Solved

unknown workgroups/domains in our network

Posted on 2010-09-15
5
357 Views
Last Modified: 2013-12-04
Please help, when I browse to My Network Places|Entire Network|Microsoft Windows Network I can see my domain. The problem is that other domains or workgroups periodically appear as though someone has plugged in to our network. For instance, today I can see Alfeld, Dky and Wilmar. We don't have WiFi. Can anyone please tell me if there is any way to find out where this Workgroup/Domain is coming from? and how to block them? Thank you in advance.
0
Comment
Question by:weikiiro
  • 2
  • 2
5 Comments
 
LVL 3

Expert Comment

by:d_willia
Comment Utility
You likely have other computers connected to your network that are not members of your domain, but their own workgroups.  Likely Windows XP Home or earlier machines.
0
 

Author Comment

by:weikiiro
Comment Utility
Is there any way I can find out what is their IP address or any informations?
0
 
LVL 1

Assisted Solution

by:Yaniv_Hoobian
Yaniv_Hoobian earned 333 total points
Comment Utility
Check the DHCP for unknown stations

0
 
LVL 3

Accepted Solution

by:
d_willia earned 167 total points
Comment Utility
As Yaniv said, checking your DHCP server for unknown stations is a good start.  If you have a WINS server, it will show you exactly what devices are advertising what workgroups as long as they are configured to use WINS.
Failing those suggestions, there are a couple packet sniffers out there that can sniff for NBT Traffic.  Go to www.ethereal.com or www.wireshark.org and download either one.  Run it on a computer that can see these rogue workgroups.  After a few minutes, you should have a good sample to parse through to find the IP addresses of the offenders.
0
 
LVL 1

Assisted Solution

by:Yaniv_Hoobian
Yaniv_Hoobian earned 333 total points
Comment Utility
You can also try using Look@Lan or the newer Fing

http://www.lookatlan.com/

0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

A quick step-by-step overview of installing and configuring Carbonite Server Backup.
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now