scary tool, but it's
pretty simple once you get used to it. Here are a couple articles that might
help:
<http://www.microsoft.com/windowsxp/...home/using/productdoc/en/tools_regeditors.asp>
<http://www.annoyances.org/exec/show/registry>

Just remember to backup the key (create a registry patch) for
[HKLM\System\CurrentControlSet\Control\Lsa] before making any changes, if
appropriate.

From the Annoyances article:
You can create a Registry patch by opening the Registry Editor, selecting a
branch, and choosing Export from the File menu. Then, specify a filename, and
press OK. You can then view the Registry patch file by opening it in Notepad
(right-click on it and select Edit). Again, just double-click on a Registry
patch file (or use Import in the Registry Editor's File menu) to apply it to the
registry.

What firewalls (what brands) are off on both computers?

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Richard Fink]

Chuck,

The registry key restrictanonymous = 0 on both computers.

No problem working via the registry. Do it frequently.

XP-SP2 Pro normally runs current version of Zone Alarm Pro. But it has been
unloaded/turned off and I have verified that the SP2 firewall remains off as
well. XP-SP2 Home runs the firewall that is the internal SP2 firewall but
once again I have verified that it is off.


Updated List: #10, #11
1) Simple File Sharing is ON in XP Pro
2) Firewalls are off on both machines.
3) NetBIOS setting is now "Enable NetBIOS over TCP/IP
but same when in the Default setting.
4) Router is a Netgear RO318.
5) Both are using the same Workgroup names
6) Guest Logon is being allowed on both machines.
7) XP Pro local logon is as Administrator
8) XP Home local logon is as a user (with the typical admin rights)
9) XP Pro has a user admin account with the same name and password
as the logon used on XP Home.
10) Both machines successfully ping the other.
11) Both machines successfully access the internet.

-Ric

HELP: XP-Pro cannot map or see drives on XP-SP2 Home -

1) Simple File Sharing is ON in XP Pro
2) Firewalls are off on both machines.
3) NetBIOS setting is now "Enable NetBIOS over TCP/IP
but same when in the Default setting.
4) Router is a Netgear RO318.
5) Both are using the same Workgroup names
6) Guest Logon is being allowed on both machines.
7) XP Pro local logon is as Administrator
8) XP Home local logon is as a user (with the typical admin rights)
9) XP Pro has a user admin account with the same name and password
as the logon used on XP Home.

Have I missed anything ?

XP Home can browse, see, and map to any of the XP Pro drives. No problem.

XP Pro cannot even expand the workgroup name, and so cannot map to a
drive on XP Home. Interestingly, if I type in the XP Home share
\\machine\sharename
directly into XP Pro's mapping, the volume's contents will be listed on XP
Pro, but it is not
listed as a mapped drive, the icon is dim, and it cannot be disconnected,
though the drive
letter on XP Pro is not returned for use by another mapping. Weird.

Please, I know this is like so many messages here but I have done the due
diligence here
and I am totally stumped.

Thanks.

-Ric

Ric,

When you enabled the Guest account, was it done using Start - Run -
"cmd" - type
"net user guest /active:yes" in the command window?

Look at registry key [HKLM\System\CurrentControlSet\Control\Lsa], value
restrictanonymous, on the XP Home computer.
<http://www.microsoft.com/windows200...2000/techinfo/reskit/en-us/regentry/46688.asp>
<http://www.jsifaq.com/subf/tip2600/rh2625.htm>

The above articles refer to Windows 2000. Remember WinXP is NT V5.1, and
Win2K
is NT V5.0.

Have you used the Registry Editor before? If not, it's a scary tool, but
it's
pretty simple once you get used to it. Here are a couple articles that
might
help:
<http://www.microsoft.com/windowsxp/...home/using/productdoc/en/tools_regeditors.asp>
<http://www.annoyances.org/exec/show/registry>

Just remember to backup the key (create a registry patch) for
[HKLM\System\CurrentControlSet\Control\Lsa] before making any changes, if
appropriate.

From the Annoyances article:
You can create a Registry patch by opening the Registry Editor, selecting
a
branch, and choosing Export from the File menu. Then, specify a filename,
and
press OK. You can then view the Registry patch file by opening it in
Notepad
(right-click on it and select Edit). Again, just double-click on a
Registry
patch file (or use Import in the Registry Editor's File menu) to apply it
to the
registry.

What firewalls (what brands) are off on both computers?

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Chuck]

Chuck,

The registry key restrictanonymous = 0 on both computers.

No problem working via the registry. Do it frequently.

XP-SP2 Pro normally runs current version of Zone Alarm Pro. But it has been
unloaded/turned off and I have verified that the SP2 firewall remains off as
well. XP-SP2 Home runs the firewall that is the internal SP2 firewall but
once again I have verified that it is off.


Updated List: #10, #11
1) Simple File Sharing is ON in XP Pro
2) Firewalls are off on both machines.
3) NetBIOS setting is now "Enable NetBIOS over TCP/IP
but same when in the Default setting.
4) Router is a Netgear RO318.
5) Both are using the same Workgroup names
6) Guest Logon is being allowed on both machines.
7) XP Pro local logon is as Administrator
8) XP Home local logon is as a user (with the typical admin rights)
9) XP Pro has a user admin account with the same name and password
as the logon used on XP Home.
10) Both machines successfully ping the other.
11) Both machines successfully access the internet.

-Ric

Ric,

File sharing, with a server running WinXP Home, is pretty simple. Enable the
Guest account, and make sure no firewalls interfere. And check the
restrictanonymous setting.

Please provide ipconfig information for each computer, lets see if any clues
there.
Start - Run - "cmd". Type "ipconfig /all >c:\ipconfig.txt" into the command
window - Open c:\ipconfig.txt in Notepad, copy and paste into your next post.

Can each computer ping each other by name too?

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Richard Fink]

Hi Chucks,

I know its simple... that's why I'm so stumped !

1) Pinging by name is successful both ways.
2) Restrictanonymous=0
3) Ipconfig for both machines: below

Interesting to note:
1) On XP-Pro, WINS Proxy Enabled.
2) On XP-Home, Note Type = Hybrid (what does that mean ?)


XP Pro:
=====
Windows IP Configuration
Host Name . . . . . . . . . . . . : limuru
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : comcast.net

Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . : comcast.net
Description . . . . . . . . . . . : VIA Rhine II Fast Ethernet
Adapter
Physical Address. . . . . . . . . : 00-0C-6E-93-2B-85
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.0.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DHCP Server . . . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 204.127.198.4
216.148.227.68
Lease Obtained. . . . . . . . . . : Tuesday, November 09, 2004
8:06:54 AM
Lease Expires . . . . . . . . . . : Friday, November 12, 2004
8:06:54 AM


XP Home:
=======
Windows IP Configuration
Host Name . . . . . . . . . . . . : Nairobi
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : comcast.net

Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . : comcast.net
Description . . . . . . . . . . . : Realtek RTL8139/810x Family Fast
Ethernet NIC
Physical Address. . . . . . . . . : 00-02-3F-D9-EF-0A
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.0.3
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DHCP Server . . . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 204.127.198.4
216.148.227.68
Lease Obtained. . . . . . . . . . : Tuesday, November 09, 2004
9:09:37 AM
Lease Expires . . . . . . . . . . : Friday, November 12, 2004
9:09:37 AM

Ethernet adapter Wireless Network Connection:
Media State . . . . . . . . . . . : Media disconnected
Description . . . . . . . . . . . : Atheros AR5004G Wireless Network
Adapter
Physical Address. . . . . . . . . : 00-11-F5-0B-DB-87


Chuck, thanks for sticking with this.

-Ric

 

[Chuck]

Hi Chucks,

I know its simple... that's why I'm so stumped !

1) Pinging by name is successful both ways.
2) Restrictanonymous=0
3) Ipconfig for both machines: below

Interesting to note:
1) On XP-Pro, WINS Proxy Enabled.
2) On XP-Home, Note Type = Hybrid (what does that mean ?)

Chuck, thanks for sticking with this.

-Ric

MP, Ric. As long as you stick with it too, we may both learn something.

I frequently restate the obvious, to establish a baseline for thought. My point
there is that there are significantly less things that can go wrong with file
sharing under WinXP Home, compared to WinXP Pro. Simple File Sharing is just
that.

Looking at your ipconfig listings, Node types Broadcast and Hybrid are
compatible. What you don't want is Peer-Peer.
http://support.microsoft.com/?id=160177

Your observed "WINS Proxy Enabled" is normal for B-node (limuru) name
resolution.
<http://www.microsoft.com/resources/...windows/xp/all/reskit/en-us/prjj_ipa_wnmj.asp>

WINS is a server based name resolution subsystem. If pinging by name is
successful, you probably don't have a name resolution problem. Name resolution
problems can contribute to a file sharing problem.

Let's look at an ad-hoc browser view of shares. From each computer, in a
command window, enter:
"net view 192.168.0.2"
"net view 192.168.0.3"
Report success, or exact error observed, from each of the 4 net views.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Richard Fink]

I will follow up with what you suggest right now.
While doing that, what do you make of this strange message.. the net view
was done from the XP Pro machine limuru referencing the XP Home machine
nairobi.

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Administrator>net view \\nairobi
System error 1005 has occurred.

The volume does not contain a recognized file system.
Please make sure that all required file system drivers are loaded and
that the v
olume is not corrupted.


BTW, both are NTFS systems and are working flawlessly.

-Ric

 

[Richard Fink]

Ok, here is the new views you asked for:

Net View From XP Pro: (strange)
-------------------------
C:\Documents and Settings\Administrator>net view 192.168.0.2
System error 1005 has occurred.

The volume does not contain a recognized file system.
Please make sure that all required file system drivers are loaded and that
the v
olume is not corrupted.

C:\Documents and Settings\Administrator>net view 192.168.0.3
System error 1005 has occurred.

The volume does not contain a recognized file system.
Please make sure that all required file system drivers are loaded and that
the v
olume is not corrupted.

Notes:
1) From this XP Pro I am not even able to expand the Workgroup name to see
the two computers.
2) I have not done it since last reboot, but I believe I CAN "Search for
Computers" and find \\nairobi. but the icon is dim and I cannot see anything
by clicking on it.


Net View From XP Home: (directed to a file)
---------------------------
Shared resources at 192.168.0.2

Ric's Desktop

Share name Type Used as Comment

-------------------------------------------------------------------------------
Data (E) Disk
Downloads (H) Disk Downloaded files
Files (I) Disk Miscellaneous Files
HP1200 Print HP LaserJet 1200 Series PCL
Printer Print Send with j2 Messenger
Printer3 Print Microsoft Office Document Image Writer
Printer5 Print Amyuni PDF Converter
Printer6 Print Acrobat PDFWriter
SharedDocs Disk
The command completed successfully.

Shared resources at 192.168.0.3

Ric's Laptop

Share name Type Used as Comment

-------------------------------------------------------------------------------
Data (E) Disk
Files (H) Disk
SharedDocs Disk
The command completed successfully.


Note: I have run Panda (online version) and Norton Anti-Virus and have come
up clean by both. Am also clear of spyware.

-Ric

 

[Chuck]

Ok, here is the new views you asked for:

Net View From XP Pro: (strange)
-------------------------
C:\Documents and Settings\Administrator>net view 192.168.0.2
System error 1005 has occurred.

The volume does not contain a recognized file system.
Please make sure that all required file system drivers are loaded and that
the v
olume is not corrupted.

C:\Documents and Settings\Administrator>net view 192.168.0.3
System error 1005 has occurred.

The volume does not contain a recognized file system.
Please make sure that all required file system drivers are loaded and that
the v
olume is not corrupted.

Notes:
1) From this XP Pro I am not even able to expand the Workgroup name to see
the two computers.
2) I have not done it since last reboot, but I believe I CAN "Search for
Computers" and find \\nairobi. but the icon is dim and I cannot see anything
by clicking on it.


Net View From XP Home: (directed to a file)
---------------------------
Shared resources at 192.168.0.2

Ric's Desktop

Share name Type Used as Comment

-------------------------------------------------------------------------------
Data (E) Disk
Downloads (H) Disk Downloaded files
Files (I) Disk Miscellaneous Files
HP1200 Print HP LaserJet 1200 Series PCL
Printer Print Send with j2 Messenger
Printer3 Print Microsoft Office Document Image Writer
Printer5 Print Amyuni PDF Converter
Printer6 Print Acrobat PDFWriter
SharedDocs Disk
The command completed successfully.

Shared resources at 192.168.0.3

Ric's Laptop

Share name Type Used as Comment

-------------------------------------------------------------------------------
Data (E) Disk
Files (H) Disk
SharedDocs Disk
The command completed successfully.


Note: I have run Panda (online version) and Norton Anti-Virus and have come
up clean by both. Am also clear of spyware.

-Ric

Ric,

OK, we're getting somewhere. Can you map a share on Nairobi, and on Limuru, and
open a file on each, from Explorer on Nairobi? That will conclusively define
the problem as Limuru. And not a normal file sharing problem either.

I looked up "System error 1005" on Microsoft and got nothing useful. A lot of
references to System Attendant, SQL Server, and SBS 2000. Do you see anything
in your (Control Panel - Administrative Tools) Event Viewer when you try the net
views on Limuru?

If you can open files on Limuru (and Nairobi) from Nairobi, then the problem
would appear to be in Client for Microsoft Networks on Limuru.

Panda and NAV should complement each other, and if each gives clean results,
probably indicates no virus contamination. From what I know about spyware
though, unless you have run a very robust set of diagnostics, you shouldn't rule
out spyware as an infection. What tools have you tried to date?

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Richard Fink]

System Event Log: top is most recent
--------------------------------------
The browser service has failed to retrieve the backup list too many times on
transport \Device\NetBT_Tcpip_{C895493A-F2E7-4DC4-94C0-9903B6260D31}. The
backup browser is stopping.
(2 minutes)
The browser was unable to retrieve a list of servers from the browser master
\\NAIROBI on the network
\Device\NetBT_Tcpip_{C895493A-F2E7-4DC4-94C0-9903B6260D31}. The data is the
error code.
(13 minutes)
The Routing and Remote Access service terminated with service-specific error
2 (0x2).

These errors above happened 2 hours ago... and I was not able to reproduce
them at this moment by
repeating the Net View command.

OK, we're getting somewhere. Can you map a share on Nairobi, and on
Limuru, and
open a file on each, from Explorer on Nairobi?

YES. From Nairobi (XP Home) I CAN open a file from Explorer on a shared
drive existing on Nairobi and another on Limuru.

I'm going to reboot and Remove and re-Install Client for Microsoft Networks.
I'll let you know.

-Ric

 

[Guest]

Hi Rich and Chuck,

I hope you don't mind my hopping onto this thread, but I'm having a very
similar issue to Rich. Chuck, if you don't think it's the same issue, I'll
create a new thread.

Eric

-

I have two new computers running Microsoft Windows XP Professional SP1 in
the same workgroup connected via ethernet through a Netgear WGR614v4 router.
I have also run the Network Setup Wizard and enabled file and print sharing.

Each computer has:
1) No antivirus software installed (yet)
2) No firewall software installed (such as McAfee Firewall, Norton Internet
Security, ZoneAlarm, etc.)
3) Simple file sharing disabled
4) Guest account disabled
5) Enable NetBIOS over TCP/IP
6) Windows ICF disabled (This is SP1, so the computers do not have Windows
Firewall)
7) HKLM\System\CurrentControlSet\Control\Lsa\restrictanonymous set to 0.

Both computers are able to:
1) Ping each other by computer name
2) Ping each other by IP address
3) See each other in My Network Places
4) Access the Internet

Using a user account that has the same password on PC1 as on PC2, PC1 is
able to:
1) Browse PC2 through My Network Places
2) Connect to administrative shares (c$) and normal shares on PC2
3) "net view PC2" successfully
4) "net use \\PC2\c$" successfully

However, PC2 is unable to:
1) Browse PC1 through My Network Places
2) Connect to administrative shares (c$) or normal shares on PC1
3) "net view PC1" returns
System error 5 has occurred.
Access is denied.
4) "net use \\PC1\c$" returns
The password or user name is invalid for \\PC1\c$
Enter the user name for 'PC1':
Enter the password for PC1:
System error 1326 has occurred.
Logon failure: unknown user name or bad password.

I have tried enabling the guest account on both computers ("net user guest
/active:yes") to no avail. I have tried using a user account that is only in
the Administrators group, but when I try to connect to a share on PC1 from
PC2, eventually the user account is locked out (after 3 tries). I get the
same result with the local administrator account.

I have scanned both computers with Ad-Aware SE Build 1.05 definition file
SE1R18 08.11.2004 and found nothing. I have scanned both computers with
Spybot-S&D 1.3 definition file 2004-10-26 and found nothing. I have scanned
both computers with McAfee VirusScan 7.03, scan engine 4.3.20, and virus
definition 4.0.4405 and found nothing.

 

[Guest]

Hi Rich and Chuck,

I hope you two don't mind me joining this thread. I'm having a very similar
issue to Rich, but if you don't feel it's the same issue, let me know and
I'll create a new thread.

Eric

-

I have two new computers running Microsoft Windows XP Professional SP1 in
the same workgroup connected via ethernet through a Netgear WGR614v4 router.
I have also run the Network Setup Wizard and enabled file and print sharing.

Each computer has:
1) No antivirus software installed (yet)
2) No firewall software installed (such as McAfee Firewall, Norton Internet
Security, ZoneAlarm, etc.)
3) Simple file sharing disabled
4) Guest account disabled
5) Enable NetBIOS over TCP/IP
6) Windows ICF disabled (This is SP1, so the computers do not have Windows
Firewall)
7) HKLM\System\CurrentControlSet\Control\Lsa\restrictanonymous set to 0.

Both computers are able to:
1) Ping each other by computer name
2) Ping each other by IP address
3) See each other in My Network Places
4) Access the Internet

Using a user account that has the same password on PC1 as on PC2, PC1 is
able to:
1) Browse PC2 through My Network Places
2) Connect to administrative shares (c$) and normal shares on PC2
3) "net view PC2" successfully
4) "net use \\PC2\c$" successfully

However, PC2 is unable to:
1) Browse PC1 through My Network Places
2) Connect to administrative shares (c$) or normal shares on PC1
3) "net view PC1" returns
System error 5 has occurred.
Access is denied.
4) "net use \\PC1\c$" returns
The password or user name is invalid for \\PC1\c$
Enter the user name for 'PC1':
Enter the password for PC1:
System error 1326 has occurred.
Logon failure: unknown user name or bad password.

I have tried enabling the guest account on both computers ("net user guest
/active:yes") to no avail. I have tried using a user account that is only in
the Administrators group, but when I try to connect to a share on PC1 from
PC2, eventually the user account is locked out (after 3 tries). I get the
same result with the local administrator account.

I have scanned both computers with Ad-Aware SE Build 1.05 definition file
SE1R18 08.11.2004 and found nothing. I have scanned both computers with
Spybot-S&D 1.3 definition file 2004-10-26 and found nothing. I have scanned
both computers with McAfee VirusScan 7.03, scan engine 4.3.20, and virus
definition 4.0.4405 and found nothing.

 

[Richard Fink]

Well, I removed Client for Microsoft Networks and re-installed it, with no
apparent change. I'm here so all is working as before.

One interesting thing, which was also possible before:
When I go to map a Nairobi drive on to Limuru and fail to do it because the
workgroup does not expand, I can do something else.... on Limuru, in the
Mapping Folder dialog which would normally contain a path I was going to map
to, I can explicitly type in the Nairobi share, and click ok.

In this case, the folder existing on Nairobi actually opens.in Explorer on
Limuru. However on the left side of the Nairobi Explorer where drives are
listed, it is listed as "Disconnected Network Drive (Z".

It is not possible to disconnect it by going to "Disconnect Network Drive"
in Explorer because that effort comes back "You have no network drives to
disconnect". Yet, if I drag a file into that drive on Nairobi the new file
appears in the mapped drive on Limuru !

The seems it is not possible to disconnect the "Disconnected Network Drive
(Z" on Nairobi. When I right click on it and select Disconnect, I get:
"The volume does not contain a recognized file system" error.

I did some research on mapped drive disconnects and found
http://support.microsoft.com/default.aspx/kb/297684/EN-US/ . But my
autodisconnect value is dec15, or 15 minutes, so that does not seem to be
it. If it had been zero we might have found it.

-Ric

 

[Chuck]

Hi Rich and Chuck,

I hope you two don't mind me joining this thread. I'm having a very similar
issue to Rich, but if you don't feel it's the same issue, let me know and
I'll create a new thread.

Eric

Eric,

Please create a new thread. It's better for everybody.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Chuck]

Well, I removed Client for Microsoft Networks and re-installed it, with no
apparent change. I'm here so all is working as before.

One interesting thing, which was also possible before:
When I go to map a Nairobi drive on to Limuru and fail to do it because the
workgroup does not expand, I can do something else.... on Limuru, in the
Mapping Folder dialog which would normally contain a path I was going to map
to, I can explicitly type in the Nairobi share, and click ok.

In this case, the folder existing on Nairobi actually opens.in Explorer on
Limuru. However on the left side of the Nairobi Explorer where drives are
listed, it is listed as "Disconnected Network Drive (Z".

It is not possible to disconnect it by going to "Disconnect Network Drive"
in Explorer because that effort comes back "You have no network drives to
disconnect". Yet, if I drag a file into that drive on Nairobi the new file
appears in the mapped drive on Limuru !

The seems it is not possible to disconnect the "Disconnected Network Drive
(Z" on Nairobi. When I right click on it and select Disconnect, I get:
"The volume does not contain a recognized file system" error.

I did some research on mapped drive disconnects and found
http://support.microsoft.com/default.aspx/kb/297684/EN-US/ . But my
autodisconnect value is dec15, or 15 minutes, so that does not seem to be
it. If it had been zero we might have found it.

-Ric

Ric,

What you're saying is that you can access shares from Limuru, by explicitly
entering a share UNC name? Can you access both Limuru and Nairobi shares that
way? Can you actually open files, in shares mapped from both servers?

When you see the new file in the mapped drive on Limuru, can you actually open
that file?

What you're saying is that you can access a share from Limuru, by explicitly
mapping it. You can't browse that share (or any other) from Network
Neighborhood, nor can you enumerate it using the net view command.

Let's see what the browser situation is.

The Microsoft Browstat program will show us what browsers you have in your
domain / workgroup, at any time.
http://support.microsoft.com/?id=188305

You can download Browstat from either:
<http://www.dynawell.com/reskit/microsoft/win2000/browstat.zip>
<http://rescomp.stanford.edu/staff/manual/rcc/tools/browstat.zip>

Browstat is very small (40K), and needs no install. Just unzip the downloaded
file, copy browstat.exe to any folder in the Path, and run it from a command
window.

For more information about the browser subsystem (very intricate), see:
http://support.microsoft.com/?id=188001
http://support.microsoft.com/?id=188305
<http://www.microsoft.com/technet/prodtechnol/winntas/deploy/prodspecs/ntbrowse.mspx>

Please provide browstat information for each computer.
Start - Run - "cmd". Type "browstat status >c:\browstat.txt" into the command
window - Open c:\browstat.txt in Notepad, copy and paste into your next post.

BTW, Ric, please don't contribute to the spread and success of email address
mining viruses. Posting your email address openly will get you more unwanted
email, than wanted email. Learn to munge your email address properly, to keep
yourself a bit safer when posting to open forums. Protect yourself and the rest
of the internet - read this article.
http://www.mailmsg.com/SPAM_munging.htm

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Richard Fink]

Yes, from Limuru, when I explicitly map a drive on Nairobi, I can see the
files and I can open them from Limuru.

Browser Stats
=========
XP Pro - Limuru
-----------------
Status for domain TWIGA on transport
\Device\NetBT_Tcpip_{C895493A-F2E7-4DC4-94C0-9903B6260D31}
Browsing is active on domain.
Master browser name is: NAIROBI
Could not connect to registry, error = 53 Unable to determine build
of browser master: 53
Unable to determine server information for browser master: 1005
1 backup servers retrieved from master NAIROBI
\\NAIROBI
Unable to retrieve server list from NAIROBI: 1005


XP Home - Nairobi
---------------------
Status for domain TWIGA on transport
\Device\NetBT_Tcpip_{5F2E621F-D987-47E8-8CA0-73F13027D1C1}
Browsing is active on domain.
Master browser name is: NAIROBI
Master browser is running build 2600
1 backup servers retrieved from master NAIROBI
\\NAIROBI
There are 2 servers in domain TWIGA on transport
\Device\NetBT_Tcpip_{5F2E621F-D987-47E8-8CA0-73F13027D1C1}
There are 1 domains in domain TWIGA on transport
\Device\NetBT_Tcpip_{5F2E621F-D987-47E8-8CA0-73F13027D1C1}


Ok, will work on my exposed email address. Thanks for the heads up.

-Ric

 

[Richard Fink]

When it says it could not connect to registry... the local registry on
Limuru or the remote registry on Nairobi ? Hmm... this sounds concrete.
Permissions problem on the registry ?

-Ric

 

[Chuck]

Yes, from Limuru, when I explicitly map a drive on Nairobi, I can see the
files and I can open them from Limuru.

Browser Stats
=========
XP Pro - Limuru
-----------------
Status for domain TWIGA on transport
\Device\NetBT_Tcpip_{C895493A-F2E7-4DC4-94C0-9903B6260D31}
Browsing is active on domain.
Master browser name is: NAIROBI
Could not connect to registry, error = 53 Unable to determine build
of browser master: 53
Unable to determine server information for browser master: 1005
1 backup servers retrieved from master NAIROBI
\\NAIROBI
Unable to retrieve server list from NAIROBI: 1005


XP Home - Nairobi
---------------------
Status for domain TWIGA on transport
\Device\NetBT_Tcpip_{5F2E621F-D987-47E8-8CA0-73F13027D1C1}
Browsing is active on domain.
Master browser name is: NAIROBI
Master browser is running build 2600
1 backup servers retrieved from master NAIROBI
\\NAIROBI
There are 2 servers in domain TWIGA on transport
\Device\NetBT_Tcpip_{5F2E621F-D987-47E8-8CA0-73F13027D1C1}
There are 1 domains in domain TWIGA on transport
\Device\NetBT_Tcpip_{5F2E621F-D987-47E8-8CA0-73F13027D1C1}


Ok, will work on my exposed email address. Thanks for the heads up.

-Ric

Ric,

Look at browstat from Limuru - 1005 again. I think we're heading back in the
direction of one of the
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa] registry key values.

Nairobi is the master browser, so anytime you try to enumerate any resource on
your domain, you have to use Nairobi. Limuru needs Nairobi, but can't access
it.

You did say that you were getting 1005 errors even when doing a "net view
192.168.0.2" from Limuru (192.168.0.2). That should be Limuru enumerating its
own shares from itself, which shouldn't involve Nairobi. Or so I thought about
"net view".

Can you make a list of all the value names and data (value) in [...Lsa]? I know
of two other values that have been of interest in the past,
everyoneincludesanonymous and restrictanonymoussam, and maybe there is another
which affects you.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Richard Fink]

Yes, I was getting 1005 errors in the Net View running from Limuru when
trying to view Nairobi by name or ip and even when trying to view Limuru by
ip. View of Limuru by name worked as seen below.

Here is the Net View stuff:
==================
Net View run from Limuru:
----------------------------
D:\XP Resource Kit>net view limuru
Shared resources at limuru

Share name Type Used as Comment

-------------------------------------------------------------------------------
Data (E) Disk
HP1200 Print HP LaserJet 1200 Series PCL
Printer Print Send with j2 Messenger
Printer3 Print Microsoft Office Document Image Writer
Printer5 Print Amyuni PDF Converter
Printer6 Print Acrobat PDFWriter
The command completed with one or more errors.


D:\XP Resource Kit>net view nairobi
System error 1005 has occurred.

The volume does not contain a recognized file system.
Please make sure that all required file system drivers are loaded and that
the v
olume is not corrupted.


D:\XP Resource Kit>net view 192.168.0.2
System error 1005 has occurred.

The volume does not contain a recognized file system.
Please make sure that all required file system drivers are loaded and that
the v
olume is not corrupted.


D:\XP Resource Kit>net view 192.168.0.3
System error 1005 has occurred.

The volume does not contain a recognized file system.
Please make sure that all required file system drivers are loaded and that
the v
olume is not corrupted.


Net View run from Nairobi:
----------------------------
Shared resources at 192.168.0.2

Ric's Desktop

Share name Type Used as Comment

-------------------------------------------------------------------------------
Data (E) Disk
Downloads (H) Disk Downloaded files
Files (I) Disk Miscellaneous Files
HP1200 Print HP LaserJet 1200 Series PCL
Printer Print Send with j2 Messenger
Printer3 Print Microsoft Office Document Image Writer
Printer5 Print Amyuni PDF Converter
Printer6 Print Acrobat PDFWriter
SharedDocs Disk
The command completed successfully.

Shared resources at 192.168.0.3

Ric's Laptop

Share name Type Used as Comment

-------------------------------------------------------------------------------
Data (E) Disk
Files (H) Disk
SharedDocs Disk
The command completed successfully.

==============================================

Ok, here are all the ...LSA values from Limuru's registry. (wish I could
embed a printscreen graphic)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
(Default) (value not
set)
auditbaseobjects 0x00000000 (0)
Authentication Packages msv1_0
Bounds 00 30 00 00 00
20 00 00
crashauditfail 0x00000000 (0)
disabledomaincreds 0x00000000 (0)
everyoneincludesanonymous 0x00000000 (0)
fipsalgorithmpolicy 0x00000000 (0)
forceguest 0x00000001 (1)
fullprivilegeauditing 00
ImpersonatePrivilegeUpgradeToolHasRun 0x00000001 (1)
limitblankpassworduse 0x00000001 (1)
Imcompatibilitylevel 0x00000000 (0)
LsaPid 0x0000032c
(812)
nodefaultadminowner 0x00000001 (1)
nolmhash 0x00000000 (0)
Notification Packages scecli
restrictanonymous 0x00000000 (0)
restrictanonymoussam 0x00000001 (1)
SecureBoot 0x00000001 (1)
Security Packages kerberos msv1_0
schannel wdigest

(end. that was a job!)


Interestingly, Nairobi's LSA list is totally the same except its LsaPid,
which would be expected to be different.

-Ric

Yes, from Limuru, when I explicitly map a drive on Nairobi, I can see the
files and I can open them from Limuru.

Browser Stats
=========
XP Pro - Limuru
-----------------
Status for domain TWIGA on transport
\Device\NetBT_Tcpip_{C895493A-F2E7-4DC4-94C0-9903B6260D31}
Browsing is active on domain.
Master browser name is: NAIROBI
Could not connect to registry, error = 53 Unable to determine build
of browser master: 53
Unable to determine server information for browser master: 1005
1 backup servers retrieved from master NAIROBI
\\NAIROBI
Unable to retrieve server list from NAIROBI: 1005


XP Home - Nairobi
---------------------
Status for domain TWIGA on transport
\Device\NetBT_Tcpip_{5F2E621F-D987-47E8-8CA0-73F13027D1C1}
Browsing is active on domain.
Master browser name is: NAIROBI
Master browser is running build 2600
1 backup servers retrieved from master NAIROBI
\\NAIROBI
There are 2 servers in domain TWIGA on transport
\Device\NetBT_Tcpip_{5F2E621F-D987-47E8-8CA0-73F13027D1C1}
There are 1 domains in domain TWIGA on transport
\Device\NetBT_Tcpip_{5F2E621F-D987-47E8-8CA0-73F13027D1C1}


Ok, will work on my exposed email address. Thanks for the heads up.

-Ric

Ric,

Look at browstat from Limuru - 1005 again. I think we're heading back in
the
direction of one of the
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa] registry key
values.

Nairobi is the master browser, so anytime you try to enumerate any
resource on
your domain, you have to use Nairobi. Limuru needs Nairobi, but can't
access
it.

You did say that you were getting 1005 errors even when doing a "net view
192.168.0.2" from Limuru (192.168.0.2). That should be Limuru enumerating
its
own shares from itself, which shouldn't involve Nairobi. Or so I thought
about
"net view".

Can you make a list of all the value names and data (value) in [...Lsa]?
I know
of two other values that have been of interest in the past,
everyoneincludesanonymous and restrictanonymoussam, and maybe there is
another
which affects you.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Richard Fink]

Chuck, let me know when you are going to call it a night. I have no idea
what part of the world you are in. I'm in Marin, just north of San
Francisco.

I would really like to get to the bottom of this and resolve it, even if we
have to pick up tomorrow. Your call on time.

Thanks. -Ric