nbtstat issue

From: Mike W (pa_flyer_at_yahoo.com)
Date: 10/29/03 

Date: Wed, 29 Oct 2003 07:12:33 -0800

We have a security template that restricts most users from
using network utilities (ping, tracert etc.) However, we
have experienced a unique problem with XP and NBTSTAT.

When an admin uses nbtstat -A (IP addy), it works great.
When a user (granted READ/EXE perms) uses the same
command, they get "Failed to access NetBT driver - NetBT
may not be loaded".

Now for the interesting part. I am logged on as an
admin. I used the RUNAS command line to open another
instance of CMD.EXE as the user. Then typed the command
in the new window. It works in window #1 (admin), but not
in window #2 (non-admin). Both users have the right to
read/execute the command.

Have tried tracing through regmon, processmon and filemon,
but can't seem to find what else NBTSTAT is looking for or
using that the user doesn't have the rights for.

Relevant Pages

  • Re: WINS resolution
    ... I run the command nbtstat -N -S -c and following is the output that I ... Microsoft MVP - Directory Services ... Instead of the website you're using, try using OEx (Outlook Express ...
    (microsoft.public.windows.server.networking)
  • Re: NetBT Error
    ... What happens if you open a command prompt and type nbtstat -n? ... What IP address does it show in the bottom part of the message window? ... You won't necessarily see duplicate names (it's not a duplicate IP address; ...
    (microsoft.public.windows.server.sbs)
  • net view shows "no entries in list" via name but works via IP
    ... netbios connectivity dies and has a very hard time being reactivated. ... Okay, that's weird, I know there are shares. ... The command completed successfully. ... Both ping and nbtstat show that name ...
    (microsoft.public.windowsxp.network_web)
  • Re: Failure audit in security log
    ... after the nbtstat -a command. ... >> I saw some Failure audits in my security log with Event Code Ids 529 and ... >> workstation or try to gather more information that will be useful for my ...
    (microsoft.public.win2000.security)
  • Re: Workstation logon error.
    ... > | The workstations are on the same lan segment ... > | I have not tried that nbtstat command, ... > NBTSTAT /? ... > communicate using NetBIOS. ...
    (microsoft.public.win2000.general)