- Posts: 1390
- Thank you received: 0
Can not acces shared folder on server (Urgent help)
18 years 2 months ago #17049
by Smurf
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
Replied by Smurf on topic Re: Can not acces shared folder on server (Urgent help)
Can you confirm that you have not changed the Forest/Domain level recently ? It musn't be set to Windows 2003 level otherwise the Domain Controllers will not be able to talk correctly. Also, have you recently installed service pack 1 on the Windows 2003 server ?
Can you also confirm that the 2 GUID numbers that you identified in sites and services are pingable from both servers (i.e. ping d5cfacef-9c80-46f0-a153-b6dd83d895fa._msdcs.domainname from both DC's and also the other one thats listed agains the other DC and make sure that;
1. The IP is being resolved
2. The two servers can communicate ok)
Cheers
Wayne
Can you also confirm that the 2 GUID numbers that you identified in sites and services are pingable from both servers (i.e. ping d5cfacef-9c80-46f0-a153-b6dd83d895fa._msdcs.domainname from both DC's and also the other one thats listed agains the other DC and make sure that;
1. The IP is being resolved
2. The two servers can communicate ok)
Cheers
Wayne
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
18 years 2 months ago #17052
by chandak76
Replied by chandak76 on topic Re: Can not acces shared folder on server (Urgent help)
No changes have been made but I can confirm that windows updates we installed on the 12-09-2006 which included sp1.The guid numbers are not pingable from any machine.
18 years 2 months ago #17053
by Smurf
This is quite a major issue with regards to replication between the servers. DNS isn't working somewhere along the lines which needs to be repaired.
To Re-cap;
DNS Service is running on Windows 2000.
I would be tempted to put it on the Windows 2003 DC.
Anyhow, here is a document to try and help locate the DNS issue.
support.microsoft.com/kb/824449/en-us
I'll do some research to see if there are any reported issues with Windows 2000 domain controllers and Windows 2003 SP1
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
Replied by Smurf on topic Re: Can not acces shared folder on server (Urgent help)
The guid numbers are not pingable from any machine.
This is quite a major issue with regards to replication between the servers. DNS isn't working somewhere along the lines which needs to be repaired.
To Re-cap;
DNS Service is running on Windows 2000.
I would be tempted to put it on the Windows 2003 DC.
Anyhow, here is a document to try and help locate the DNS issue.
support.microsoft.com/kb/824449/en-us
I'll do some research to see if there are any reported issues with Windows 2000 domain controllers and Windows 2003 SP1
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
- FallenZer0
- Offline
- Premium Member
Less
More
- Posts: 259
- Thank you received: 0
18 years 2 months ago #17058
by FallenZer0
-There Is A Foolish Corner In The Brain Of The Wisest Man- Aristotle
Replied by FallenZer0 on topic Re: Can not acces shared folder on server (Urgent help)
chandak76:
Run netdiag /test:dns; It will tell if the DNS Test Passed/Failed. Failed, Post the error message;
Run netdiag /test:dns; It will tell if the DNS Test Passed/Failed. Failed, Post the error message;
-There Is A Foolish Corner In The Brain Of The Wisest Man- Aristotle
18 years 1 month ago #17121
by chandak76
Replied by chandak76 on topic Re: Can not acces shared folder on server (Urgent help)
Hi,
Sorry for the late reply was away for a while.
netdiag /test:DNS; results
C:\Program Files\Support Tools>netdiag /test:DNS;
......
Computer Name: Servername
DNS Host Name: servername.domain
System info : Microsoft Windows Server 2003 (Build 3790)
Processor : x86 Family 15 Model 4 Stepping 3, GenuineIntel
List of installed hotfixes :
KB890046
KB893756
KB896358
KB896422
KB896424
KB896428
KB899587
KB899588
KB899589
KB899591
KB900725
KB901017
KB901214
KB902400
KB904706
KB905414
KB905915
KB908519
KB908531
KB909520
KB910437
KB911280
KB911562
KB911564
KB911567
KB911927
KB912919
KB913446
KB914388
KB914389
KB917159
KB917344
KB917422
KB917734
KB917953
KB918439
KB918899
KB920214
KB920670
KB920683
KB920685
KB921398
KB921883
KB922582
KB922616
Q147222
Netcard queries test . . . . . . . : Passed
[WARNING] The net card 'Intel(R) PRO/100 M Network Connection' may not be wo
rking.
Per interface results:
Adapter : Local Area Connection 2
Netcard queries test . . . : Passed
Adapter : Local Area Connection
Netcard queries test . . . : Failed
NetCard Status: DISCONNECTED
Some tests will be skipped on this interface.
Global results:
Domain membership test . . . . . . : Passed
NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{9D130A43-D4B9-4F3C-8044-EDAF7576E97B}
NetBT_Tcpip_{B12BA0E4-22B3-4F1E-BC0E-5F832CF3C03D}
2 NetBt transports currently configured.
The command completed successfully
C:\Program Files\Support Tools>
Sorry for the late reply was away for a while.
netdiag /test:DNS; results
C:\Program Files\Support Tools>netdiag /test:DNS;
......
Computer Name: Servername
DNS Host Name: servername.domain
System info : Microsoft Windows Server 2003 (Build 3790)
Processor : x86 Family 15 Model 4 Stepping 3, GenuineIntel
List of installed hotfixes :
KB890046
KB893756
KB896358
KB896422
KB896424
KB896428
KB899587
KB899588
KB899589
KB899591
KB900725
KB901017
KB901214
KB902400
KB904706
KB905414
KB905915
KB908519
KB908531
KB909520
KB910437
KB911280
KB911562
KB911564
KB911567
KB911927
KB912919
KB913446
KB914388
KB914389
KB917159
KB917344
KB917422
KB917734
KB917953
KB918439
KB918899
KB920214
KB920670
KB920683
KB920685
KB921398
KB921883
KB922582
KB922616
Q147222
Netcard queries test . . . . . . . : Passed
[WARNING] The net card 'Intel(R) PRO/100 M Network Connection' may not be wo
rking.
Per interface results:
Adapter : Local Area Connection 2
Netcard queries test . . . : Passed
Adapter : Local Area Connection
Netcard queries test . . . : Failed
NetCard Status: DISCONNECTED
Some tests will be skipped on this interface.
Global results:
Domain membership test . . . . . . : Passed
NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{9D130A43-D4B9-4F3C-8044-EDAF7576E97B}
NetBT_Tcpip_{B12BA0E4-22B3-4F1E-BC0E-5F832CF3C03D}
2 NetBt transports currently configured.
The command completed successfully
C:\Program Files\Support Tools>
18 years 1 day ago #18311
by puneetvig
See Ya!!!!!! Cheers
Puneet
Replied by puneetvig on topic Re: Can not acces shared folder on server (Urgent help)
Here are couple of suggestion:
CAUSE:
This issue occurs if the restrictanonymous registry entry is set to a value of 1 on the Windows XP-based computer.
RESOLUTION
1. Click Start, click Run, type regedit in the Open box, and then click OK.
2. Locate and then double-click the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
3. In the right pane, double-click restrictanonymous.
4. Make sure that the value in the Value data box is set to 0, and then click OK.
5. Close Registry Editor.
6. Restart the computer.
++++++++++++++++++++++++++++++++++++
R: Right click the connection then click properties, and click on the advanced tab,
and take the check mark out of the "protect my computer and network box. (This can
be recreated in the Call center by enabling the firewall and then restarting the
machine, logging on and trying "my network places. this also occurs in Xphome.)
+++++++++++++++++++++++++++++++++++++++++++++
Action:Checked in control panel - administrative tools - Local Security Policy -
"User rights assignment"
Result:In the security settings no account was specified
Action:Added administrative,user acount and 'everyone ' in the security settings in
computer 1
Result:Successful
++++++++++++++++++++++++++++++++++++++++
Action: Downloaded the NTRIGHTS from the
www.microsoft.com/downloads/details.aspx...9-57ff-4ae7-96ee-b18
c4790cffd&displaylang=en
Result: Installed and run on the computer - the one we could not access
Action: Start->All Programs->Windows Resource Kit Tools->Command Shell
Result: net user guest /active:yes
ntrights +r SeNetworkLogonRight -u Guest
ntrights -r SeDenyNetworkLogonRight -u Guest
Action: Restarted the computer
Result: Tried to access the XP-PRO machine; works like a charm
Try dis............
CAUSE:
This issue occurs if the restrictanonymous registry entry is set to a value of 1 on the Windows XP-based computer.
RESOLUTION
1. Click Start, click Run, type regedit in the Open box, and then click OK.
2. Locate and then double-click the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
3. In the right pane, double-click restrictanonymous.
4. Make sure that the value in the Value data box is set to 0, and then click OK.
5. Close Registry Editor.
6. Restart the computer.
++++++++++++++++++++++++++++++++++++
R: Right click the connection then click properties, and click on the advanced tab,
and take the check mark out of the "protect my computer and network box. (This can
be recreated in the Call center by enabling the firewall and then restarting the
machine, logging on and trying "my network places. this also occurs in Xphome.)
+++++++++++++++++++++++++++++++++++++++++++++
Action:Checked in control panel - administrative tools - Local Security Policy -
"User rights assignment"
Result:In the security settings no account was specified
Action:Added administrative,user acount and 'everyone ' in the security settings in
computer 1
Result:Successful
++++++++++++++++++++++++++++++++++++++++
Action: Downloaded the NTRIGHTS from the
www.microsoft.com/downloads/details.aspx...9-57ff-4ae7-96ee-b18
c4790cffd&displaylang=en
Result: Installed and run on the computer - the one we could not access
Action: Start->All Programs->Windows Resource Kit Tools->Command Shell
Result: net user guest /active:yes
ntrights +r SeNetworkLogonRight -u Guest
ntrights -r SeDenyNetworkLogonRight -u Guest
Action: Restarted the computer
Result: Tried to access the XP-PRO machine; works like a charm
Try dis............
See Ya!!!!!! Cheers
Puneet
Time to create page: 0.141 seconds