RE: Connection Manager connects but network not visible

Hello Eric,

Thank you for posting here. And thanks for Jon's inputs.

From your description, I understand the issue is that you can not browse
computers in my network places from VPN clients to SBS. If I am off base,
please let me know.

When the remote clients connect SBS network via VPN, they are not able to
logon domain. So you can not find the remote computers. But when they move
to local, they can logon SBS domain, it is different.

I. The computer browsing and the console message are based on broadcast
traffic. As we know, the broadcast traffic cannot go through a router.
Since the networks are connected through VPN, it's expected that the
browsing broadcast cannot go through the network. For the non-broadcast
network, we need to leverage WINS server. Let us check as follows:

1. Go to the main site client workstations. Open TCP/IP properties. Click
'Advanced' button. In 'WINS' tab, add the SBS server's IP address into the
list. Select 'Enable NetBIOS' over TCP/IP.

2. For the branch office computers, configure them to use the SBS server as
'WINS'. Also enable 'NetBIOS over TCP/IP'.

3. Wait for several minutes. Will you be able to see the computers in
branch office?

More information:

117633 How browsing over a multi-subnet TCP/IP network works in a domain
and in a workgroup
http://support.microsoft.com/default.aspx?scid=kb;EN-US;117633

II. If the issue persists, please check the following settings:

1. You can try to install the update to see if it helps.

898060 Installing security update MS05-019 or Windows Server 2003 Service
Pack 1 may cause network connectivity between clients and servers to fail
http://support.microsoft.com/default.aspx?scid=kb;EN-US;898060

899148 Some firewalls may reject network traffic that originates from
Windows Server 2003 Service Pack 1-based computers
http://support.microsoft.com/?kbid=899148

Server Message Block communication between a client-side SMB component and
a server-side SMB component is not completed if the SMB signing settings
are mismatched in Group Policy or in the registry
http://support.microsoft.com/?kbid=916846

After applying above the hotfixes, please reboot the server box and client
computer and then test the issue to see if the issue fixed.

2. Make sure that you have selected Enable NetBIOS over TCP/IP on all
computers and SBS server as following:

1) Right click My Network Places and select Properties.
2) Right click Local Area Connection (client computer)/Network Connection
(server) and select Properties.
3) Click Internet Protocol (TCP/IP) and high light it. Click Properties.
4) On the General tab, click Advanced. Go to WINS tab.
5) Make sure that you select Enable NetBIOS over TCP/IP.
6) Click OK twice and close all the windows.

For detailed information, please refer to the following KB article:

318030 You cannot access shared files and folders or browse computers
in the
http://support.microsoft.com/?id=318030

3. Make sure the TCP/IP NetBIOS Helper service and the Server service and
Workstation service are running on SBS and client computers. You may check
them through running Services.msc.

4. Check WINS:

1) Open WINS console in the SBS Administrative Tools.
2) Make sure that the service is started.

5. Check Computer Browser on SBS and client computers:

1) Open Services console in the SBS Administrative Tools.
2) In the right pane, make sure that the "Computer Browser" service is
started and the startup type is "Automatic".
3) Check the same settings on all client computers and make sure that the
"Computer Browser" service is stopped and the startup type is "Disabled".

6. Disable SMB signing in the whole server domain:

1) Make sure the following policies are all ''Disable'' (instead of ''Not
defined'') in BOTH ''Default Domain Policy'' and ''Default Domain
Controller Policy'':

A. Microsoft network client: Digitally sign communications (always):
Disabled
B. Microsoft network client: Digitally sign communications (if server
agrees): Disabled
C. Microsoft network server: Digitally sign communications (always):
Disabled
D. Microsoft network server: Digitally sign communications (if client
agrees): Disabled
E. LAN Manager Authentication Level set to Send LM and NTLM - use NTLMv2
session security if negotiated

You can find the policy as following:

A. Open Server Management, and then expand Advanced Management | Group
Policy Management | Forest | Domains | Server name.
B. Right click Default Domain Policy and select Edit.
C. In Group Policy Object Editor, expand Computer Configuration | Windows
Settings | Security Settings | Local Policies.
D. Click Security Options.
E. Open Server Management, and then expand Advanced Management | Group
Policy Management | Forest | Domains | Server name | Domain Controllers.
F. Right click Default Domain Controllers Policy and select Edit.
G. In Group Policy Object Editor, expand Computer Configuration | Windows
Settings | Security Settings | Local Policies.
H. Click Security Options.

2) Still on the DC, issue ''gpupdate /force'' in a command console.
3) Restart the DC and client computer to take effect.

More information:

298804 Internet firewalls can prevent browsing and file sharing
http://support.microsoft.com/?id=298804

If the issue persists, please kindly help me collect some information for
further investigation:

1. Can you ping the SBS side LAN workstations from the VPN client?

2. Can you open the share folder on the SBS side LAN workstations via
\\xxx.xxx.xxx.xxx\ from the VPN client?

3. Run command "ipconfig /all > c:\ipconfig_sbs.txt" and "route print >
c:\route_sbs.txt" on SBS when the VPN connection established, send the
files c:\ipconfig_sbs.txt and c:\route_sbs.txt to me at
v-terliu@xxxxxxxxxxxxx

4. Run command "ipconfig /all > c:\ipconfig_client.txt" and "route print >
c:\route_client.txt" on remote VPN client when the VPN connection
established, send the files c:\ipconfig_client.txt and c:\route_client.txt
to me at v-terliu@xxxxxxxxxxxxx

5. Is ISA installed on the SBS server? What is the ISA edition?

6. Use the Networking MPS report to capture the server networking
configurations for further analysis:
a. Download MPSrepot_network from
http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9
15706/MPSRPT_NETWORK.EXE

b. Run MPSRPT_NETWORK.exe on the server box.

c. The tool will automatically collect the information. This procedure will
take 10~15 minutes.

d. Open Windows Explorer, navigate to the folder:
%SystemRoot%\MPSReports\Network\Reports\Cab\

e. Send the .cab file directly to me.

Hope this information helps. If you have further questions or concerns on
this issue, please let me know. I am looking forward to hearing from you.

Have a nice day!

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| From: plainlanguage <plainlanguage@xxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| Subject: Connection Manager connects but network not visible
| Date: Thu, 07 Jun 2007 11:08:35 -0700
| Organization: http://groups.google.com
| Lines: 23
| Message-ID: <1181239715.698743.316700@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| NNTP-Posting-Host: 75.160.194.254
| Mime-Version: 1.0
| Content-Type: text/plain; charset="iso-8859-1"
| X-Trace: posting.google.com 1181239715 6029 127.0.0.1 (7 Jun 2007
18:08:35 GMT)
| X-Complaints-To: groups-abuse@xxxxxxxxxx
| NNTP-Posting-Date: Thu, 7 Jun 2007 18:08:35 +0000 (UTC)
| User-Agent: G2/1.0
| X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET
CLR 1.1.4322; IEMB3; InfoPath.2; IEMB3),gzip(gfe),gzip(gfe)
| Complaints-To: groups-abuse@xxxxxxxxxx
| Injection-Info: p47g2000hsd.googlegroups.com; posting-host=75.160.194.254;
| posting-account=M5Yc3QwAAAC9XUYLVPmoa_8kLG5BTDd9
| Path:
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS02.phx.gbl!newsfeed0
0.sul.t-online.de!t-online.de!border2.nntp.dca.giganews.com!nntp.giganews.co
m!out02b.usenetserver.com!news.usenetserver.com!in02.usenetserver.com!news.u
senetserver.com!postnews.google.com!p47g2000hsd.googlegroups.com!not-for-mai
l
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:42477
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| I now have a remote employee that needs to log into my SBS and doesn't
| have a desktop inside to RWW to so I'm trying to implement a
| connection through the connection manager.
|
| My SBS has a single NIC attached connected to the LAN and WAN. My WAN
| gateway is a Zoom x5 DSL modem. I've forwarded port 1723 to the local
| address of the SBS. I've installed the connection manager on target
| machine and it connects without errors, however SBS network is not
| visible (e.g. browse My Network Places, click on MYDOMAIN and all is
| see is the target machine, not any of the other computers on the
| network or the SBS server itself.
|
| Any suggestions??? Most of the articles here some to do with
| connection issues or ports but I appear to be connected. The only
| thing that looks like it might be werid is the "server IP address"
| under the connection manager Details tab is the same IP issued to my
| target machine by the local DHCP server. I'll try to hardset this to
| something different but doubt it's the problem.
|
| Thanks in advance!
|
| -Eric
|
|

.