Home All Groups Group Topic Archive Search About

NetBIOS over TCP/IP cannot be enabled, does not keep

Author
20 Nov 2006 11:45 PM
info
Hi

I wonder if you can help me here. I have 2 PC which used to networked
no problem. File & Printer Sharing is the task i need.

- I have checked on computer browser and have restarted them
-  have updated and enabled NetBIOS over TCP/IP
- i have tested with both designating a fixed ip and DHCP and both does
not make any changes

When you do an ipconfig /all ... it keeps showing up as

         "NetBIOS over TCP/IP as disabled"

As a result, there is I cannot keep these 2 computers working to share
folders/printers (which i need). It worked all OK before, until a PC
(may be infected by adware/spyware/virus) hooked up to our LAN and may
have done something. We have isolated all computers, latest virus scan
and adware has been used to remove the obvious malicious.

All the PCs have no problem surfing, getting connected to MSN or
others. We just cannot ENABLED the NetBIOS over TCP/IP.. I wonder if
anyone knows why ?

I have not gone into the registry yet, but i have tried all resources
and manipulation, troubleshooting and still my 2 PCc cannot be
connected P2P.

Rgds
Daniel

Author
21 Nov 2006 12:06 AM
Chuck
On 20 Nov 2006 15:45:30 -0800, i***@boytoys.ca wrote:

Show quoteHide quote
>Hi
>
>I wonder if you can help me here. I have 2 PC which used to networked
>no problem. File & Printer Sharing is the task i need.
>
>- I have checked on computer browser and have restarted them
>-  have updated and enabled NetBIOS over TCP/IP
>- i have tested with both designating a fixed ip and DHCP and both does
>not make any changes
>
>When you do an ipconfig /all ... it keeps showing up as
>
>         "NetBIOS over TCP/IP as disabled"
>
>As a result, there is I cannot keep these 2 computers working to share
>folders/printers (which i need). It worked all OK before, until a PC
>(may be infected by adware/spyware/virus) hooked up to our LAN and may
>have done something. We have isolated all computers, latest virus scan
>and adware has been used to remove the obvious malicious.
>
>All the PCs have no problem surfing, getting connected to MSN or
>others. We just cannot ENABLED the NetBIOS over TCP/IP.. I wonder if
>anyone knows why ?
>
>I have not gone into the registry yet, but i have tried all resources
>and manipulation, troubleshooting and still my 2 PCc cannot be
>connected P2P.
>
>Rgds
>Daniel

Daniel,

Look under services.  What is the status of "TCP/IP NetBIOS Helper" aka LMHosts?
<http://nitecruzr.blogspot.com/2005/06/services-running-on-your-computer.html>
http://nitecruzr.blogspot.com/2005/06/services-running-on-your-computer.html

And check for LSP / Winsock corruption, particularly after a malware problem.
This is (can be) a painful process.  Be persistent here.
<http://nitecruzr.blogspot.com/2005/05/problems-with-lsp-winsock-layer-in.html>
http://nitecruzr.blogspot.com/2005/05/problems-with-lsp-winsock-layer-in.html

--
Cheers,
Chuck, MS-MVP [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My        email         is          AT         DOT
   actual       address    pchuck       mvps        org.
Author
21 Nov 2006 1:38 PM
BOYTOYS
Chuck. Thanks, I will try your suggestions today..I am pretty sure it
was the adware/spyware initial hit or the removal process that may have
caused it. It was working perfectly fine before the infected PC was
attached to our LAN.

Daniel

Chuck wrote:
Show quoteHide quote
> On 20 Nov 2006 15:45:30 -0800, i***@boytoys.ca wrote:
>
> >Hi
> >
> >I wonder if you can help me here. I have 2 PC which used to networked
> >no problem. File & Printer Sharing is the task i need.
> >
> >- I have checked on computer browser and have restarted them
> >-  have updated and enabled NetBIOS over TCP/IP
> >- i have tested with both designating a fixed ip and DHCP and both does
> >not make any changes
> >
> >When you do an ipconfig /all ... it keeps showing up as
> >
> >         "NetBIOS over TCP/IP as disabled"
> >
> >As a result, there is I cannot keep these 2 computers working to share
> >folders/printers (which i need). It worked all OK before, until a PC
> >(may be infected by adware/spyware/virus) hooked up to our LAN and may
> >have done something. We have isolated all computers, latest virus scan
> >and adware has been used to remove the obvious malicious.
> >
> >All the PCs have no problem surfing, getting connected to MSN or
> >others. We just cannot ENABLED the NetBIOS over TCP/IP.. I wonder if
> >anyone knows why ?
> >
> >I have not gone into the registry yet, but i have tried all resources
> >and manipulation, troubleshooting and still my 2 PCc cannot be
> >connected P2P.
> >
> >Rgds
> >Daniel
>
> Daniel,
>
> Look under services.  What is the status of "TCP/IP NetBIOS Helper" aka LMHosts?
> <http://nitecruzr.blogspot.com/2005/06/services-running-on-your-computer.html>
> http://nitecruzr.blogspot.com/2005/06/services-running-on-your-computer.html
>
> And check for LSP / Winsock corruption, particularly after a malware problem.
> This is (can be) a painful process.  Be persistent here.
> <http://nitecruzr.blogspot.com/2005/05/problems-with-lsp-winsock-layer-in.html>
> http://nitecruzr.blogspot.com/2005/05/problems-with-lsp-winsock-layer-in.html
>
> --
> Cheers,
> Chuck, MS-MVP [Windows - Networking]
> http://nitecruzr.blogspot.com/
> Paranoia is not a problem, when it's a normal response from experience.
> My        email         is          AT         DOT
>    actual       address    pchuck       mvps        org.
Author
21 Nov 2006 4:16 PM
Chuck
Show quote Hide quote
On 21 Nov 2006 05:38:57 -0800, "BOYTOYS" <i***@boytoys.ca> wrote:

>Chuck wrote:
>> On 20 Nov 2006 15:45:30 -0800, i***@boytoys.ca wrote:
>>
>> >Hi
>> >
>> >I wonder if you can help me here. I have 2 PC which used to networked
>> >no problem. File & Printer Sharing is the task i need.
>> >
>> >- I have checked on computer browser and have restarted them
>> >-  have updated and enabled NetBIOS over TCP/IP
>> >- i have tested with both designating a fixed ip and DHCP and both does
>> >not make any changes
>> >
>> >When you do an ipconfig /all ... it keeps showing up as
>> >
>> >         "NetBIOS over TCP/IP as disabled"
>> >
>> >As a result, there is I cannot keep these 2 computers working to share
>> >folders/printers (which i need). It worked all OK before, until a PC
>> >(may be infected by adware/spyware/virus) hooked up to our LAN and may
>> >have done something. We have isolated all computers, latest virus scan
>> >and adware has been used to remove the obvious malicious.
>> >
>> >All the PCs have no problem surfing, getting connected to MSN or
>> >others. We just cannot ENABLED the NetBIOS over TCP/IP.. I wonder if
>> >anyone knows why ?
>> >
>> >I have not gone into the registry yet, but i have tried all resources
>> >and manipulation, troubleshooting and still my 2 PCc cannot be
>> >connected P2P.
>> >
>> >Rgds
>> >Daniel
>>
>> Daniel,
>>
>> Look under services.  What is the status of "TCP/IP NetBIOS Helper" aka LMHosts?
>> <http://nitecruzr.blogspot.com/2005/06/services-running-on-your-computer.html>
>> http://nitecruzr.blogspot.com/2005/06/services-running-on-your-computer.html
>>
>> And check for LSP / Winsock corruption, particularly after a malware problem.
>> This is (can be) a painful process.  Be persistent here.
>> <http://nitecruzr.blogspot.com/2005/05/problems-with-lsp-winsock-layer-in.html>
>> http://nitecruzr.blogspot.com/2005/05/problems-with-lsp-winsock-layer-in.html

>Chuck. Thanks, I will try your suggestions today..I am pretty sure it
>was the adware/spyware initial hit or the removal process that may have
>caused it. It was working perfectly fine before the infected PC was
>attached to our LAN.

That'll be LSP / Winsock, then, Daniel.  Though you may end up checking
individual components afterwards too.  We'll be here to advise you further.

--
Cheers,
Chuck, MS-MVP [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My        email         is          AT         DOT
   actual       address    pchuck       mvps        org.
Author
21 Nov 2006 6:03 PM
BOYTOYS
Should i go direct to Winsock XP in no. 7 or No. 8 ? as published in
your article
http://nitecruzr.blogspot.com/2005/05/problems-with-lsp-winsock-layer-in.html
Author
21 Nov 2006 7:05 PM
BOYTOYS
BOYTOYS wrote:
> Should i go direct to Winsock XP in no. 7 or No. 8 ? as published in
> your article
> http://nitecruzr.blogspot.com/2005/05/problems-with-lsp-winsock-layer-in.html

I used the Winsock XP fix downloaded and it did it for one of the PC
and the other. Both can be seen in the workgroup, NetBIOS over TCP/IP
is now enabled, i can see it in MY NETWORK PLACE.

The only thing that needs figuring out is it says the computer is not
accessible yet...
Author
21 Nov 2006 7:30 PM
Chuck
Show quote Hide quote
On 21 Nov 2006 11:05:52 -0800, "BOYTOYS" <i***@boytoys.ca> wrote:

>
>BOYTOYS wrote:
>> Should i go direct to Winsock XP in no. 7 or No. 8 ? as published in
>> your article
>> http://nitecruzr.blogspot.com/2005/05/problems-with-lsp-winsock-layer-in.html
>
>I used the Winsock XP fix downloaded and it did it for one of the PC
>and the other. Both can be seen in the workgroup, NetBIOS over TCP/IP
>is now enabled, i can see it in MY NETWORK PLACE.
>
>The only thing that needs figuring out is it says the computer is not
>accessible yet...

OK, now it's time to diagnose the problem.  Run "browstat status" and "ipconfig
/all" from each computer.
<http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html#AskingForHelp>
http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html#AskingForHelp

--
Cheers,
Chuck, MS-MVP [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My        email         is          AT         DOT
   actual       address    pchuck       mvps        org.
Author
21 Nov 2006 7:53 PM
BOYTOYS
Chuck
Thx, some how i don't have browstat command. This is the ipconfig.txt
output for the host i need to share files with others PCs..

I notice NODE TYPE is unknown although other ppl claims that it has to
be either p2p or whatever.

I still cannot access the files and folders. At
practicallynetworked.com, they says i should not use the plain simple
file sharing but use ICS control list method. I personally think that
is not the root cause.

What is your suggestion for my next step ?

Thanks again, really appreciate your help..

Daniel
---------------------

Windows IP Configuration



        Host Name . . . . . . . . . . . . : DELL

        Primary Dns Suffix  . . . . . . . :

        Node Type . . . . . . . . . . . . : Unknown

        IP Routing Enabled. . . . . . . . : No

        WINS Proxy Enabled. . . . . . . . : No



Ethernet adapter Local Area Connection:



        Media State . . . . . . . . . . . : Media disconnected

        Description . . . . . . . . . . . : Intel(R) PRO/100 S Desktop
Adapter

        Physical Address. . . . . . . . . : 00-02-B3-4D-08-C9



Ethernet adapter Local Area Connection 2:



        Connection-specific DNS Suffix  . : no-domain-set.bellcanada

        Description . . . . . . . . . . . : Intel 8255x-based PCI
Ethernet Adapter (10/100)

        Physical Address. . . . . . . . . : 00-B0-D0-D0-8A-AE

        Dhcp Enabled. . . . . . . . . . . : Yes

        Autoconfiguration Enabled . . . . : Yes

        IP Address. . . . . . . . . . . . : 192.168.2.10

        Subnet Mask . . . . . . . . . . . : 255.255.255.0

        Default Gateway . . . . . . . . . : 192.168.2.1

        DHCP Server . . . . . . . . . . . : 192.168.2.1

        DNS Servers . . . . . . . . . . . : 192.168.2.1

        Lease Obtained. . . . . . . . . . : Tuesday, November 21, 2006
2:03:19 PM

        Lease Expires . . . . . . . . . . : Friday, November 24, 2006
2:03:19 PM
Author
21 Nov 2006 8:21 PM
BOYTOYS
The following ipconfig /all is the other PC which also have problems. I
cannot access from either direction. I am stuck...
------------------

Windows IP Configuration



        Host Name . . . . . . . . . . . . : compaq1pos

        Primary Dns Suffix  . . . . . . . :

        Node Type . . . . . . . . . . . . : Unknown

        IP Routing Enabled. . . . . . . . : No

        WINS Proxy Enabled. . . . . . . . : No



Ethernet adapter Local Area Connection:



        Connection-specific DNS Suffix  . : no-domain-set.bellcanada

        Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network
Connection

        Physical Address. . . . . . . . . : 00-04-23-25-21-40

        Dhcp Enabled. . . . . . . . . . . : Yes

        Autoconfiguration Enabled . . . . : Yes

        IP Address. . . . . . . . . . . . : 192.168.2.13

        Subnet Mask . . . . . . . . . . . : 255.255.255.0

        Default Gateway . . . . . . . . . : 192.168.2.1

        DHCP Server . . . . . . . . . . . : 192.168.2.1

        DNS Servers . . . . . . . . . . . : 192.168.2.1

                                            192.168.2.1

        Lease Obtained. . . . . . . . . . : Tuesday, November 21, 2006
3:14:55 PM

        Lease Expires . . . . . . . . . . : Friday, November 24, 2006
3:14:55 PM
Author
21 Nov 2006 8:57 PM
Chuck
Show quote Hide quote
On 21 Nov 2006 12:21:40 -0800, "BOYTOYS" <i***@boytoys.ca> wrote:

>The following ipconfig /all is the other PC which also have problems. I
>cannot access from either direction. I am stuck...
>------------------
>
>Windows IP Configuration
>
>
>
>        Host Name . . . . . . . . . . . . : compaq1pos
>
>        Primary Dns Suffix  . . . . . . . :
>
>        Node Type . . . . . . . . . . . . : Unknown
>
>        IP Routing Enabled. . . . . . . . : No
>
>        WINS Proxy Enabled. . . . . . . . : No
>
>
>
>Ethernet adapter Local Area Connection:
>
>
>
>        Connection-specific DNS Suffix  . : no-domain-set.bellcanada
>
>        Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network
>Connection
>
>        Physical Address. . . . . . . . . : 00-04-23-25-21-40
>
>        Dhcp Enabled. . . . . . . . . . . : Yes
>
>        Autoconfiguration Enabled . . . . : Yes
>
>        IP Address. . . . . . . . . . . . : 192.168.2.13
>
>        Subnet Mask . . . . . . . . . . . : 255.255.255.0
>
>        Default Gateway . . . . . . . . . : 192.168.2.1
>
>        DHCP Server . . . . . . . . . . . : 192.168.2.1
>
>        DNS Servers . . . . . . . . . . . : 192.168.2.1
>
>                                            192.168.2.1
>
>        Lease Obtained. . . . . . . . . . : Tuesday, November 21, 2006
>3:14:55 PM
>
>        Lease Expires . . . . . . . . . . : Friday, November 24, 2006
>3:14:55 PM

Daniel,

Both ipconfig logs are normal.  You do NOT need P2P ("Peer-Peer) node type.
Node Type Unknown is fine.
<http://nitecruzr.blogspot.com/2005/05/reading-ipconfig-and-diagnosing.html>
http://nitecruzr.blogspot.com/2005/05/reading-ipconfig-and-diagnosing.html

I think the browstat logs will be useful though.

--
Cheers,
Chuck, MS-MVP [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My        email         is          AT         DOT
   actual       address    pchuck       mvps        org.
Author
21 Nov 2006 8:46 PM
Chuck
Show quote Hide quote
On 21 Nov 2006 11:53:10 -0800, "BOYTOYS" <i***@boytoys.ca> wrote:

>Chuck
>Thx, some how i don't have browstat command. This is the ipconfig.txt
>output for the host i need to share files with others PCs..
>
>I notice NODE TYPE is unknown although other ppl claims that it has to
>be either p2p or whatever.
>
>I still cannot access the files and folders. At
>practicallynetworked.com, they says i should not use the plain simple
>file sharing but use ICS control list method. I personally think that
>is not the root cause.
>
>What is your suggestion for my next step ?
>
>Thanks again, really appreciate your help..
>
>Daniel

Daniel,

Auggh.  Here's my usual instructions.

Let's look at "browstat status" and "ipconfig /all", from each computer, so we
can diagnose the problem.  Read this article, and linked articles, and follow
instructions precisely (download browstat!):
<http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html#AskingForHelp>
http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html#AskingForHelp

You gotta download it (it's not hard to do though).

--
Cheers,
Chuck, MS-MVP [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My        email         is          AT         DOT
   actual       address    pchuck       mvps        org.
Author
21 Nov 2006 9:44 PM
BOYTOYS
Chuck
Here is the browstat status from one of the compaq1pos
It says something could not open key in registry ..error=5

what could that be? i am working on the other browstat for the dell

-----------------

Status for domain POS_WORKGROUP on transport
\Device\NetBT_Tcpip_{13DB378D-FCA2-4FEE-9C51-1B7118B8355A}
    Browsing is active on domain.
    Master browser name is: DELL
Could not open key in registry, error = 5        Unable to determine
build of browser master: 5
   Unable to determine server information for browser master: 5
    1 backup servers retrieved from master DELL
        \\DELL
    There are 2 servers in domain POS_WORKGROUP on transport
\Device\NetBT_Tcpip_{13DB378D-FCA2-4FEE-9C51-1B7118B8355A}
    There are 2 domains in domain POS_WORKGROUP on transport
\Device\NetBT_Tcpip_{13DB378D-FCA2-4FEE-9C51-1B7118B8355A}
Author
21 Nov 2006 9:47 PM
BOYTOYS
Status for domain POS_WORKGROUP on transport
\Device\NetBT_Tcpip_{2BA2F985-2095-4D06-9CAA-6A94EC47DA07}
    Browsing is active on domain.
    Master browser name is: DELL
        Master browser is running build 2600
    1 backup servers retrieved from master DELL
        \\DELL
    Unable to retrieve server list from DELL: 1230
Author
21 Nov 2006 10:35 PM
BOYTOYS
chuck, your website is so informative and u r so helpful.. i m looking
at your info on error=5 right now..

http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Guest
Author
21 Nov 2006 10:47 PM
BOYTOYS
I read it and still not sure what i can do to resolve them.

BOYTOYS wrote:
Show quoteHide quote
> chuck, your website is so informative and u r so helpful.. i m looking
> at your info on error=5 right now..
>
> http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Guest
Author
22 Nov 2006 12:10 AM
Chuck
On 21 Nov 2006 14:47:43 -0800, "BOYTOYS" <i***@boytoys.ca> wrote:

>I read it and still not sure what i can do to resolve them.
>
>BOYTOYS wrote:
>> chuck, your website is so informative and u r so helpful.. i m looking
>> at your info on error=5 right now..
>>
>> http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Guest

OK Daniel,

Let's recap your symptoms, most recently first.
1) Browstat: "Unable to retrieve server list from DELL: 1230" is an SMB problem,
caused by the NetBT setting, or service, not running.
<http://support.microsoft.com/kb/318332/>
http://support.microsoft.com/kb/318332/
2) Browstat: "Could not open key in registry, error = 5".  Which computer did
you get this on?  PLEASE for each browstat or ipconfig, explicitly label each
one.  What OS (Windows XP Home? XP Pro? Other Windows?) is on each computer?
Details are essential.  If XP Pro, with Simple File Sharing enabled or disabled?
3) Browstat: "There are 2 domains in domain POS_WORKGROUP" indicates a segmented
workgroup.
4) I don't see either ipconfig showing the NetBT problem any more.  That doesn't
mean that your problems are over.

What personal firewall or other security products do you have on each computer?
<http://nitecruzr.blogspot.com/2005/05/your-personal-firewall-can-either-help.html>
http://nitecruzr.blogspot.com/2005/05/your-personal-firewall-can-either-help.html

If nothing here, repeat the LSP / Winsock procedure, each tool one at a time
until all 7 tools report nothing to do.  Seriously, sometimes it will take
multiple passes.

--
Cheers,
Chuck, MS-MVP [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My        email         is          AT         DOT
   actual       address    pchuck       mvps        org.