• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 252
  • Last Modified:

How do I determine what is keeping this site from using NETBios to a particular server?

I have an interesting situation that I find heavily referenced, but cannot find a solution for my particular scenario.

I have a few remote sites, connected to our main site via Cisco ASA IPSec VPN tunnel.  No specific ACL's regarding traffic.  Running DNS, WINS in a 2000 mixed mode environment.

No issues for years up to a point.  We moved an Oracle database from one server(2000 domain controller) to another(2003 non domain controller).  (Server in question was not involved).  Made some required DNS changes.

Problem - At one of the remote sites, no one can Browse by NETBios (\\computername\share) to one specific server (Windows server 2003 SP1).  Error in Windows Explorer - \\computername\share is not accessible.  You might not have permission to use this network resource.  Contact the Administrator of this server to find out if you have access permissions.  The account is not authorized to log in from this station.
Command prompt error when issuing a "net view \\servername" - System error 5 has occurred. - Access is denied.
They can browse to other servers with no problems.

We took a laptop and connected it via a Sprint Mobile Broadband card and Cisco client VPN and it works fine.
We have other sites connected the same way with no issues.

I have verified that both DNS and WINS are working properly.

I have searched the internet profusely and tried all solutions that applied with no luck.
I have checked Local Security Policies for restrictions.

Any assistance would be greatly appreciated.
0
jschue
Asked:
jschue
  • 3
  • 2
  • 2
  • +1
1 Solution
 
felnyCommented:
First: Im sorry if you can not understand my english.

Is not the same to share a folder from its propertys that to share a folder from the computers management. See see the pìcture.

I hope it helps you.
LostConection.JPG
0
 
PakaCommented:
To eliminate DNS/WINS - can you connect using the IP address?
Do the clients have NetBIOS enabled?
You might also try portqueryui to diagnose layer-3 or filrewall issues:
http://www.microsoft.com/downloads/details.aspx?familyid=8355e537-1ea6-4569-aabb-f248f4bd91d0&displaylang=en
0
 
jschueAuthor Commented:
Thanks for the input, but it is not a matter of being able to access a share.  The issue is browsing the network using NETBios.

Example:
NetBios.jpg
0
Simple Misconfiguration =Network Vulnerability

In this technical webinar, AlgoSec will present several examples of common misconfigurations; including a basic device change, business application connectivity changes, and data center migrations. Learn best practices to protect your business from attack.

 
jschueAuthor Commented:
Thanks Paka.


Yes, they can browse using IP address.  I should have mentioned that in my initial description.  And yes, NetBIOS is enabled,
TCPIPSettings.jpg
0
 
PakaCommented:
If they can browse using IP then it's definitely a name resolution issue.  Double check your DNS A records and WINS entries.
0
 
ChiefITCommented:
Change that to Netbios over TCP/IP.

0
 
ChiefITCommented:
You are using a static IP for the server.

0
 
jschueAuthor Commented:
After checking for the 200th time, I found that the sites WINS server had not updated the records correctly and in trying to "fix" it, I made troubleshooting it More difficult!!

Oh, the wasted time!

Everyone can see everything now.

Thanks for all the input.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Increase Security & Decrease Risk with NSPM Tools

Analyst firm, Enterprise Management Associates (EMA) reveals significant benefits to enterprises when using Network Security Policy Management (NSPM) solutions, while organizations without, experienced issues including non standard security policies and failed cloud migrations

  • 3
  • 2
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now