XP loss of connectivity on 2003 network

Posted on 2006-03-30
Last Modified: 2010-03-19
We've recently developed an issue on our network.  The network spans several campuses and are connected via fiber using Catalysts switches with routing enabled as the campuses are on different networks.

The problem:
Several XP workstations start up and can't connect to the internet.  Telnet does not work either.  Howerver, I can ping, traceroute, nslookup, all with success.  Mapped drives do not work either.  Most of the time, a reboot takes care of the problem and everything works as is should.

Quite a few of the machines it happens on are repeat offenders.

I have not seen any issues with most of the machines and none with any of the servers.  It seems to be random and scattered across all campuses.

I have checked various logs and event viewers and don't really see anything incriminating.

Anyone have any suggestions as to what I should be looking for or how to proceed?
Question by:cisdoz2
    LVL 3

    Expert Comment

    Here are few things to check:

    1. Do you have any Antivirus running on these machines? If you do check the settings.
    I had similar problem and Antivirus was blocking the connection to the network. I could do ping, traceroute and nslookup with success but it would just lose the internet and network connection.

    2. check is the internet explorer settings. It might be setup for dialup and that why you are not getting connected.
    3. check DHCP lease duration. What is the DHCP lease duration?

    Good luck and post back if you find the reason..

    LVL 10

    Expert Comment

    when you 'cant connect to the internet' and cant 'telnet', what happens when you type ipconfig?

    Do you have an IP address yet?
    LVL 1

    Expert Comment

    One thing that I have noticed when workstation lose their connection intermitently is check the network connections.

    On the client machine-
    go to  network connections- Advanced- Advanced Settings-
    Under connections - make sure that the Local Area Connection is in the first position.  

    Sometimes a VPN client or other adapters get placed in the first position causing the workstation to look other places than the LAN.  

    Something else quick to try.  

    LVL 12

    Accepted Solution

    a reboot fixes the problem? sounds like:

    a dhcp ip loss as the first Expert suggested. how long are the machines on ? could they have been on long enough to lose the lease? check(IPCONFIG /ALL)

    are the offending machines plugged to a cheap hub? sometimes a power drop/reset can cause a dying/frozen network card/port to come back to life.. (like a heart stopping/fibulator shock.)

    also just an FYI : sometimes clearing the cache in IE is necessary (and should be done often) when they surf the web alot.  This can fix page not found issues too.

    LVL 12

    Expert Comment

    ALSO sometimes the computer shuts the network card driver off.. check device manager / network card properties ... make sure the powermanagement option ALLOW THE COMPUTER TO TURN OFF THIS DEVICE is NOT checked.


    Author Comment

    Thanks for the quick responses.  We do have the same Anti-virus running on all of our machines.  I will check for the Anti-virus block.  We do not use DHCP.  All of our machines are static and when I do a ipconfig on the machines, all the info shows correct.  I have checked the network properties, including the Advanced settings and they were correct.  Though some of the affected machines are connected to hubs, others plug directly into 3Com and Cisco switches.  I have not checked the power management properties so I will check that as well.

    The network icon shows to be connected and as I mentioned, I can do ping, traceroute and nslookup.  I thought it may be a network loop somewhere but I haven't found one.  I have been looking for duplicate mac addresses on different switchports and have found none.  In one lab, only one machine was affected while all the others worked perfectly.  The machines are identical and were imaged with Ghost.  I even rechecked all computer names and addresses and then reset the SID on all the lab computers and ran the Network ID wizard again.  All worked great and this morning, the same machine failed.  A reboot took care of it.

    I will check these items and post my results.

    Author Comment

    Thanks again for the suggestions.  I stayed last night and rebooted all of our backbone switches (some had been up for 26 weeks) and this morning all went well.  I will watch a couple of days and see how things run.

    Author Comment

    Ok folks, there must have been something weird in one of the switches.  In the days following the reboots, I have seen no issues such that I spoke of earlier.  We have quite a few switches, so I usually don't go around rebooting them all but I have never seen anything like this.  Anyway, thanks again for your input.  If there are not objections, I will have this question closed.
    LVL 12

    Expert Comment

    FYI: I did suggest rebooting hubs (switches)...

    "are the offending machines plugged to a cheap hub? sometimes a power drop/reset can cause a dying/frozen network card/port to come back to life.. (like a heart stopping/fibulator shock.)"


    Featured Post

    Top 6 Sources for Identifying Threat Actor TTPs

    Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

    Join & Write a Comment

    What’s a web proxy server? A proxy server is a server that goes between clients and web servers, used in corporate to enforce corporate browsing policy and ensure security. Proxy servers are commonly used in three modes. A)    Forward proxy …
    Even if you have implemented a Mobile Device Management solution company wide, it is a good idea to make sure you are taking into account all of the major risks to your electronic protected health information (ePHI).
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now