Can't browse My Network Places across domains

I have 2 seperate domains in seperate forests connected via Netscreen
VPN devices and there is two-way trust between them (A trusts B and B
trusts A)

Domain A (2000 Native functional level) - 2 DCs
DC1 - Win2000, all 5 FSMO roles, DNS and WINS
DC2 - Win2000, DNS

Domain B (2000 Native functional level) - 1 DC
DC3 - Win2003, all 5 FSMO roles, DNS and WINS

DC1 and DC2 are primary DNS for domainA.com and secondary for
domainB.com
DC3 is primary DNS for domainB.com and secondary for domainA.com
DC1 is only WINS for Domain A and it has DC3 as push/pull replication
partner
DC3 is only WINS for Domain B and it has DC1 as push/pull replication
partner

>From any PC in Domain A: open Windows Explorer, expand My Network

Places, Entire Network, and Microsoft Networks and I see both domains
but when I click on Domain B I get "The list of servers for this
workgroup is not currently available"

>From any PC in Domain B: can't even see Domain A under My Network
Places

If I log on to either WINS server I can see all PCs from both domains
under Active Registrations folder.

Why can't I browse both domains via My Network Places?

The recommended WINS practices call for each WINS server
to point towards itself for its primary and secondar WINS server.
Also 1 WINS server should be your main WINS Server pushing
and pulling with the other WINS Servers. Once this is correct
verify your Netscreen VPN device is not blocking NetBIOS.

"Jason" <(E-Mail Removed)> wrote in message news:
>I have 2 seperate domains in seperate forests connected via Netscreen
> VPN devices and there is two-way trust between them (A trusts B and B
> trusts A)
>
> Domain A (2000 Native functional level) - 2 DCs
> DC1 - Win2000, all 5 FSMO roles, DNS and WINS
> DC2 - Win2000, DNS
>
> Domain B (2000 Native functional level) - 1 DC
> DC3 - Win2003, all 5 FSMO roles, DNS and WINS
>
> DC1 and DC2 are primary DNS for domainA.com and secondary for
> domainB.com
> DC3 is primary DNS for domainB.com and secondary for domainA.com
> DC1 is only WINS for Domain A and it has DC3 as push/pull replication
> partner
> DC3 is only WINS for Domain B and it has DC1 as push/pull replication
> partner
>
>>From any PC in Domain A: open Windows Explorer, expand My Network
>
> Places, Entire Network, and Microsoft Networks and I see both domains
> but when I click on Domain B I get "The list of servers for this
> workgroup is not currently available"
>
>>From any PC in Domain B: can't even see Domain A under My Network
> Places
>
> If I log on to either WINS server I can see all PCs from both domains
> under Active Registrations folder.
>
> Why can't I browse both domains via My Network Places?
>

Each WINS server does point to itself for primary WINS; I had both
servers set as push/pull partners to each other, should I only have one
set up with the other as a push/pull?

Yes.
From the domain A DC attempt to map to a share on the domain
B DC first by name then by tcp/ip address. If either fails what's the
the exact error message?

"Jason" <(E-Mail Removed)> wrote in message news:
> Each WINS server does point to itself for primary WINS; I had both
> servers set as push/pull partners to each other, should I only have one
> set up with the other as a push/pull?
>

I don't get an error when trying to do either. Mapping to known shares
is no problem whether it's via name or IP; browsing for shares is the
issue.

Okay now verify NetBIOS is enabled on all machienes in both
domains. Start with the servers. Check the tcp/ip properties.
Also verify nothing is blocking NetBIOS either a router or
perhaps a personal firewall.

"Jason" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) oups.com...
>I don't get an error when trying to do either. Mapping to known shares
> is no problem whether it's via name or IP; browsing for shares is the
> issue.
>

How do I know that in DHCP the clients have netbios enabled? How do you
give that option out in DHCP?
"Michael Giorgio - MS MVP" <(E-Mail Removed)> wrote in
message news:(E-Mail Removed)...
> Okay now verify NetBIOS is enabled on all machienes in both
> domains. Start with the servers. Check the tcp/ip properties.
> Also verify nothing is blocking NetBIOS either a router or
> perhaps a personal firewall.
>
> "Jason" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed) oups.com...
>>I don't get an error when trying to do either. Mapping to known shares
>> is no problem whether it's via name or IP; browsing for shares is the
>> issue.
>>
>
>

Do you have option 46 NetBIOS Node Type 0x8 enabled?
NetBIOS over tcp/ip is enabled by default and is local to each
client / server. There is no way to enable using DHCP other than
to specify the node type and the name servers.

You could use a network sniffer such as Etherreal which is quite
simple to use and contains descriptions of the each packet to
verify whether or not NetBIOS is being blocked or where the
browse packets are actually going.

"Jake" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> How do I know that in DHCP the clients have netbios enabled? How do you
> give that option out in DHCP?
>

About a week after I posted this everything just started working. I
don't know if everything needed time to replicate or what. Thanks for
the help.

Cool, glad to hear.

"Jason" <(E-Mail Removed)> wrote in message news:
> About a week after I posted this everything just started working. I
> don't know if everything needed time to replicate or what. Thanks for
> the help.
>