UO Computing Center Microcomputer Services
The Duck! Networking Issues with Windows 95 & NT
Sidebar Image - Text only tags at bottom of page


Table of Contents

What's Up in the Network Neighborhood?

Windows 95 and NT users who have installed network protocols on their machines have access to various resources by double-clicking on the icon called "Network Neighborhood." What a number of users have noticed is that what they see in their Network Neighborhood is not always consistent. From different physical locations (say from home and the office) you will often see a very different view of the University of Oregon network in your Network Neighborhood. This is dependent upon what types of network protocols you have installed on your machine and how you have configured each of these protocols in your Network Control Panel. This discussion does not cover getting TCP/IP applications to work per se, but you will see the correct default configuration for the TCP/IP Control Panel (minus something called the WINS server) later in this article.

When you look in your Network Neighborhood you may see a number of different items. If you double-click on the "Entire Network" item you will see yet more items. Each of these items relates to a different type of resource. You can identify what the resource is by the icon used for the item. Below is an example of a view of the "Entire Network" from a Windows 95 machine which can see Novell Fileservers and Microsoft Network capable machines (Windows 95, NT and possibly Windows for Workgroups).

Network Neighborhood Image

The item below named, "Zeus", represents a popular Novell fileserver on campus. If you were to double-click on this item and you had an account on Zeus, or you used the public account "PD" then you could connect to this fileserver and see the various files and printers which it serves.

Zeus Novell Fileserver Icon

The Next item represents what is called the "Uoregon" Domain. This is a group of machines running Windows 95, NT, or 3.11 for Workgroups which all have agreed to reside on this Domain. This same type of icon can represent a Workgroup which acts differently than a Domain, but looks the same to you.

Uoregon Domain Icon

If you have correctly configured your Windows environment to see all the resources in the Uoregon Domain and you double-click on this icon, then you would see something like what is shown below.

The Uoregon Domain Machine List

Now you might be asking yourself, "How do I configure my machine to see Novell Netware fileservers and/or Domains and Workgroups in their Network Neighborhood." Even after you do this you may ask yourself, "OK, why can't I reliably see all the machines inside of each Domain or Workgroup?" This has become more of an issue as more and more people start to use Windows 95 and NT in their offices on campus and from home. This document will explain how to do this (as well as you can) for Windows 95 users. Windows NT users can take this information and pretty much translate the concepts directly to their configurations. Some of the specific steps mentioned for the Network Control Panel will, however, be different. We may create a document in the future which contains specific steps for NT users. This document does not go over products (such as Apple's COPSTalk) which allow you to see AppleShare fileserver and System 7 personal filesharing through the Network Neighborhood.

Configuring Your Machine to Access Resources in the Network Neighborhood

Seeing Novell Fileservers in the Network Neighborhood

This is the easy part of our configuration game. In general you should have a Network Control Panel which has, at least, the following network components installed:
  • An Ethernet or Dial-Up Adapter
  • Client for Microsoft Networks
It will look something like this (this includes more protocols which you will see later).
Network Control Panel First, you will need to add the Netware Client by clicking on the Add button, then Client, then Microsoft in the list of Manufacturers. Double-click on the "Client for Netware Networks" item in the Network Clients window to install this.
Next, you will need to click on the Add button, choose Protocol, then choose Microsoft from the list of Manufacturers, and finally choose the "IPX/SPX-compatible Protocol" to install. Click on OK to install this Protocol.

If you want to to always login on a certain Novell fileserver when you startup your machine then you would go to the "Primary Network Logon" list in the opening screen of the Network Control Panel and choose "Client for Netware Networks" as your primary logon. If you are dialing in this is usually not a good idea. It is best to leave your Primary Network Logon as "Windows Logon" and then login on servers after you connect via modem using the built-in dialup networking. You can double-click on the Client for Netware Networks and point it at a specific server if you wish in the "Preferred Server" box.

After you do all this you should close the Network Control panel by clicking on OK and then reboot your machine. You will, most likely, be asked for your original Windows 95 disks or CD-ROM to copy over the new drivers you have requested. After rebooting, if you are on campus then you should be able to see the Novell Filerservers in your Network Neighborhood when you restart. You may notice that some of the Microsoft Domains and Workgroups appear. This will be explained further below. [These steps are significantly different for NT users.]

Seeing Microsoft Domains and Workgroups in the Network Neighborhood

First, you will need to understand the intention behind how Microsoft has designed Domains and Workgroups. The concepts here are the following:

Workgroups: This is a collection of Windows 95, NT and possibly Windows 3.11 for Workgroups machines which all agree to belong to the same named Workgroup. There is a major limitation to this model - All these machines must reside on the same physical network. On the University of Oregon network, known as the UOnet, there are many separate networks known as subnets. You can think of these subnets as being little networks which help to divide the campus up into logical divisions. For instance, most departments are on one physical subnet on the UOnet. Each subnet has a number to identify it. The subnet "net32" belongs to the Computing Center. So, if you are physically located in one building on campus, or maybe you are dialing in from home, and you want to belong to a Workgroup which reside in another building you will not be able to do this reliably, or at all using Workgroups.

Technical Aside: The reason why you cannot reliably see machines in a Workgroup which reside in another physical location is because the Microsoft network protocol known as NetBEUI does not have a method for routing itself from one physical subnetwork to another. Another reason for this problem is that a Workgroup does not have a machine which reliably broadcasts the names of all the other machines in a Workgroup. Since no machine is setup to do this on a Workgroup you can never be sure if you are really seeing every machine in a Workgroup. So, how do you resolve this? Well, read on...

Domains:A Domain in the Microsoft networking scheme has two major differences over a Workgroup.

  1. A Domain has a Windows NT Server which can contain userids so that people can login on a domain, have access to resources to a domain, and, in some cases, not even be allowed to access their workstation until the Domain server has verified their userid and password. This means that a Domain can have security whereas a Workgroup does not.
  2. A Domain has a Windows NT Server which acts as the "Primary Domain Controller" - This means that there is a designated machine which is, in theory, always up and checking for other machines entering the domain. When a new machine enters the domain the NT Servers broadcasts this fact to all the other member machines of the domain so that the next time you open your Network Neighborhood you will be guarranteed (almost!) of seeing all the machines currently in the Domain.
Now, this is all nice and good,but there is a serious technical limitation to this model! When you are logging in via modem, and/or you are located somewhere on campus how do you set up your machine so that you can see all the machines in all the Domains and Workgroups on campus. Well, the bottom line answer to this is, "You cannot!" Still, don't despair - the idea behind this document is to give you some good tricks for getting around some of these limitations and to understand why they exist. Read on to understand this issue better...

Why Can't I See All Machines in All Domains/Workgroups?

First off, to begin we must be a little fair to Microsoft. There is actually a model by which it is possible to setup a network where everyone can see every machine on every Domain (you must have Domains with Windows NT Servers on each one to do this) in their Network Neighborhood. This model is called,

The Complete Trust Model: In this model every Windows NT server must be setup so that it knows the IP address of every other Windows NT Server on the network and it must give full permissions to all of these servers. This means that the administrator of the server must be willing to allow the administrators of all the other servers to have privileges to create, delete, and modify pretty much anything on their server. Still, even if you wanted to do this it is not practical on the UOnet. The formula for how many separate trust relationships you must setup for each server is (((number of servers) X (number of servers)) - (number of servers)). For just 20 NT servers (the UO has exceede this number) the number of trust relationships would then be ((20 * 20) - 20), which is 380! That means 380 phone calls, e-mail messages, etc. to setup the trust relationships between the servers. If you were to do this, then each server receives information from all the other servers about what machines are on each of their Domains, thus users can see all machines on all machines on the network. Another way to to do this is to have one master Windows NT serverthat all the other servers are subordinate to. This only works for smaller networks and organizations where one group has absolute control over all the other groups (this is not the model at the UO).

So, what can you expect on the UOnet? Well, to begin with if you want to have a group of machines where you can always be guarranteed of seeing all the other machines via your Network Neighborhood, then you must have a Windows NT Server on the Domain to act, at the least, as the Primary Domain Controller. Network Services provides such a service on one Domain called "Uoregon" so that there is a central place you can point your Windows 95 and NT boxes at for services. It's kind of like having a central meeting place.

Accessing Other Workgroups on the UOnet

If you are on the same physical subnet on the UOnet then you may create a Workgroup and agree to point at this workgroup. You should see most machines pretty reliably on this Workgroup using this method. To point at a Workgroup just click on the Identification tab in the Network Control Panel and enter in the Workgroup name you wish to belong to. Remember, and this is critical, if the Workgroup resides on a different physical subnet then you cannot reliably see other machines using this method.

If there is a Windows NT server on your Subnet which is acting as a WINS (Windows Internet Naming Service) server, then there is a method to see all the machines in the Domain from any subnet (including via dialin). Here is what you do:

  • Be sure that you have the Client For Netware, Client for Microsoft Networks, IPX/SPX-compatible protocol, NetBEUI Protocol, Dial-Up Adapter/Ethernet Adpater, and the TCP/IP Protocol installed in your Network Control Panel.
  • Now in the Identification tab enter in the correct name of the Domain you wish to belong to.
  • If you are actually going to login on a Windows NT Domain via a Windows NT Server then double-click on the Client for Microsoft Networks network component. Click on the "Log On to Windows NT Domain" check box and enter in the name of the Domain below.
  • For all cases double-click on the TCP/IP Protocol network component (as seen below),
    IP Tab in TCP/IP Properties
    and then click on the "WINS Configuration" tab. You must now click on the "Enable WINS Resolution" button and enter in the "Primary WINS Server" field the IP address of the WINS server for your particular Domain. For the Uoregon Domain this address is 128.223.60.48.
  • As general good measure you should enter in one final set of properties for the TCP/IP protocol. By doing this you ensure that all your network programs like Netscape, News, Telnet, Eudora, etc. will run correctly. In the "DNS Configuration" tab of the TCP/IP Protocol properties (seen below)
    DNS Tab in TCP/IP Properties
    you should enter in the following information -
    • Click on the "Enable DNS"button
    • In the "Host" field enter the name of your machine (anything is fine except for names like darkwing, gladstone, oregon, etc., which are already in use on the UOnet).
    • in the "Domain" field enter "uoregon.edu"
    • Now enter each of the numbers listed below for the "DNS Server Search" order field. Enter these numbers in the order shown below. Click on the "Add" button after you have typed in each number:

      128.223.32.35
      128.223.60.22
      128.223.6.9

Phew! Now you should be able to click on OK until the Network Control Panel closes. You should now restart your machine.

What Protocols Do You Need to See Machines, Domains, and Workgroups and Why?

One of the key problems with all of the following concepts explained above is how do they work with the underlying network protocols you have available to you. Let's do a very quick rundown of the typical network protocols in use at the UO.

  • TCP/IP This is the primary network protocol for most users at the UO. This is the protocol which programs such as Netscape, Telnet, News, Eudora, FTP, etc. all use. This protocol allows data to go between any subnet on the UOnet (and, of course, out to the entire Internet). This is why the WINS server uses this protocol. You simply type in the IP address of the WINS server and, as long as you have TCP/IP loaded in your Network Control Panel, you can access the WINS server from anywhere.
  • IPX/SPX, or
  • IPX/SPX-compatible Protocol This is the protocol which Novell fileservers use. The key with this protocol is that it allows data to go between subnets on the UOnet (i.e, it can be "routed") and you can use this protocol to encapsulate data from the next protocol. You need to install the Client for Netware Networks to make full use of this protocol.
  • NetBEUI This is the protocol which the Microsoft Network uses. This protocol is not routable, i.e. you cannot pass data using this protocol from one subnet to another on the UOnet (a serious limitation). In all fairness this protocol is very efficient for small organizations which have only one subnet. You need to install the Client for Microsoft Networks to make full use of this protocol.
So, if you are using the UOnet and you actually want to see all the machines in a Domain which is not on the same subnet as you then you must install the IPX/SPX-compatible Protocol. The reason why is because this protocol will "encapsulate" (this means will encase) NetBEUI packets so that they can travel between different subnets. The routers between subnets on the UOnet support this feature. This is known as a workaround in "computerese."

What About Seeing Machines in Two Separate Domains?

So, a few of you may have already been asking yourself this question. If each Domain only ensures that you can see all the machines in that Domain (remember, a Domain means that there is a Windows NT Server taking care of business), then how can you see machines in another Domain in your Network Neighborhood. Remember above we already gave you the answer, and that is that you cannot. This is an unfortunate, and very confusing result of using Microsoft's networking model as setup in Windows 95 and NT. Still, do not completely despair, there is a way around this. Remember we said that using IPX/SPX was a workaround to allowing NetBEUI packets to go between subnets, well the workaround we are about to present might be called a kludge. This is computerese for, "A workaround which works but is somewhat silly in nature." OK, here is what you do to see any Windows 95 or NT machine on the network which is running the TCP/IP protocol. If the machine does not have TCP/IP loaded then this trick will not work.

First Workaround: Using an LMHOSTS File

  • Create a file in your Windows directory on your machine called, "LMHOSTS" - If there is already a LMHOSTS files, then we will just add lines to the file. You should note that Windows 95 comes with a sample LMHOSTS file called LMHOSTS.SAM. You do not need to use this file. Also, be sure that the file is a text only file. And, be sure that you have the TCP/IP protocol loaded on your machine.
  • In the LMHOSTS file you can specify the IP addresses of machines you want to access on the network and their names. For instance, if you wanted to access the machine called "Public" (which is our Public software repository for Windows 95 and NT software) you would do the following. The IP address shown below is correct.
    128.223.33.76 Public
  • After you create this file (in terms of DOS the file is in your C:\WINDOWS directory) you should restart your machine.
  • After restarting go to the Start menu in Windows 95, choose "Run..." and enter in the name of the machine you are trying to access which has been defined in the LMHOSTS file. In this case you would enter -
    \\Public
    Note that you must use the "\\" form for this method.

    A few of you familiar with how IP addresses work on the UOnet will already see the flaw in the LMHOSTS file. The problem is that most newer machines are assigned an IP address when they startup. This address can change, particularly if someone does not use their machine for a long time. This method of dynamic IP address allocation actually makes life much easier for everyone using the network, but in this example can cause problems. All server machines (like Public) should have a permanent IP address assigned to them. Individual machine's, however, may be using DHCP (the dynamic method for getting an IP address). So, you might have a friend with a machine called "TheTerminator" which you have defined in your LMHOSTS file as something like -


    128.223.47.47 TheTerminator

    but, if their machine is ever assigned a different IP address you will not be able to get to their machine using this method.

    A Few More Notes: When you use this method the hard drive, or shared resource on the machine you are trying to access appears as a window on your desktop after you enter it's name in your Start menu.

    This method does not always work. Why it does not always work is unclear, but we have verified specific cases where using LMHOSTS failed.

Second Workaround: Using Static IP Address in WINS Database

If the system administrator for a Windows NT server which is acting as the WINS server for a Domain enters the IP address of another resource on the network in their WINS database then users pointing to that WINS server should be able to access that resource.

At the U of O such a scenario takes place with the Knight Library (our central library) internal Domain. Users on that Domain login on an NT server and point to a WINS server to see resources (printers, other machines) in the Knight Library. If these users wish to access a resource on the Uoregon Domain they cannot do so reliably, except to either create an LMHOSTS file pointing to the IP address of the resource on the Uoregon Domain. Since this becomes a maintenance headache, an easier method is if the WINS server in the Knight Library Domain knows the IP address of a resource in the Uoregon Domain then all client machines in the Knight Library Domain should be able to access this resource.

The most likely method for accessing the resource when doing this is to go to the start menu, choose "Run...," and type the name of the resource. If the user were to try and access the NT Server called Kahuna in the Uoregon Domain they would then simply type

\\kahuna

and Kahuna will appear in a new window after a few moments.

A Technical Discussion of Browsing

The first thing to understand is that the term Browsing is the act of viewing resources in your Network Neighborhood and accessing resources through the "Run..." command under the Start menu. Besides all the various reasons we've discussed about why you can see resources and why can't see resources we have not, yet, discussed how Browsing actually works on a technical level. In the next section we give a few more rather esoteric hints for improving your browsing. Here we tell you how your machine actually gets the lists of available resources which it can see. This is important since Microsoft's current implementation of Browsing is a patchwork of rules that you may find surprise and which directly affect what you see when you double-click on your Network Neighborhood icon.

This remainder of this discusion is coming soon!

A Few Additional Notes For Improving Browsing

Login to Your Windows 95 Box: It is always a good idea to login to a Windows 95 box so that you are a verified user when using your machine. If you do not have a username and password setup for your Windows 95 login you may want to do this. If you already login on a Windows NT box to join a Domain, then you are already verified. By logging in you do the following:

  • If you access any shares and want to reconnect to these shares when restarting you must be a verified user for this to work.
  • Browsing becomes quite unreliable if you are not verified. Why this is true we do not know. If you have further information on this we would love to hear from you. Drop us a note to microhelp@oregon.uoregon.edu.
  • A few other things won't work if you are not a verfied user. These include:
    • Printing in many cases, particulary if you print through a server queue.
    • Changing of passwords.
    • If you dialin, you won't be able to save your dialin password.
WINIPCFG: If you ever want to know the IP address of a machine you are on go to the Start menu, choose "Run..." and type "winipcfg" then click on OK. Lots of good network information specific to your machine will be displayed, including its IP address.

Layered Subnets: We have seen some erratic reachability behavior on layered subnets. That is, subnets which have a physical address of 128.223.nn, but have layered addresses of 128.223.nn+1 or greater. In particular, accessing NT Servers and seeing all resources in a Domain which has machines on such a subnet does not seem to be as reliable. There has been no formal testing or problem investigation of this, so if you have any information to report about this issue please send email to microhelp@oregon.uoregon.edu - thanks!

Sharing: Remember you must have actually shared something on a machine before you can get to anything on the machine using the methods described above. To do this be sure that you have installed "File and Printer Sharing for Microsoft Networks" in your Network Control Panel. Do this by clicking on Add, then Services, then choose Microsoft as the manufacturer. Now you will see "File and Printer Sharing for Microsoft Networks" in the Network Services panel of the window. You share items by right-clicking on them and then choosing the "Sharing..." option in the popup menu which will appear.

Putting Your Primary Domain Controller in LMHOSTS: One nice trick is to put a pointer to your Primary Domain Controller in your LMHOSTS files, if you are using LMHOSTS. This helps to insure that the Windows 95 client will know how find the Primary Domain Controller for its Domain should the box be moved to a different subnet. If you are unclear of the Domain and Primary Domain Controller concepts see the Domains discussion. If you need help setting up an LMHOSTS file see the LMHOSTS File Workaround discussion.

NetBIOS & DNS Names: The NetBIOS name refers to the name you give to your computer under the Identification tab in the Network control panel. When you use a WINS server to improve visibility of resources one of the things which the WINS server does is to match up a machine's NetBIOS name with its IP address. This is how TCP/IP can be used to improve access to resources in the Network Neighborhood and through the Start menu since these two methods for viewing network resources use (under Windows 95) NetBIOS names. To improve the chances of your machine being visible to others who make use of a WINS server you should use the same name in the Identifcation tab of the Network control panel for your computer as the DNS name of your computer. For most people this will not be a static name if they use DHCP to get an IP address. Still, if you know your machine's IP address you can always login on a Unix systems such as gladstone or darkwing (at the U of O) and use the command nslookup to find out the DNS name of your machine. Here's how to do this on a Windows 95 box:

  1. After starting your machine go to "Run..." under the Start menu and enter the command winipcfg. Press OK and you should see a dialogue which includes the IP address of your machine.
  2. Login on a Unix box such as darkwing or gladstone and type the command nslookup nnn.nnn.nnn.nn, where the "n's" stand for your machine's IP address. So, if winipcfg had reported that your IP address was 128.223.33.115 you would type nslookup 128.223.33.115. The DNS name of your machine will be (at the U of O) d33-115.uoregon.edu.
  3. Now go to the Identification tab in your Network control panel and in the "Computer name:" field enter d33-115.uoregon.edu.

    Naturally, the problem with this is that if your machine is getting an IP address using DHCP then the DNS name for your machine could change from time-to-time. Another problem is that if you have a descriptive, or well known name for your machine you may be reluctant to take this step. In some cases, particularly if your machine acts as a server, or you are at a location which uses static IP addresses, then you can request a DNS name for your machine and make it be something you prefer. In the end all this effort may not help much with improving the visibility of resources, but it can help somewhat.

Obviously this document is quite long and detailed. Still, there are many bits and pieces we have left out to try and keep the length somewhat reasonable. If you have comments about this document please feel free to send e-mail to microhelp@oregon. You can find more details about the information presented here in the Windows NT Resource Kit available in most bookstores, and in many other computer books by companies such as SAMS publishing. Good places in the Eugene area to find such books are The Smith Family Bookstore, Barnes & Nobles, the UO Bookstore, and Walden Books. You can also checkout many of these books in the Documents Room Library in Room 205 of the UO Computing Center. This is not a definitive list and should not be construed as an endorsement of one book or store over another.

One Big Difference With Windows 98: Avoiding LMHOSTS

Windows 98 appears to have the functionality of the LMHOSTS file built-in directly to its network services. From the Start menu in Windows 98 you can now choose "Run...," and type in an IP address of a resource on the network directly. This means that you do not have to create an LMHOSTS file which contains both the DNS name of the resource and its IP address. As an example, the IP address of the Windows NT server named kahuna is 128.223.60.48. If you type this address in the "Run..." box in Windows 98 Kahuna should come up on your screen. You may notice a slightly longer delay than if you had typed in "\\kahuna," but this method does seem to work in most cases.

Remember, this method requires that both the client machine (where you type in the IP address) and the resource you wish to reach be running TCP/IP to work.

A Few Acronyms

If you've been wondering what TCP/IP, IPX/SPX, NetBEUI, or DHCP stand for, well here's your chance to find out.

  • TCP/IP - Transmission Control Protocol/Internet Protocol
  • IPX/SPX - Internet Packet Exchange/Sequence Packet Exchange
  • NetBEUI - NetBIOS Extended User Interface
  • NetBIOS - Network Basic Input/Output System
  • DHCP - Dynamic Host Configuration Protocol

Hervey Allen,
6/4/98
Navigation Banner

[Home][CC Home][UO Home] [VMS/UNIX][Network Services]
[Windows95][Windows NT] [Windows 3.1][Macintosh] [Internet][Hot Topics] [Training][Questions?]