• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1240
  • Last Modified:

Windows XP Client registers Wins 00h and 1Eh record with the same name as NT 4.0 domain

When I build an XP professional machine on my network, the machine registers a 00h and a 1Eh WINS record with the name of the NT 4.0 domain.  Thus users can not login because this new workstation has regitered itself as the name holder for the domain.  After deleting these records, all is well again until another machine is built on the network.

Any help would be great.

0
Charles_R_Irvin
Asked:
Charles_R_Irvin
  • 4
  • 3
1 Solution
 
wesbirdCommented:
does this help? http://support.microsoft.com/default.aspx?scid=kb;en-us;102878

1Eh is the "Browse Master" - but this does not replace the PDC for the domain.  Your new machine is probably winning because it's faster than the server.

See http://support.microsoft.com/default.aspx?scid=kb;en-us;136712 for details of registry settings to modify the server's behaviour and increase its chance of winning an election.
0
 
wesbirdCommented:
Another note - are the machines that can't log in registered with wins?  Setting the node type to 0x08 (hybrid) (in the DHCP server) is usually as safe bet.  This link has details of how to to this: http://support.microsoft.com/default.aspx?scid=kb;en-us;193789

0
 
Charles_R_IrvinAuthor Commented:
Hello,

None of those have helped.  i am using unattened intallation, and this happens during the gui 39 minute window.  I tried installing wins on a new server, and still did not fix the issue, so i do believe it is with the XP pro machine.  I also moved DHCP to another server, with 0x8 as the node type.  Still, clients are registering even after the build as ooh, and 1eh.

Thank you, I'll kep trying on this end.

0
2018 Annual Membership Survey

Here at Experts Exchange, we strive to give members the best experience. Help us improve the site by taking this survey today! (Bonus: Be entered to win a great tech prize for participating!)

 
wesbirdCommented:
Are you putting these machines straight into the domain of your PDC, or are they somehow in a workgroup of the same name?

How many machines are on the network?

Are they all on the same subnet? are the servers the other side of a slow router or switch?  Is the PDC actually registered with WINS?

There should be no issue with them being a browse master since on a network with more than 32 desktops there will be one for each 32 machines, including the PDC.  I still think believe the issue may be with the PDC or the network itself.

Are all of your desktop machines windows XP - or do you have 9x as well?

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 
0
 
Charles_R_IrvinAuthor Commented:
The machines join the domain.  There is a joindomian statement in the unattend.txt.  Also machines thatr are already on the dommain and not built using the unattened method are doing the same thing.  So, I no longer think it is a client side issues any more.

Ther are only 75 to 80 machines.  

Same subnet.  Servers on seperate but recent (bought within last 6 months) Nortel switch.  not sure of model, but capable to 1Gbs.

PDC is registered in wins.

All clients are XP.  AD domain is on same Subnet but with different name.  No 9x machines.  Win2k3 servers for AD.

I  did find a rouge  wins server that was not a replication partner, in fact two of them.  Also, moved wins and dhcp on a new server. and deactivated it from the old server.  

Still same problem.  However, did find this article.  Q161432  this describes the problem very well.  However, moving the wins service and not the database to a new server should have solved this.



0
 
Charles_R_IrvinAuthor Commented:
I also noticed that there wasn't a 1bh record - Domain master browser.  Now there is a 1bh record, but i still can not ping the name of the domain.
0
 
wesbirdCommented:
Is it possible that there's a rougue second DHCP server in the network in a broadband router or something stopping your normal DHCP server from activating properly - you do only have one DHCP server (forgive me if this sounds obvious) - right, because you only have one subnet?  Is the DHCP server also set to do the DDNS registration too for the AD domain too?  The AD domain will use DDNS instead of WINS which causes some anomalies:  http://support.microsoft.com/default.aspx?scid=kb;en-us;255923

Are DDNS for your AD domain and WINS talking to each other - sureley they should be.

Alternately - Could this be it: http://support.microsoft.com/default.aspx?scid=kb;en-us;224131

"SYMPTOMS
Clients cannot log on to the domain controllers. Additional NetBIOS traffic problems are: • Loss of connectivity between servers resulting in servers being unavailable in Server Manager.
• Trust relationships failing to work and failing to be created.
• Other connectivity where sessions for two-way are required.
The primary domain controller (PDC) forces a browsing election every 12 minutes and generates the following event:
Event ID: 8003

Description: The master browser has received a server announcement from the Windows NT client that believes that it is the master browser for the domain on transport (NetBT). The master browser is stopping or an election is being forced.
The client computer is located in a different subnet, and UDP 137 and 138 broadcasts are not being forwarded.
CAUSE
This problem occurs when network logon validation is prevented over a network switch. "
0

Featured Post

[Webinar] Kill tickets & tabs using PowerShell

Are you tired of cycling through the same browser tabs everyday to close the same repetitive tickets? In this webinar JumpCloud will show how you can leverage RESTful APIs to build your own PowerShell modules to kill tickets & tabs using the PowerShell command Invoke-RestMethod.

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now