Announcement

Collapse
No announcement yet.

can't browse network after disabling netbios

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • can't browse network after disabling netbios

    my boss got it in her head that we need to disable netbios on our network, her rationale being that dns can handle the browsing. i got no problem with that. so, per the attached screenshot, she did just that. this has caused a few problems, and rather than put it back and research it, she wants to leave it and have me research it. the problems are:

    1) none of our local clients (all xp sp2) can browse the network, although we can map.

    2) i now have to use the fqdn when adding pc's to the domain. (xyz.xyz.com as opposed to xyz).

    3) we have a linux nas that is now completely unaccessible from any windows box, although it is accessible from our macs.

    i'm sure there's a bazillion details about our network that you'll all ask. i just want to point out that before this one change, everything was copesetic (more or less).

    anyone have any advice on how my boss can keep her change but give the rest of the company our functionality back?

    thx!!
    Attached Files

  • #2
    Re: can't browse network after disabling netbios

    It's not possible. Network Browsing is facilitated through NetBIOS and without it will not work.

    Comment


    • #3
      Re: can't browse network after disabling netbios

      Joeqwerty is right. Browsing the network via network neigbourhood/my network places requires netbios.
      Also netbios isn't needed and it isn't a safe protocol.

      Better is, use DNS like you're boss requested.

      1: inherit from disabeling netbios: Why do you need to browse the network via my network places? I found it quite useless.
      2: inherit from disabeling netbios. Small effort to work with the DNS name.
      3: Can't you access the Linuxbox by using the FQDN?
      Is the Linuxbox registered in the DNS?
      alternative option: add the linuxbox in the hostfile or use a Winsserver
      Marcel
      Technical Consultant
      Netherlands
      http://www.phetios.com
      http://blog.nessus.nl

      MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
      "No matter how secure, there is always the human factor."

      "Enjoy life today, tomorrow may never come."
      "If you're going through hell, keep going. ~Winston Churchill"

      Comment


      • #4
        Re: can't browse network after disabling netbios

        Sounds like your DNS isn't setup correctly. You should be able to lookup clients by just the hostname without NetBios.

        If search for HOSTNAME, the client should know to append the domain name making it a FQDN.

        Look at the DNS tab under TCP/IP properties.

        Comment


        • #5
          Re: can't browse network after disabling netbios

          Errrr.. he is not talking about lookup queries. He's talking about my network places/network neigbourhood. This is be done by Netbios.
          Marcel
          Technical Consultant
          Netherlands
          http://www.phetios.com
          http://blog.nessus.nl

          MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
          "No matter how secure, there is always the human factor."

          "Enjoy life today, tomorrow may never come."
          "If you're going through hell, keep going. ~Winston Churchill"

          Comment


          • #6
            Re: can't browse network after disabling netbios

            thx for all the input, guys. due to the fact that this is affecting not just me, but our users, i'm trying to convince her to let me put things back. for some reason, though, she's sticking to her guns. all i can really do, i keep 'researching' and tell our users that they can't access the nas anymore. cripes!

            Comment


            • #7
              Re: can't browse network after disabling netbios

              Well although you might don't like it I've to agree with her.
              Why? Because of security reasons. I would say: find other ways to access the NAS via DNS/WINS or the hostfile.

              Netbios is quite easy to hack and it can be quite easy being used by viruses.
              http://safari.oreilly.com/0201719568/app02lev1sec12
              http://safari.oreilly.com/9780596510...ession_service
              http://www.darknet.org.uk/2006/09/re...s-hackhacking/
              http://informationleak.org/viewtopic...=332&view=next
              Marcel
              Technical Consultant
              Netherlands
              http://www.phetios.com
              http://blog.nessus.nl

              MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
              "No matter how secure, there is always the human factor."

              "Enjoy life today, tomorrow may never come."
              "If you're going through hell, keep going. ~Winston Churchill"

              Comment


              • #8
                Re: can't browse network after disabling netbios

                well, i'm still learning, but we are behind a sonicwall firewall, so i think we're pretty secure. and let me tell you what i do know: users can't access what they need to access. i think the first order of business would be to get the users what they need while we research how to disable netbios without f'ing everything up.

                like from tron: "user requests is what we're here for."

                Comment


                • #9
                  Re: can't browse network after disabling netbios

                  Originally posted by shmengie View Post
                  well, i'm still learning, but we are behind a sonicwall firewall, so i think we're pretty secure.

                  like from tron: "user requests is what we're here for."
                  Sonicwall is ok for external security but what about viruses, consultants with there own laptop etcetc.
                  I don't know about you're network and how you're security is in place but I'm only telling you that NetBios has some serious security issues where you should be aware off.

                  Originally posted by shmengie View Post
                  and let me tell you what i do know: users can't access what they need to access. i think the first order of business would be to get the users what they need while we research how to disable netbios without f'ing everything up.
                  Fully agree. the business must kept running.
                  I don't know if you have a testenviroment but it could be an option to revert the setting and test the requested action in you're testlab.

                  So, yes I agree you should disable the Netbios setting but only if the business can keep running.
                  Marcel
                  Technical Consultant
                  Netherlands
                  http://www.phetios.com
                  http://blog.nessus.nl

                  MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
                  "No matter how secure, there is always the human factor."

                  "Enjoy life today, tomorrow may never come."
                  "If you're going through hell, keep going. ~Winston Churchill"

                  Comment

                  Working...
                  X