Hello,
Thank you for posting here.
I understand that you are unable to start the WINS Service and you suspect
it is due to the disappearing IPC$ share.
Please provide us more information to drill down to the solution.
What exactly happens when you try starting the WINS Service?
Is WINS Installed on both servers?
Is there any related event IDs recorded in the event viewer?
When did this issue begin?
Regarding the missing IPC$ share, please find more information
Administrative Shares Do Not Appear on Server
http://support.microsoft.com/default.aspx?scid=kb;[LN];245117
HOW TO: Restore Administrative Shares That Have Been Deleted
http://support.microsoft.com/default.aspx?scid=kb;[LN];318755
If these articles do not resolve your issue, the most likely cause of
missing admin shares is malware that could be running on the computer, such
as a virus, worm, Trojan, backdoor, spyware application or other type of
hacker tool.
To check for malware, start by running a full anti-virus scan on the
computer using the latest definitions. After completing the anti-virus
scan, check the system for other types of malware, such as spyware or
hacker tools.
Next, check the AutoShareServer and AutoShareWks registry values to make
sure they are not set to 0:
1. Start Registry Editor (Regedt32), and then locate the following registry
sub-key:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters
2. If the AutoShareServer and AutoShareWks DWORD values exist with a value
data of 0, set them to 1 or delete them. If these values do not exist, you
do not need to create them because the default behavior is to create the
admin shares automatically.
3. Quit Registry Editor.
4. Restart the computer and make sure the shares are active.
To check for the admin shares, run "net share" (without quotation marks) at
a command prompt. If the system is clean of malware and the AutoShareServer
and AutoShareWks registry values are not set to 0, the system should create
the admin shares automatically at startup. If the system does not create
the admin shares automatically, you may be able to fix this by removing and
reinstalling TCP/IP. For more information about removing and reinstalling
TCP/IP on Windows 2000, see the following KB articles:
299451 HOW TO: Remove and Reinstall TCP/IP on a Windows 2000 Domain
Controller
http://support.microsoft.com/?id=299451
285034 How to remove and reinstall TCP/IP for Windows 2000
http://support.microsoft.com/?id=285034
Alternatively, you can recreate the missing admin shares manually by using
one or more of the following commands:
net share ipc$
net share admin$
net share c$
CAUTION: Be aware that reinstalling TCP/IP or using the net share command
is a temporary workaround only. Neither of these methods for restoring the
admin shares will ensure that the server is no longer in a compromised
state.
Do let us know the results.
I hope the above information helps. If there is anything unclear, please
feel free to let me know. Thank you and have a nice day!
Rashmi
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
From: "Sim" <
[email protected]>
Subject: Cannot keep hidden shares alive
Date: Sun, 4 Jul 2004 20:46:14 -0400
Lines: 20
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1409
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
Message-ID: <
[email protected]>
Newsgroups: microsoft.public.win2000.file_system
NNTP-Posting-Host: mx1.cmt-canada.com 207.236.234.220
Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.file_system:21000
X-Tomcat-NG: microsoft.public.win2000.file_system
I have a multitude of issues at the moment, WINS cannot connect, this may
have to do with the IPC$ share not being there.
By the way, Windows 2000 all patched up.
I've made sure the registry has the correct entries for the admin shares as
well as poledit.
If I try to creat the share it just disappears after 15 seconds and the
folder is no longer shared.
File sharing is turned on.
Where else can I look, it has happened to my PDC and BDC at the same time
for some reason?
Thanks,
Sim
