Click here to get back home

Big (please read HUGE) problem in the network
 Home | NewsGroups | Search | About
Login Password
Register Now!
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Big (please read HUGE) problem in the network balexandre 10-12-2007
Posted by balexandre on October 12, 2007, 5:16 am
Please log in for more thread options
 Hi to all,

I have a huge problem here in the company network

Pentium4/512Mb - Windows 2000 Server SP4, with Exchange 2000
no more updates via Windows Update, in other words, everything is updated

it's a random problem in time and the users with Windows XP (I'm the only
one using Windows Vista) get no connection whatsoever to the server.

they cant access to the shared folders
they cant receive any new emails
they cant access to the printers (all printers are shared in the server)
etc...

resolution attempt:
with the "deny" access to the server:
- I can ping the server with no delays
- I did the release followed by renew and the DHCP server from Windows
gives me back the new addresses
- I cant in any what to access //fileserver

to know:
we have 3 users using Windows XP
we have 1 user using Windows Vista

in the third user in W.XP it hangs for 1 minute but after she can access the
shared folders with no problems, this is a new USER in the active Directory
created in September this year, the other 2 were created more than 3 years
ago

on the time of the "hang/no connection" in the Taks manager there is no high
piks in the CPU usage

thoughts:
. can it maybe there a script that runs "under cover" but only in the old
users? if yes, how can I discover such diamond?
. how can I have access to receive the IP's using ipconfig /release ipconfig
/renew but I can access to any printer or folder in the server, not even
//fileserver
. why this only happens at late afternoon? (arround 16.30 - 17.30) - Backup
is off and no scripts runs on this time or earlier.

I apreciate any idea or thought that you might have so I can investigate,
cause... I already passed my "know how" :-(

--
Bruno Alexandre
Strøby, Danmark

"a Portuguese in Denmark"




Posted by Anthony on October 12, 2007, 5:42 am
Please log in for more thread options
 Bruno,
1) What errors do you have in the client event log
2) Turn on full Auditing for the server, and what errors do you have in the
server event log?
3) What is the result of ipconfig/all on the server?
4) What is the result of ipconfig/all on the client?
5) What has changed recently?
6) What happens if the user restarts the PC when the problem occurs?
7) What happens if you restart the server when the problem occurs?
Anthony, http://www.airdesk.com




> Hi to all,
>
> I have a huge problem here in the company network
>
> Pentium4/512Mb - Windows 2000 Server SP4, with Exchange 2000
> no more updates via Windows Update, in other words, everything is updated
>
> it's a random problem in time and the users with Windows XP (I'm the only
> one using Windows Vista) get no connection whatsoever to the server.
>
> they cant access to the shared folders
> they cant receive any new emails
> they cant access to the printers (all printers are shared in the server)
> etc...
>
> resolution attempt:
> with the "deny" access to the server:
> - I can ping the server with no delays
> - I did the release followed by renew and the DHCP server from Windows
> gives me back the new addresses
> - I cant in any what to access //fileserver
>
> to know:
> we have 3 users using Windows XP
> we have 1 user using Windows Vista
>
> in the third user in W.XP it hangs for 1 minute but after she can access
> the shared folders with no problems, this is a new USER in the active
> Directory created in September this year, the other 2 were created more
> than 3 years ago
>
> on the time of the "hang/no connection" in the Taks manager there is no
> high piks in the CPU usage
>
> thoughts:
> . can it maybe there a script that runs "under cover" but only in the old
> users? if yes, how can I discover such diamond?
> . how can I have access to receive the IP's using ipconfig /release
> ipconfig /renew but I can access to any printer or folder in the server,
> not even //fileserver
> . why this only happens at late afternoon? (arround 16.30 - 17.30) -
> Backup is off and no scripts runs on this time or earlier.
>
> I apreciate any idea or thought that you might have so I can investigate,
> cause... I already passed my "know how" :-(
>
> --
> Bruno Alexandre
> Strøby, Danmark
>
> "a Portuguese in Denmark"
>
>
>



Posted by balexandre on October 12, 2007, 6:39 am
Please log in for more thread options
> 1) What errors do you have in the client event log 2) Turn on full
> Auditing for the server, and what errors do you have in the server event
> log?

I deleted all the events and I'm waiting to the problem "pop up" again so I
can see the Event Viewer on the server and on the client.

> 3) What is the result of ipconfig/all on the server?
C:\>ipconfig /all

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : fileserver
Primary DNS Suffix . . . . . . . : domain1.dom
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : domain1.dom

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network
Connection
Physical Address. . . . . . . . . : 00-C0-9F-25-ED-0F
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.2.10
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.2.1
DNS Servers . . . . . . . . . . . : 192.168.2.10
Primary WINS Server . . . . . . . : 192.168.2.10


> 4) What is the result of ipconfig/all on the client?
C:\>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : intercell8
Primary Dns Suffix . . . . . . . : domain1.dom
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : domain1.dom
Intercell

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : Intercell
Description . . . . . . . . . . . : Realtek RTL8139/810x Family Fast
Eth
ernet NIC
Physical Address. . . . . . . . . : 00-0B-5D-96-98-00
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.2.37
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.2.1
DHCP Server . . . . . . . . . . . : 192.168.2.10
DNS Servers . . . . . . . . . . . : 194.239.134.83
193.162.153.164
192.168.2.10
Lease Obtained. . . . . . . . . . : 12. oktober 2007 09:14:00
Lease Expires . . . . . . . . . . : 20. oktober 2007 09:14:00

Ethernet adapter Wireless Network Connection:

Media State . . . . . . . . . . . : Media disconnected
Description . . . . . . . . . . . : Intel(R) PRO/Wireless 2915ABG
Network Connection
Physical Address. . . . . . . . . : 00-13-CE-9A-BE-C2

> 5) What has changed recently?
since the problems started... nothing, just updates

> 6) What happens if the user restarts the PC when the problem occurs?
everything will be fine and accessible until the next "lost-connection"

> 7) What happens if you restart the server when the problem occurs?
problem remains

--
Bruno Alexandre
Strøby, Danmark

"a Portuguese in Denmark"



Posted by Austin Osuide on October 12, 2007, 6:55 am
Please log in for more thread options
Hi Anthony,
Just looking at your clints DNS settings and I see 2 entries for DNS servers
that are not on your network (the tele.dk DNS servers).
My suggestion is: for your clients, only confgure DNS for the internal DNS
server ie 192.168.2.10.
On the DC which acts as a DNS server, configure Forwarders for all other DNS
domains and use the the IP adds for your ISPs DNS server.
I think this Might resolve some of the issues ou are seeing.

"balexandre" wrote:

> > 1) What errors do you have in the client event log 2) Turn on full
> > Auditing for the server, and what errors do you have in the server event
> > log?
>
> I deleted all the events and I'm waiting to the problem "pop up" again so I
> can see the Event Viewer on the server and on the client.
>
> > 3) What is the result of ipconfig/all on the server?
> C:\>ipconfig /all
>
> Windows 2000 IP Configuration
>
> Host Name . . . . . . . . . . . . : fileserver
> Primary DNS Suffix . . . . . . . : domain1.dom
> Node Type . . . . . . . . . . . . : Hybrid
> IP Routing Enabled. . . . . . . . : No
> WINS Proxy Enabled. . . . . . . . : No
> DNS Suffix Search List. . . . . . : domain1.dom
>
> Ethernet adapter Local Area Connection:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network
> Connection
> Physical Address. . . . . . . . . : 00-C0-9F-25-ED-0F
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 192.168.2.10
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . : 192.168.2.1
> DNS Servers . . . . . . . . . . . : 192.168.2.10
> Primary WINS Server . . . . . . . : 192.168.2.10
>
>
> > 4) What is the result of ipconfig/all on the client?
> C:\>ipconfig /all
>
> Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : intercell8
> Primary Dns Suffix . . . . . . . : domain1.dom
> Node Type . . . . . . . . . . . . : Unknown
> IP Routing Enabled. . . . . . . . : No
> WINS Proxy Enabled. . . . . . . . : No
> DNS Suffix Search List. . . . . . : domain1.dom
> Intercell
>
> Ethernet adapter Local Area Connection:
>
> Connection-specific DNS Suffix . : Intercell
> Description . . . . . . . . . . . : Realtek RTL8139/810x Family Fast
> Eth
> ernet NIC
> Physical Address. . . . . . . . . : 00-0B-5D-96-98-00
> Dhcp Enabled. . . . . . . . . . . : Yes
> Autoconfiguration Enabled . . . . : Yes
> IP Address. . . . . . . . . . . . : 192.168.2.37
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . : 192.168.2.1
> DHCP Server . . . . . . . . . . . : 192.168.2.10
> DNS Servers . . . . . . . . . . . : 194.239.134.83
> 193.162.153.164
> 192.168.2.10
> Lease Obtained. . . . . . . . . . : 12. oktober 2007 09:14:00
> Lease Expires . . . . . . . . . . : 20. oktober 2007 09:14:00
>
> Ethernet adapter Wireless Network Connection:
>
> Media State . . . . . . . . . . . : Media disconnected
> Description . . . . . . . . . . . : Intel(R) PRO/Wireless 2915ABG
> Network Connection
> Physical Address. . . . . . . . . : 00-13-CE-9A-BE-C2
>
> > 5) What has changed recently?
> since the problems started... nothing, just updates
>
> > 6) What happens if the user restarts the PC when the problem occurs?
> everything will be fine and accessible until the next "lost-connection"
>
> > 7) What happens if you restart the server when the problem occurs?
> problem remains
>
> --
> Bruno Alexandre
> Strøby, Danmark
>
> "a Portuguese in Denmark"
>
>
>

Posted by Anthony on October 12, 2007, 7:05 am
Please log in for more thread options
Or Bruno
> Hi Anthony,
> Just looking at your clints DNS settings and I see 2 entries for DNS
> servers
> that are not on your network (the tele.dk DNS servers).
> My suggestion is: for your clients, only confgure DNS for the internal DNS
> server ie 192.168.2.10.
> On the DC which acts as a DNS server, configure Forwarders for all other
> DNS
> domains and use the the IP adds for your ISPs DNS server.
> I think this Might resolve some of the issues ou are seeing.
>
> "balexandre" wrote:
>
>> > 1) What errors do you have in the client event log 2) Turn on full
>> > Auditing for the server, and what errors do you have in the server
>> > event
>> > log?
>>
>> I deleted all the events and I'm waiting to the problem "pop up" again so
>> I
>> can see the Event Viewer on the server and on the client.
>>
>> > 3) What is the result of ipconfig/all on the server?
>> C:\>ipconfig /all
>>
>> Windows 2000 IP Configuration
>>
>> Host Name . . . . . . . . . . . . : fileserver
>> Primary DNS Suffix . . . . . . . : domain1.dom
>> Node Type . . . . . . . . . . . . : Hybrid
>> IP Routing Enabled. . . . . . . . : No
>> WINS Proxy Enabled. . . . . . . . : No
>> DNS Suffix Search List. . . . . . : domain1.dom
>>
>> Ethernet adapter Local Area Connection:
>>
>> Connection-specific DNS Suffix . :
>> Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network
>> Connection
>> Physical Address. . . . . . . . . : 00-C0-9F-25-ED-0F
>> DHCP Enabled. . . . . . . . . . . : No
>> IP Address. . . . . . . . . . . . : 192.168.2.10
>> Subnet Mask . . . . . . . . . . . : 255.255.255.0
>> Default Gateway . . . . . . . . . : 192.168.2.1
>> DNS Servers . . . . . . . . . . . : 192.168.2.10
>> Primary WINS Server . . . . . . . : 192.168.2.10
>>
>>
>> > 4) What is the result of ipconfig/all on the client?
>> C:\>ipconfig /all
>>
>> Windows IP Configuration
>>
>> Host Name . . . . . . . . . . . . : intercell8
>> Primary Dns Suffix . . . . . . . : domain1.dom
>> Node Type . . . . . . . . . . . . : Unknown
>> IP Routing Enabled. . . . . . . . : No
>> WINS Proxy Enabled. . . . . . . . : No
>> DNS Suffix Search List. . . . . . : domain1.dom
>> Intercell
>>
>> Ethernet adapter Local Area Connection:
>>
>> Connection-specific DNS Suffix . : Intercell
>> Description . . . . . . . . . . . : Realtek RTL8139/810x Family
>> Fast
>> Eth
>> ernet NIC
>> Physical Address. . . . . . . . . : 00-0B-5D-96-98-00
>> Dhcp Enabled. . . . . . . . . . . : Yes
>> Autoconfiguration Enabled . . . . : Yes
>> IP Address. . . . . . . . . . . . : 192.168.2.37
>> Subnet Mask . . . . . . . . . . . : 255.255.255.0
>> Default Gateway . . . . . . . . . : 192.168.2.1
>> DHCP Server . . . . . . . . . . . : 192.168.2.10
>> DNS Servers . . . . . . . . . . . : 194.239.134.83
>> 193.162.153.164
>> 192.168.2.10
>> Lease Obtained. . . . . . . . . . : 12. oktober 2007 09:14:00
>> Lease Expires . . . . . . . . . . : 20. oktober 2007 09:14:00
>>
>> Ethernet adapter Wireless Network Connection:
>>
>> Media State . . . . . . . . . . . : Media disconnected
>> Description . . . . . . . . . . . : Intel(R) PRO/Wireless 2915ABG
>> Network Connection
>> Physical Address. . . . . . . . . : 00-13-CE-9A-BE-C2
>>
>> > 5) What has changed recently?
>> since the problems started... nothing, just updates
>>
>> > 6) What happens if the user restarts the PC when the problem occurs?
>> everything will be fine and accessible until the next "lost-connection"
>>
>> > 7) What happens if you restart the server when the problem occurs?
>> problem remains
>>
>> --
>> Bruno Alexandre
>> Strøby, Danmark
>>
>> "a Portuguese in Denmark"
>>
>>
>>



Similar ThreadsPosted
home network problem March 23, 2006, 1:21 am
Find Huge MCSE resources... June 26, 2007, 6:40 am
"Network Service" account is UNABLE to write to a network shared folder April 18, 2007, 7:01 pm
execute but no copy or read April 26, 2006, 2:58 am
Why Are List Folder / Read Data Combined? November 21, 2005, 10:45 pm
"Read-Only" branch office domain controllers? April 20, 2006, 2:34 am
Unable to read any security database file February 7, 2007, 2:31 pm
ACLs - Users with READ can MOVE a whole folder? April 11, 2007, 10:45 am
Permissions for all of group to read, only creator can modify October 3, 2007, 8:58 pm
Read-Only Access to the entire server - everything , not just the Files & Folders October 23, 2005, 8:12 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap