Mystery workgroup/domain showing up in browse list

[mitzysman]

anyone know how to track this down so I can figure out what computer or IP address this is coming from ?

 

[itsp1965]

did you try browsing to that domain/workgroup and see what device is out there advertising.

 

[mitzysman]

I tried, and nothing comes up. It just keeps the workgroup name there in the list but I've never been able to actually browse that workgroup.

 

[itsp1965]

What is the name of the workgroup that is broadcasting. It is possible it was generated by application that makes use of the Browser List to advertise its services

 

[mitzysman]

Carolina_hldngs

from what I can tell it stands for Carolina Holdings. A company that we have dealt with. But none of our locations remember them hooking any laptops into out network.

I've looked in wins and can't find that domain or workgroup at all.

 

[porkchopexpress]

This might help you diagnose the problem.

http://support.microsoft.com/default.aspx?scid=kb;en-us;818092#XSLTH3128121121120121120120

 

[mitzysman]

thanks for the link. I tried it but it didn't yield any results.

 

[mitzysman]

here is a screen shot of browstat... how do I find \Device\NetBT_Tcpip_{88C9A040-5049-4003-A6AB-C03B905B4F10}

can't find it anywhere ??


C:\>browstat status


Status for domain STRUSS on transport \Device\NetBT_Tcpip_{88C9A040-5049-4003-A6
AB-C03B905B4F10}
Browsing is active on domain.
Master browser name is: PAYROLL
Master browser is running build 2195
3 backup servers retrieved from master PAYROLL
\\TERM
\\ISA
\\PAYROLL
There are 297 servers in domain STRUSS on transport \Device\NetBT_Tcpip_{88C9A040-5049-4003-A6AB-C03B905B4F10}
There are 3 domains in domain STRUSS on transport \Device\NetBT_Tcpip_{88C9A040-5049-4003-A6AB-C03B905B4F10}

 

[porkchopexpress]

Not sure, how long has it been showing up?

 

[mitzysman]

the workgroup or domain has been showing up for about a month. Last week it went away and then came back this week. I can only assume it's a pc doing it b/c it would go away in a few hours I assume?

 

[porkchopexpress]

That sounds very much the case, someone must be connecting a device to the network occasionally. If you catch it while it's still connected you should be able to browse it and discover the device name. Check DHCP if you use it to see if any unrecognised devices show up.

 

[jazgeek]

any wireless connections? Sometimes my pda shows up under WORKGROUP if I connect accidentally as public key

-----------
and they wonder why they call it Great Pains!

jaz

 

[jimbuddy]

I can tell you that build 2195 is actually windows 2000 sp4. check the logs and event viewer for user logins and errors.