?
Solved

unknown workgroups/domains in our network

Posted on 2010-09-15
5
Medium Priority
?
367 Views
Last Modified: 2013-12-04
Please help, when I browse to My Network Places|Entire Network|Microsoft Windows Network I can see my domain. The problem is that other domains or workgroups periodically appear as though someone has plugged in to our network. For instance, today I can see Alfeld, Dky and Wilmar. We don't have WiFi. Can anyone please tell me if there is any way to find out where this Workgroup/Domain is coming from? and how to block them? Thank you in advance.
0
Comment
Question by:weikiiro
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 3

Expert Comment

by:d_willia
ID: 33684186
You likely have other computers connected to your network that are not members of your domain, but their own workgroups.  Likely Windows XP Home or earlier machines.
0
 

Author Comment

by:weikiiro
ID: 33684811
Is there any way I can find out what is their IP address or any informations?
0
 
LVL 1

Assisted Solution

by:Yaniv_Hoobian
Yaniv_Hoobian earned 1332 total points
ID: 33685666
Check the DHCP for unknown stations

0
 
LVL 3

Accepted Solution

by:
d_willia earned 668 total points
ID: 33694642
As Yaniv said, checking your DHCP server for unknown stations is a good start.  If you have a WINS server, it will show you exactly what devices are advertising what workgroups as long as they are configured to use WINS.
Failing those suggestions, there are a couple packet sniffers out there that can sniff for NBT Traffic.  Go to www.ethereal.com or www.wireshark.org and download either one.  Run it on a computer that can see these rogue workgroups.  After a few minutes, you should have a good sample to parse through to find the IP addresses of the offenders.
0
 
LVL 1

Assisted Solution

by:Yaniv_Hoobian
Yaniv_Hoobian earned 1332 total points
ID: 33702422
You can also try using Look@Lan or the newer Fing

http://www.lookatlan.com/

0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
A safe way to clean winsxs folder from your windows server 2008 R2 editions
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
Suggested Courses
Course of the Month8 days, 4 hours left to enroll

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question