Sessions on Server 2003

[Molenski]

Hi there,

I have a server that I'm trying to take out of service (it's been upgraded - I mean I've installed a second and transferred DHCP and other services across). At the moment, within computer management (under shared folders/sessions) there are constantly sessions being initiated for various lengths of time although no shares other than IPC$ are being accessed. There are also no open files. Is there anyway I can tell what these connections are being used for? Could this be for example a local client app that's somehow looking back at the server? I thought the easiest thing to do here was to power down the server and wait for everyone to start shouting but this doesn't seem very professional!

Thanks for any tips or advice in advance.
Molenski

 

[itsp1965]

Is it possible some of your clients have desktop shortcuts pointing to drives on this server and are setup to re-connect at logon?

 

[Molenski]

It is possible yes. I put Wireshark on the network and found a load of spoolss smb errors so I actually remoted onto one of the clients to discover a mapped drive and also a bunch of printers pointing at this server...once I disconnected all these, his IPC$ connection was gone! I'll just need to get the local IT guy to clean all the users' desktops I think...thanks a lot for gettting back to me!