2 PCs not visible in net view or network browsing - Why?

[Chupa]

I have w2k domain with 10 workstations, 2 of them
are not wisible no mather what i do.

All are configured per DHCP..

these two machines are w2k and winxp, they both
see each other in net view but no other machines
from domain.

what should i do?

please tra to help.

tenx!

 

[Chupa]

just to add this, logon users can normaly logon to
these 2 machines and drives for profiles are also
maped without problem.

only problem is that in network places under my
name of domain only these 2 pcs are visible froom
them, on other machines everithing is visible but
those two?!

 

[Herb Martin]

Usually it is one of:

1) Machines not running NetBIOS (check box in IP properties)

2) Machines not registering with WINS servers if you have them
(need to be clients in NIC->IP settings) -- AND it may not
be the missing machines at fault, but rather the server or other
machine that is serving as Master Browser on their subnet.

3) More than one subnet, and no WINS server(s)

4) Nothing is shared -- they don't show up in Net Neighborhood
unless they have at least one (non-hidden) share offered

5) Legacy clients not running IP (you did post in Win2000 group)

If you use WINS Server, every machine needs to be a WINS client,
including DCs and even WINS server itself.

If you have multiple subnets you need WINS server.

If you can't resolve it with the above.

What do you see if you type (command line):

Net Share
(ON THE problem machine)

Show your IPConfig /all

(Copy and paste the above, do not type it in, and do not use
graphics/pictures please.)

 

[Chupa]

Everything You mentioned is set the same way on all machines.

ipconfig -all returns this (i just changed my domanin names with xxx's ):

Windows IP Configuration

Host Name . . . . . . . . . . . . : unimatrix
Primary Dns Suffix . . . . . . . : xxxx.xxx.hr
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : xxxx.xxx.hr
xxx.hr

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : xxxx.xxx.hr
Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network Connect
on
Physical Address. . . . . . . . . : 00-11-11-CA-05-AC
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.55.156
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.55.11
DHCP Server . . . . . . . . . . . : 192.168.55.33
DNS Servers . . . . . . . . . . . : 192.168.55.32
Primary WINS Server . . . . . . . : 192.168.55.33
Lease Obtained. . . . . . . . . . : 17. travanj 2005 18:02:32
Lease Expires . . . . . . . . . . : 19. sijeanj 2038 5:14:07


DHCP and WINS sre on one server and DNS is on another.. dont ask why this is the way it is.. the same settings work on 8 of 10 machines thats' what confuses me.


Net share results with:

Share name Resource Remark
---------------------------------------------------
IPC$ Remote
print$ C:\WINDOWS\system32\spool\drivers
Printe
C$ C:\ Defaul
ADMIN$ C:\WINDOWS Remote
public C:\public
student LPT1: Spooled Samsun
The command completed successfully.

- sorry for bad formating
I just hope anyone can help me out on this one..

p.s.
i tried rejoining domain but visibiliti in net view on all other machines is still zero

 

[Herb Martin]

Everything You mentioned is set the same way on all machines.

ipconfig -all returns this (i just changed my domanin names with xxx's ):

Windows IP Configuration

Host Name . . . . . . . . . . . . : unimatrix
Primary Dns Suffix . . . . . . . : xxxx.xxx.hr
Node Type . . . . . . . . . . . . : Hybrid

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : xxxx.xxx.hr

HM: There is no need for a connection specific suffix when
it is the SAME as the Primary DNS suffix -- but this is NOT
your problem.

Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network
Connect
IP Address. . . . . . . . . . . . : 192.168.55.156
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.55.11
DHCP Server . . . . . . . . . . . : 192.168.55.33
DNS Servers . . . . . . . . . . . : 192.168.55.32
Primary WINS Server . . . . . . . : 192.168.55.33

HM: Double check that ALL machines -- especially
servers have NetBIOS enabled, and use the SAME
WINS Server. Not just the affected clients, but check
them too.

DHCP and WINS sre on one server and DNS is on another..
dont ask why this is the way it is.. the same settings work on 8 of 10

machines thats' what confuses me.

HM: Nothing wrong with that.

Net share results with:

Share name Resource Remark
---------------------------------------------------
public C:\public
student LPT1: Spooled Samsun
The command completed successfully.

HM: So some shares are public.

- sorry for bad formating

I just hope anyone can help me out on this one..

p.s.

i tried rejoining domain but visibiliti in net view on all other machines

is still zero

That would not help. As long as the machine uses the SAME
domain name or the same workgroup name it would still
appear in the browse list

(Domain membership is not specifically required but the
NetBIOS name MUST match.)

Double check the NetBIOS name for each machine in the
System Control panel (this is the name that COUNTS for
browsing.)

Also note, the DNS name there (unrelated to browsing)
is the name that REALLY counts for DNS (not the ones
on the NICs.)

Are you using a DC for a router (multiple NICs)?

Do any of these machines have multiple NICs?
Are these NICs on the SAME subnet/segment (i.e.,
broadcast domain)?

How about firewalls? Is it possible that one of the
XP machines running SP2 is also getting elected as
Master Browser (check the Event Logs for browser
errors.)

Is every machine running IP? (Surely they are, but
I am trying to be complete since the initial checks
have not resolve it.)

Finally, there have occasionally been nearly impossible
to dianose problems with some Hubs/Switches or
cabling where the broadcasts were not getting properly
distributed even though the net seemed to work -- somehow
-- anyway.

 

[Chupa]

HM: There is no need for a connection specific suffix when

it is the SAME as the Primary DNS suffix -- but this is NOT
your problem.

I added specific suffix to be shure workstation correctly ads suffixes..

HM: Double check that ALL machines -- especially
servers have NetBIOS enabled, and use the SAME
WINS Server. Not just the affected clients, but check
them too.

I checked, NetBios is enabled on all DNS & WINS server.

HM: So some shares are public.

yes some are public but behind firewall, so only visible to local domain.. not a mater of priority at this point.

(Domain membership is not specifically required but the
NetBIOS name MUST match.)

Double check the NetBIOS name for each machine in the
System Control panel (this is the name that COUNTS for
browsing.)

are these names case sensitive? /i think not as on every machine my first leter is upercase and in DNS is lowercase/

I looked and they match but on sys.control panel its Unimatrix and in DNS is unimatrix..

Also note, the DNS name there (unrelated to browsing)
is the name that REALLY counts for DNS (not the ones
on the NICs.)

Are you using a DC for a router (multiple NICs)?

No, but I do have multiple NICs on both (DNS&DC and WINS) servers but its only for IIS to be visible outside firewall.

Do any of these machines have multiple NICs?
Are these NICs on the SAME subnet/segment (i.e.,
broadcast domain)?

afected machines have only one NIC adapter and it works flawlesly.

How about firewalls? Is it possible that one of the
XP machines running SP2 is also getting elected as
Master Browser (check the Event Logs for browser
errors.)

All machines get out through firewall on xxx.xxx.55.11 (as seen on ipconfig -all I posted before.)
Except servers running IIS and having 2 NICs - they go out bypassing firewall, but with them i dont have any problem.

Im writing this without checking but i beleeve I have seen something about master browser reelection in eventlogs but I havent got into this as everithing worked fine.. ill check this later and post back.. and yes it is xp sp2 machine, the other one is w2k sp4. Interesting part is that only these two machines see each other but not any other machine on the same switch, when i use search for computer by name or IP they find all machines around them, but in no way I cant force them to list all computers in domain either by net view command or by browsing network places

Is every machine running IP? (Surely they are, but
I am trying to be complete since the initial checks
have not resolve it.)
yes.


Finally, there have occasionally been nearly impossible
to dianose problems with some Hubs/Switches or
cabling where the broadcasts were not getting properly
distributed even though the net seemed to work -- somehow
-- anyway.

All domain machines are on same switch and dont have this problem, even phisicaly same machines (same hardware..)

 

[Chupa]

I just found one warnign in eventlog on afected xpSP2 machine:


TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

 

[Herb Martin]

HM: There is no need for a connection specific suffix when
it is the SAME as the Primary DNS suffix -- but this is NOT
your problem.

:I added specific suffix to be shure workstation correctly ads suffixes..

That won't help if you do the Control Panel primary
name correctly which is the right way.

HM: Double check that ALL machines -- especially
servers have NetBIOS enabled, and use the SAME
WINS Server. Not just the affected clients, but check
them too.

:I checked, NetBios is enabled on all DNS & WINS server.

And they all specify the same WINS server?

HM: So some shares are public.

:yes some are public but behind firewall, so only visible to local domain..
not a mater of priority at this point.

Firewall where precisely? Between the working machines
and the failing machines?

What kind of firewall?

(Domain membership is not specifically required but the
NetBIOS name MUST match.)

Double check the NetBIOS name for each machine in the
System Control panel (this is the name that COUNTS for
browsing.)

are these names case sensitive? /i think not as on every machine my first

leter is upercase and in DNS is lowercase/

No, neither WINS nor DNS is case sensitive.

(Actually the NetBIOS/WINS is case sensitive, but the name
is always uppercased when a machine name is used.)

:I looked and they match but on sys.control panel its Unimatrix and in DNS
is unimatrix..

Not an issue. DNS is not case sensitive.

Also note, the DNS name there (unrelated to browsing)
is the name that REALLY counts for DNS (not the ones
on the NICs.)

Are you using a DC for a router (multiple NICs)?

:No, but I do have multiple NICs on both (DNS&DC and WINS) servers but its
only for IIS to be visible outside firewall.

There are supposed issues with DC, WINS server that
have multiple NICs. Personally I have never run into
that but it is a commonly reported problem, and documented
in some KB article at MS.

Could be your problem.

Also note it is a very poor security practice to
for a DC to be exposed onto the Internet -- but
that isn't your current problem here.

Do any of these machines have multiple NICs?
Are these NICs on the SAME subnet/segment (i.e.,
broadcast domain)?

:afected machines have only one NIC adapter and it works flawlesly.

Ok, some people try to stick two NICs in one machine
on one segment -- NetBIOS doesn't deal with that well.

How about firewalls? Is it possible that one of the
XP machines running SP2 is also getting elected as
Master Browser (check the Event Logs for browser
errors.)

:All machines get out through firewall on xxx.xxx.55.11 (as seen on
ipconfig -all I posted before.)
:Except servers running IIS and having 2 NICs - they go out bypassing
firewall, but with them i dont have any problem.

Can the firewall be blocking the traffic to/from
the WINS server or the Master Browser and
Domain Master Browser.

(NetMon or EtherReal to watch traffic).

Perhaps trying BrowStat.exe (Support Tools)
to identify your Browse Master.


: Im writing this without checking but i beleeve I have seen something about
master browser reelection in eventlogs

An occasional Browser election is expected, look
mostly for errors or repetitive elections that look
to be due to problems.

: but I havent got into this as everithing worked fine.. ill check this
later and post back.. and yes it is xp sp2 machine, the other one is w2k
sp4. Interesting part is that only these two machines see each other but not
any other machine on the same switch, when i use search for computer by name
or IP they find all machines around them, but in no way I cant force them to
list all computers in domain either by net view command or by browsing
network places

Is every machine running IP? (Surely they are, but
I am trying to be complete since the initial checks
have not resolve it.)
yes.


Finally, there have occasionally been nearly impossible
to dianose problems with some Hubs/Switches or
cabling where the broadcasts were not getting properly
distributed even though the net seemed to work -- somehow
-- anyway.

: All domain machines are on same switch and dont have this problem, even
phisicaly same machines (same hardware..)

Some such switches have acted up in the past.

Try swapping cables AND port -- see if the
problem moves around. (Give it an hour or
more for browsing to time out and repopulate.)

 

[Herb Martin]

I just found one warnign in eventlog on afected xpSP2 machine:

TCP/IP has reached the security limit imposed on the number of concurrent

TCP connect attempts.

For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp.

Sounds like inbound attempts -- might be innocuous
or sign of some problem.

NetMon or Ethereal sound more useful now.

 

[Chupa]

i took a look and it suposed to be a p2p kind of
software that opened to many connections to my
machine.. there is a patch that fixes this issue,
but i havent tried it yet..

p.s.

i tried browstat /domain xxxx

and got srange long string that should be my
master browser, how can i translate these numbers
into DNS name?

tenx!

 

[Chupa]

:I checked, NetBios is enabled on all DNS & WINS

server.

And they all specify the same WINS server?
yes.

Firewall where precisely?

unixoid dedicated machine serving as firewall..

Between the working machines
and the failing machines?
nope.

There are supposed issues with DC, WINS server
that
have multiple NICs. Personally I have never run
into
that but it is a commonly reported problem, and
documented
in some KB article at MS.

Could be your problem.

Also note it is a very poor security practice to
for a DC to be exposed onto the Internet -- but
that isn't your current problem here.

i knowe that, its temporary as it is, until
migration to w2k3 domain is complete.

Can the firewall be blocking the traffic to/from
the WINS server or the Master Browser and
Domain Master Browser.

no this is not the case.

Perhaps trying BrowStat.exe (Support Tools)
to identify your Browse Master.

i did, got strange long alfanumeric string that i
dont know how to translate into dns name

An occasional Browser election is expected, look
mostly for errors or repetitive elections that
look
to be due to problems.

looking into this, i got one info that browser
service stoped unexpectedly but i link this with
p2p and too many connectons at the moment, as it
did not happened again.

Some such switches have acted up in the past.

Try swapping cables AND port -- see if the
problem moves around. (Give it an hour or
more for browsing to time out and repopulate.)

... will try, im administrating it remote, so when
im phisicaly there ill try this one too, but i
dubt this could be cosing this as it is a few
months new switch..

tenx for Your eforts to help.

 

[Herb Martin]

i took a look and it suposed to be a p2p kind of
software that opened to many connections to my
machine.. there is a patch that fixes this issue,
but i havent tried it yet..

p.s.

i tried browstat /domain xxxx

and got srange long string that should be my

Most of the "strange long names" are protocol names.

They are just an annoyance when you type them if that
is what you mean.

The 16 characters names (counting the ending HEX codes
as ONE CHARACTER) are NetBIOS names.

ALL NetBIOS names are really 16 characters. (Really)

master browser, how can i translate these numbers
into DNS name?

Into DNS name? Unless it is a machine name or
domain name there really isn't any obvious "translation."

Machine names in NetBIOS get padded to "15 characters
with space" and a 16th "code" is added. These codes
can be found on the Microsoft web site.

Look up something like (in Google):

[ lmhosts "master browser" netbios names site:microsoft.com ]

(LMhosts because one of the main reasons people NEED the
codes is to hand build such files -- mostly in the 'old days'.)

 

[Herb Martin]

unixoid dedicated machine serving as firewall..

Then it is irrelevant (inside-outside firewall)

i knowe that, its temporary as it is, until
migration to w2k3 domain is complete.



no this is not the case.

Right. It protects them from the "outside world" (i.e. , the Internet)

i did, got strange long alfanumeric string that i
dont know how to translate into dns name

Why don't you paste it here?

looking into this, i got one info that browser
service stoped unexpectedly but i link this with
p2p and too many connectons at the moment, as it
did not happened again.

Browser services is important if this was the Master
Browser or Domain Master Browser.

I am not clear if you have multiple (Internal) Subnets?

Are these two (problem) machines on a separate subnet?

 

[Chupa]

Why don't you paste it here?

List of transports currently bound to the browser

1
\Device\NetBT_Tcpip_{779356C2-EAE8-448E-9B1B-0F86AFFAF43F}
2
\Device\NetBT_Tcpip_{37044A27-03E1-4AE6-85E2-9960D489546D}

how to translate this into NetBios name?

Browser services is important if this was the
Master
Browser or Domain Master Browser.

I am not clear if you have multiple (Internal)
Subnets?

no multiple subnets.

Are these two (problem) machines on a separate
subnet?

nope.
most of machines are identical, for example
problematic xpsp2 machine is exact copy /ghost
image / of another 3 that work ok just names where
changed later and domain was joined on all
machines after gost image was copied to disk.

 

[Herb Martin]

List of transports currently bound to the browser

1
\Device\NetBT_Tcpip_{779356C2-EAE8-448E-9B1B-0F86AFFAF43F}
2
\Device\NetBT_Tcpip_{37044A27-03E1-4AE6-85E2-9960D489546D}

how to translate this into NetBios name?

None of it. Those are the transports (protocols) bound
to the browser, presumably two NICs? (Or one NIC
and one dial up maybe.)

The NetBIOS name will look like a machine name or
domain name (or username sometimes), except for the
Master Browser (..__MSBROWSE__.<01>) and other
special purpose names or application specific names
which are not that common anymore.

no multiple subnets.

Ok, so your DC with PDC Emulator should be Domain
Master Browser and the ONLY Master Browser you have
(with the same single subnet.)

nope.

WINS is NOT important to this problem unless the switch
is doing something bad to the broadcasts.

These machines can broadcast for each other and more
importantly the Master Browser so there is little chance
of them missing.

They must have the SAME "NetBIOS" domain or workgroup
name (9x must use workgroups because it doesn't really join
the name.)

Check spelling again.

If it isn't spelling, then I am strongly suspecting a weirdness
in the cables/switch/hub.

This stuff is actually pretty easy and every time we have had
one go down through this many tests (us to you, and your confirm)
then it has turned out to be something as odd as bad drop cables,
or personal firewalls, bad hub or switch, bad port on hub/switch,
etc.

You might try a sniffer, netmon (i.e., the actual NetMon or
EtherReal -- it's free) to watch the broadcasts and see who's
screwing up.

Since you are using the WINS server you should be able to
go view all the registered names -- see if the Master Browser
and Domain Master Browser are in there (and correct.)

And you can check that these machines are in there since if they
are not it implies they aren't really getting to the WINS server

And you have something shared (non-hidden) because we checked
that.

I am seriously betting on the hardware or a personal firewall
(but I think I asked you about the personal firewall thing before.)

most of machines are identical, for example
problematic xpsp2 machine is exact copy /ghost
image / of another 3 that work ok just names where
changed later and domain was joined on all
machines after gost image was copied to disk.

This shouldn't matter (might for domain authentication,
due to SIDs but if NetBIOS and browsing don't care.)

 

[Chupa]

The NetBIOS name will look like a machine name

or
domain name (or username sometimes), except for
the
Master Browser (..__MSBROWSE__.<01>) and other
special purpose names or application specific
names
which are not that common anymore.

Damn, somehow i got two __MSBROWSE__.. entries in
WINS!
One with my DC ip and other with one of two
problematic machines.

I tombstoned one not needed and now all sees all


finaly all works.

Thank You for Your advices and help!


but one problematic machine somehow created a
subnet with same name as my domain name.

Ok, so your DC with PDC Emulator should be
Domain
Master Browser and the ONLY Master Browser you
have
(with the same single subnet.)

is there a way to force my DC to be master borwser
for entire domain that it holds from one computer
(eg.DBC)?

 

[Herb Martin]

Damn, somehow i got two __MSBROWSE__.. entries in
WINS!
One with my DC ip and other with one of two
problematic machines.

One of them thinks (or thought as some point) that it is
the Master Browser.

It may think it is on a different subnet (broadcast problem,
e.g. due to hardware maybe).

I tombstoned one not needed and now all sees all

finaly all works.

IF the problem comes back it is due to the client thinking
it SHOULD be master browser.

You can keep looking for the REAL problem or turn off
the client machine ability to become "master browser".

MaintainServerList is the registry key I believe (but I
am typing from memory so if it is wrong just search for
it on MS or ask me to do it.)

You should NOT need to turn of Master Browser on the
client, but that is one way to overpower the problem.

Thank You for Your advices and help!

You are welcome.