Workgroup Blocked

Norton Security | Norton Internet Security
1

We have 5 windows XP sp3 machines hooked into windows network for purpose of accessing three NAS storage servers.  We have been doing this for 10 years.  Replaced/upgraded a couple NAS units over the years but could always re-connect.

Also have 3 MAC hooked in running OSX

All PCs run Norton AV 2010

Up until a few weeks ago, things were rolling right along.  NAS drives were mapped on the PCs, connected via SAMBA on MAC units.

Previously, in windows you could go into Explorer, Entire Network and see all via WORKGROUP.

For whatever reason, that stopped. 

Mapped drives still function and connectable via my computer but you can’t access anything via Explorer. 

All internet connections work.

All on same WORKGROUP and each have a static IP which is pingable. 

All on same sub domain. 

NetBIOS enabled over TCP/IP. 

On 2 of the PCs we were able to get access to workgroup by listing NAS IP in trusted for Norton Anti Virus 2010 firewall.  Norton 2010 configured to allow all network traffic.

Windows Firewall disabled.

On remaining PCS this didn’t work.  I even removed Norton completely from one and tried, no luck.

When you click on My Network Places, Entire Network, Microsoft Windows Network it takes about 30-40 seconds for WORKGROUP to come up.  Click on WORKGROUP and after 30-45 seconds get message “Workgroup is not accessible.  You might not have permission to use this network resource. (Etc.)

Most recent development is trying to access a QNap NAS via their network assistant that up until yesterday worked.  Now it won't connect via web.  Works on one of the other PCs that can access Workgroup

User has Admin privileges.

Tried with guest account on and off.

Restarted NAS servers, no help.

Checked that services started

                Computer Browser

                DHCP Client

                DNS Client

                Network Location Awareness

                RPC

                Server

                TCP/IP Netbios Helper

                Workstation

Also tried via wireless connection on laptop, same problem.  Wireless access point connected to same network unmanaged switch.

There are so many suggested fixes on the web, some involve registry changes and I am reluctant to try since we can function as is.  My concern is that if we lose a mapped connection won’t be able to re-establish it.

Any prioritized suggestions?

 

 

2

I am no network expert, but I have a couple of suggestions.

 

Has any new software been installed recently?

Have you tried temporarily disabling the Norton Smart Firewall on a couple of your computers and see if the issues go away?

 

There may have been some Windows update that changed something. Can you restore one of your systems to before you had this issue to test?

3

Hey

 

When you start your Workgroup, go to Norton History and see if thier are any new entries related to your workgroup.

Question: have your servers software been updated recently?

 

Sweman

4

There were some problem .Net.Framework updates but I completly removed all versions from one of the no working PCs, no change.  the strange thing is that by setting trust levels on 2 PCs they were once again able to access Workgroup.  That same procedure did noy work on other PCs.  I tried completly removing Norton from one and that didn't help.

After doing a little more testing, you can ping all shares but anything that connects by name (network places, etc) doesn't work.

 

5

No updates to nAS

I'll check the Norton History tomorrow.

Thanks

6

Norton Antivirus has a network security map but it does not let you change the trust level since it does not have a firewall.

Can you confirm the product you are using is Norton Antivirus 2010 and not Norton Internet Security 2010.

 

Quote:

Mapped drives still function and connectable via my computer but you can’t access anything via Explorer.

 

Sounds like the drives are being mapped before explorer loads all the way.  If it's done though a logon script, try removing the script and running it manually after the desktop is fully loaded.   If it's not a script, see if something is causing explorer.exe to hang or be delayed at startup.

 

Maybe try booting a system into safe mode with networking, or use MSconfig to temporarily disable all the startup programs.

 

Dave

7

Opps, my bad.

It's Norton Internet Security 2010.  One machine has 2012 as a result of this testing.

8

Nothing except info notes in history.

I'll try in Safe Mode with networking this afternoon.

 

9

Here’s the latest and maybe a hint to someone out there.

We use a program “LaCie Network Assistant” to admin our LaCie NAS.  Resides on 1 XP Pro desktop (mine).  Connects via “web configuration page”  internet, to network and an admin console for this specific NAS .

http://lacie-2big.local/

Recently get message “Internet Explorer cannot display the webpage” and will not correct.

Change to http://192.168.1.xxx (NAS Static IP) and it connects to configuration page.

 

Also have a QNAP NAS with similar interface.

http://192.168.1.xxx:8080/cgi-bin/html/login.html?3.6.1.0302T

Connects right up to configuration page every time.

10

Tried safe mode with networking - no joy.

 

11

.local is for your mac's.  Windows will want http://MachineName

see here under Dashboard Access Using a Browser

http://manuals.lacie.com/en/manuals/ns2-nsmax/dashboard

 

If that doesn't work then something is not resolving the machine name to an IP address.

 

 

If you can borrow 2 XP systsms without interfering with your employees, try sharing a folder or drive on each of them and then go into the network security map on each system and give the other full trust.

Also note that on the left hand side of that screen you can also give full trust to the network as well.

The drop down box should show the network adapter in use "Local Area Connection" click the edit button next to it and on the next screen click the edit button again.  Then you can set the trust level of the network.

 

If your then able to access the workstations from each other through My Computer, My Network Places, and Explorer than you'll know it's not a windows or Norton issue but a configuration or setting with the NAS.

 

When you do get everything working you'll want to go into the Norton settings on each system and disable "Network Drive Scan" on all but one system.  It would be very redundant to have all 5 systems doing scheduled scans on the NAS.

 

Also note that when you use the network security map to give the NAS full trust there is an extra setting you can select to disable that device from IPS scanning  (firewall intrusion prevention).    Doing that may improve your transfer speed across the network from the NAS.

 

Best of Luck,

Dave

12

I'll reviw and give it a try over this week end.

Thanks for the help.

13

Revised software downloaded from LaCie and works.

I'll try sharing a file this weekend.

Checked again and 3 of the work stations still get the same message "Can't access Workgroup, may not have permissions, etc."

Oh, I also set network trust to full trust, no joy.

14
Adguy wrote:

 

After doing a little more testing, you can ping all shares but anything that connects by name (network places, etc) doesn't work.

 

I started having the problem of not being to Remote Desktop between my machines using computer names. I had to start using the IP address. I never really solved this but have done a little searching, and this may help you search farther.

 

Check this information.

 

 

15

If those last 3 workstations only connect using an IP address and can't resolve the machine name, the easiest solution would be to use the Ip address.

 

If the employees are using IE shortcuts to access the NAS, simply change the target of the shortcut to the IP address.

If different browers and/or programs are being used, you can make a global change by adding an entry in the XP hosts file:

192.168.1.00x        lacie-2big

 

You'll find the hosts file in XP under: WINDOWS\system32\drivers\etc\hosts

 

If those last 3 systems can't connect either way, then maybe it really is a permission problem.

Perhaps the other systems are all using simple file sharing and those 3 are not.

Check to see they are all accessing the shares the same way and if you are not using simple file sharing the correct permissions are granted to those systems.

 

Dave

 

16

Update. 

OK, so I tried setting up a test shared folder on 2 of the work stations.  Couldn’t see the file in workgroup or “My Computer”.  But, while enabling and disabling “share this file on network” was able to access workgroup on the workstation that had shared file.  Unfortunately this only lasted for a few minutes then reverted back to “Can’t access Workgroup”.

Also in Norton 2012, network Security Map, all devices on network are shown.  MACs, printer, PC s, wireless access point, etc.

However, they are all listed as “New”, IP address are all correct.  In Norton manual it says “By default, the Network Security Map window displays the NetBIOS name.  However if the computer does not have a computer name is displayed as new.  These all have names.

Don’t know if this helps in trouble shooting.  Question: Is there a max number of appliances that can be handled/resolved on a peer-to peer network? 

I’m to the point of taking your suggestion and just using shortcuts and forget about accessing via WorkGroup in Explorer.    

I will also check later today about all using simple file sharing.

 

17

Well, they are all using simple file sharing, same workgroup, etc.  Also now one of the desktops that had access to workgroup via Explorer can no longer access.  Same error message.

I'm  very reluctant to start with some of the internet suggestions of adding registry entries etc.