Click here to get back home

Network drives show disconnected, sometimes, but still work?

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Network drives show disconnected, sometimes, but still work? Leythos 11-30-2007
Posted by Leythos on November 30, 2007, 8:31 pm
Please log in for more thread options
I have a client that has been in service for server years running
Windows 2003 Std, hundreds of users, all workstations are Win 95 Prof
and all updates/patches, Symantec Corporate Edition 10.0.x on server and
all workstations, proper exclusions as outlined by MS and Symantec, 12
shares mapped as drive letters in login script, etc...

About 2 weeks ago they started reporting that some drives show as
"Disconnected" by they can open them and all their permissions and files
are proper. Once they connect, they can hit F5 (my computer, refresh)
and the drive no longer shows disconnected, it may show disconnected in
a couple hours and they can do it again.. Once in a while the drive will
not connect and they reboot and it works fine again...

I see no errors in the event logs, no errors in the server (and we have
extensive security error tracking enabled), etc....

Is anyone else seeing this, starting two weeks ago?


--

Leythos
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
spam999free@rrohio.com (remove 999 for proper email address)

Posted by Dorkside on December 5, 2007, 6:40 pm
Please log in for more thread options
This is a known issue with SAV 10.1. It appears to be resolved in 10.1.7.
The only way we have been able to resolve it is to have the user's restart
their workstations. There is also a MS KB on this, but the registry solution
it gives won't always resolve the issue.
http://support.microsoft.com/kb/932463

However, interestingly enough, I have one computer where I upgraded it to
SAV 10.1.7. The problem went away; so, I used NoNav to completely remove
10.1.7 and installed 10.1.4 again so we could do more testing with the
issue... except, the issue hasn't come back. So, one possible solution would
be to use NoNav to remove SAV completely on that machine; then, re-install.
Ugly temp fix.. and I'm not positive at this point that it truly is a fix.
Time will tell.

I'm also going to play with some of the SAV settings... because a scan seems
to cause the issue. I'm going to try disabling hueristics to see what
happens.

By the way, 9.x doesn't have this issue... but then you don't get the
security threat protection, which represents the majority of threats these
days.


"Leythos" wrote:

> I have a client that has been in service for server years running
> Windows 2003 Std, hundreds of users, all workstations are Win 95 Prof
> and all updates/patches, Symantec Corporate Edition 10.0.x on server and
> all workstations, proper exclusions as outlined by MS and Symantec, 12
> shares mapped as drive letters in login script, etc...
>
> About 2 weeks ago they started reporting that some drives show as
> "Disconnected" by they can open them and all their permissions and files
> are proper. Once they connect, they can hit F5 (my computer, refresh)
> and the drive no longer shows disconnected, it may show disconnected in
> a couple hours and they can do it again.. Once in a while the drive will
> not connect and they reboot and it works fine again...
>
> I see no errors in the event logs, no errors in the server (and we have
> extensive security error tracking enabled), etc....
>
> Is anyone else seeing this, starting two weeks ago?
>
>
> --
>
> Leythos
> - Igitur qui desiderat pacem, praeparet bellum.
> - Calling an illegal alien an "undocumented worker" is like calling a
> drug dealer an "unlicensed pharmacist"
> spam999free@rrohio.com (remove 999 for proper email address)
>

Similar ThreadsPosted
Show informational notifications for network printers with firewall February 5, 2008, 3:03 am
Priority: Users Home Laptops Brought In To Work (keeping them off company network) December 26, 2006, 12:13 pm
When Should Anonymous Logons Show on Windows 200x? February 13, 2007, 2:09 pm
Number of logons when disconnected from the Domain? August 4, 2006, 2:37 am
GPO to disallow USB drives on workstations? August 7, 2007, 8:38 pm
Group Policy Restrict All Drives February 23, 2006, 10:31 am
vista domain clients no longer see USB drives June 9, 2008, 7:05 pm
Windows 2003 services don't have access to mapped drives July 17, 2007, 8:45 pm
"Network Service" account is UNABLE to write to a network shared folder April 18, 2007, 7:01 pm
How Policies Work November 17, 2006, 2:43 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap