unable to map network drives

[randalino]

Hi

We're running Windows 2003 with a workgroup and I'm unable to map
network drives.

A few days ago a couple of computers that accessed a share on this
server couldn't connect. I remapped the drives and they got in fine. It
kept happening and event ID 4321 is appearing in event viewer on client
PC's and the server.

I figured restarting the server was worth a try but now no-one can
access shared drives on the server. If I try to map a drive it just says
the network path isn't found. NAT drives are unaffected and the server
itself can access a share on it's local drive, if that makes sense, so
the problem is that something is stopping all client PC's accessing the
server..even my remote desktop connection has stopped working.

I'm not sure if this is a netbios problem (we are using a workgroup not
a domain), a virus or what...any advice would be appreciated!

thanks


--
randalino
------------------------------------------------------------------------
randalino's Profile: http://forums.techarena.in/members/143585.htm
View this thread: http://forums.techarena.in/windows-server-help/1257721.htm

http://forums.techarena.in

 

[Dave Patrick]

Can you post unedited

ipconfig /all

on both server and workstation?



--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect


"randalino" wrote:
>
> Hi
>
> We're running Windows 2003 with a workgroup and I'm unable to map
> network drives.
>
> A few days ago a couple of computers that accessed a share on this
> server couldn't connect. I remapped the drives and they got in fine. It
> kept happening and event ID 4321 is appearing in event viewer on client
> PC's and the server.
>
> I figured restarting the server was worth a try but now no-one can
> access shared drives on the server. If I try to map a drive it just says
> the network path isn't found. NAT drives are unaffected and the server
> itself can access a share on it's local drive, if that makes sense, so
> the problem is that something is stopping all client PC's accessing the
> server..even my remote desktop connection has stopped working.
>
> I'm not sure if this is a netbios problem (we are using a workgroup not
> a domain), a virus or what...any advice would be appreciated!
>
> thanks
>
>
> --
> randalino
> ------------------------------------------------------------------------
> randalino's Profile: http://forums.techarena.in/members/143585.htm
> View this thread:
> http://forums.techarena.in/windows-server-help/1257721.htm
>
> http://forums.techarena.in
>

 

[Ace Fekay [MCT]]

"Dave Patrick" wrote in message
news:OLsEBJ2SKHA.4048@TK2MSFTNGP05.phx.gbl...

In addition to the ipconfig /all from two machines, Randalino please post
any services you may disabled, updates installed, any security software
installed (AV, 3rd party firewall, etc), and what role does it hold and
service and apps does this machine have (RRAS, NAT, DC, etc).

Ace



> Can you post unedited
>
> ipconfig /all
>
> on both server and workstation?
>
>
>
> --
>
> Regards,
>
> Dave Patrick ....Please no email replies - reply in newsgroup.
> Microsoft Certified Professional
> Microsoft MVP [Windows]
> http://www.microsoft.com/protect
>
>
> "randalino" wrote:
>>
>> Hi
>>
>> We're running Windows 2003 with a workgroup and I'm unable to map
>> network drives.
>>
>> A few days ago a couple of computers that accessed a share on this
>> server couldn't connect. I remapped the drives and they got in fine. It
>> kept happening and event ID 4321 is appearing in event viewer on client
>> PC's and the server.
>>
>> I figured restarting the server was worth a try but now no-one can
>> access shared drives on the server. If I try to map a drive it just says
>> the network path isn't found. NAT drives are unaffected and the server
>> itself can access a share on it's local drive, if that makes sense, so
>> the problem is that something is stopping all client PC's accessing the
>> server..even my remote desktop connection has stopped working.
>>
>> I'm not sure if this is a netbios problem (we are using a workgroup not
>> a domain), a virus or what...any advice would be appreciated!
>>
>> thanks
>>
>>
>> --
>> randalino
>> ------------------------------------------------------------------------
>> randalino's Profile: http://forums.techarena.in/members/143585.htm
>> View this thread:
>> http://forums.techarena.in/windows-server-help/1257721.htm
>>
>> http://forums.techarena.in
>>
>

 

[randalino]

Hi Ace, Dave

We're using Kaspersky v 6.0 and haven't changed anything on the server.
I've been running virus/trojan checks but so far nothing..
the server is just used as a file server- no active directory, no
exchange. It's sitting behind a juniper firewall.

We also had event ID 8009 on 1 machine

thanks!

IPCONFIG /ALL FROM A VISTA WORKSTATION:
C:\Users\Charlie>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : Charlie
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : SSG5-Serial

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : SSG5-Serial
Description . . . . . . . . . . . : Intel

 

[randalino]

ok,

I literally shut everything down- server, workstations, switch,
firewall, wireless router, anything connected to the network basically.
I restarted everything but the problem is still there. Am beginning to
think we have a network virus/worm because this problem seemed to appear
very quickly and there were no changes made by me/anyone else that could
have had this sort of impact.

The relevant event ID's we're getting across server/workstations are:
4321, 8003 (source Mrxsmb) and 4319

Randalino


--
randalino
------------------------------------------------------------------------
randalino's Profile: http://forums.techarena.in/members/143585.htm
View this thread: http://forums.techarena.in/windows-server-help/1257721.htm

http://forums.techarena.in

 

[Ace Fekay [MCT]]

"randalino" wrote in message
news:randalino.4006fa@DoNotSpam.com...
>
> ok,
>
> I literally shut everything down- server, workstations, switch,
> firewall, wireless router, anything connected to the network basically.
> I restarted everything but the problem is still there. Am beginning to
> think we have a network virus/worm because this problem seemed to appear
> very quickly and there were no changes made by me/anyone else that could
> have had this sort of impact.
>
> The relevant event ID's we're getting across server/workstations are:
> 4321, 8003 (source Mrxsmb) and 4319
>
> Randalino
>
>
> --
> randalino

Thank you for posting that information and the ipconfig.

It appears the problem is with the 'vistaserver' because it has the
following enabled:
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes

Is there any reason these features are enabled? I suggest to disable them,
and the problem should go away.

Ace
Ace

 

[DaveMills]

On Tue, 13 Oct 2009 13:51:13 +0530, randalino
wrote:

>
>Hi Ace, Dave
>
>We're using Kaspersky v 6.0 and haven't changed anything on the server.

A bit off topic but I installed the Kaspersky v 8 mgmt console today and it is
well worth doing even if you stick to v6 agent etc.
--
Dave Mills
There are 10 types of people, those that understand binary and those that don't.

 

[Ace Fekay [MCT]]

"DaveMills" wrote in message
news:q7j9d59v8g88vbf3vi6ss60g04h1gr2lhu@4ax.com...
> On Tue, 13 Oct 2009 13:51:13 +0530, randalino
>
> wrote:
>
>>
>>Hi Ace, Dave
>>
>>We're using Kaspersky v 6.0 and haven't changed anything on the server.
>
> A bit off topic but I installed the Kaspersky v 8 mgmt console today and
> it is
> well worth doing even if you stick to v6 agent etc.
> --
> Dave Mills
> There are 10 types of people, those that understand binary and those that
> don't.


I've tried Kaspersky eval version last year on a personal workstation, just
to see if I would suggest it to some clients, but with the licensing, I
decided to not go with it. It's not a bad product.

Thanks!

Ace