Microsoft KB Archive/266204

= Cannot Browse a Different Windows NT 4.0 Domain Across a Firewall =

Article ID: 266204

Article Last Modified on 7/6/2007

-

APPLIES TO


 * Microsoft Windows NT Server 4.0 Standard Edition

-



This article was previously published under Q266204



SYMPTOMS
When a firewall is used to separate two Windows NT 4.0 domains that have no trust relationship established, and each domain has its own Windows Internet Name Server (WINS) server that does not replicate to the WINS server in the other domain, you cannot browse for resources in the other domain by NetBIOS name.



CAUSE
This behavior can occur for any of the following reasons:


 * The Domain Master Browser [1Bh] entry for the opposite domain is missing or incorrect in WINS or in the LMHOSTS file (if one is in use).
 * The firewall is using a network address translator (NAT), and NAT is improperly configured.
 * The firewall is filtering or has disabled the required ports.



RESOLUTION
To resolve this behavior, perform the following actions:


 * 1) Make sure that WINS or LMHOSTS is using the correct Domain Master Browser [1Bh] entry for the opposite domain.
 * 2) Make sure that if the firewall is using network address translation, the NAT has the correct internal/external address mapping/translation configured.
 * 3) On all firewalls between the domains, make sure that UDP ports 137 (NBNS) (used by NBT NS Query for [1bh]) and 138 (NBDS) (used by the browser service) and TCP port 139 (NBSS) (used by NBT for session setup and SMB for browse list transfer) are not filtered or disabled.
 * 4) Make sure there are no other firewall services running.



MORE INFORMATION
For more information, refer to the following articles:

180094 How to Write an LMHOSTS File for Domain Validation

163409 NetBIOS Suffixes (16th Character of the NetBIOS Name)

Keywords: kbprb KB266204

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.