Help - identify computer on my network

I have a windows 2003 network with 30 + windows xp and Windows 2000 desktops
on my network. When I go to network places entire network and click on
windows network and then my domain, I see a computer there named "Hogie"
this does not in anyway corespond to my naming convention. It is not listed
as having a lease in my DHCP, nor my DNS forward or reverse lookup (active
directory). When I click on the computer icon "Hogie" double clicking
opens a blank window, left clicking and choosing properites brings up an
error "The server Hogie could not be found on the network".

Please help. I want to identify where and what this is and if it is coming
from outside of my network, why it is showing up as being within my domain?

Fred Zilz

On Tue, 3 Aug 2004 16:49:47 -0700, Fredrick A. Zilz
<(E-Mail Removed)> wrote:

> I have a windows 2003 network with 30 + windows xp and Windows 2000
> desktops
> on my network. When I go to network places entire network and click on
> windows network and then my domain, I see a computer there named "Hogie"
> this does not in anyway corespond to my naming convention. It is not
> listed
> as having a lease in my DHCP, nor my DNS forward or reverse lookup
> (active
> directory). When I click on the computer icon "Hogie" double clicking
> opens a blank window, left clicking and choosing properites brings up an
> error "The server Hogie could not be found on the network".
>
> Please help. I want to identify where and what this is and if it is
> coming from outside of my network, why it is showing up as being within
> my domain?

First of all, I assume that the computer is not shown as a part of the
domain (ie has a computer account in the domain), but rather that you can
see the computer in the network neighbourhood. The information about
computers shown in the network neightbourhood seems to be cached for some
time, so since you don't can't find any information about hogie, I would
assume on of two:

- The computer is rather well protected. You could try to ping all the
IP addresses in the subnet, but ICMP traffic may be filtered on the
computer you try to find.

- An employee has brought an laptop computer to his office, and connected
it to the corporate network. The information about the computer (or rather
the lack thereof) is cached.

Well, I guess I would run some kind of network minitor over a longer period
and see whether it's brought back, and of course which other computers
it communicates with. This may (or may not) give you some information about
the most likely location of the computer.

Sorry not to be able to help you more, but hopefully you're a little
closer to the solution.

--
Ole Kristian Bangås
http://www.bangaas.com/

I don't currently run an network monitor, but will have to look into
something.

The scary thing to me is that this computer was in fact listed as a domain
computer, in that under network places, windows network, and my domain this
computer was listed along with all of my legitamet computers. But was not
listed in my AD, or DNS, or DHCP??

"Ole Kristian Bangås" <(E-Mail Removed)> wrote in message
newspsb6n92r22qlbo6@wks...
> On Tue, 3 Aug 2004 16:49:47 -0700, Fredrick A. Zilz
> <(E-Mail Removed)> wrote:
>
>> I have a windows 2003 network with 30 + windows xp and Windows 2000
>> desktops
>> on my network. When I go to network places entire network and click on
>> windows network and then my domain, I see a computer there named "Hogie"
>> this does not in anyway corespond to my naming convention. It is not
>> listed
>> as having a lease in my DHCP, nor my DNS forward or reverse lookup
>> (active
>> directory). When I click on the computer icon "Hogie" double clicking
>> opens a blank window, left clicking and choosing properites brings up an
>> error "The server Hogie could not be found on the network".
>>
>> Please help. I want to identify where and what this is and if it is
>> coming from outside of my network, why it is showing up as being within
>> my domain?
>
> First of all, I assume that the computer is not shown as a part of the
> domain (ie has a computer account in the domain), but rather that you can
> see the computer in the network neighbourhood. The information about
> computers shown in the network neightbourhood seems to be cached for some
> time, so since you don't can't find any information about hogie, I would
> assume on of two:
>
> - The computer is rather well protected. You could try to ping all the
> IP addresses in the subnet, but ICMP traffic may be filtered on the
> computer you try to find.
>
> - An employee has brought an laptop computer to his office, and connected
> it to the corporate network. The information about the computer (or rather
> the lack thereof) is cached.
>
> Well, I guess I would run some kind of network minitor over a longer
> period
> and see whether it's brought back, and of course which other computers
> it communicates with. This may (or may not) give you some information
> about
> the most likely location of the computer.
>
> Sorry not to be able to help you more, but hopefully you're a little
> closer to the solution.
>
> --
> Ole Kristian Bangås
> http://www.bangaas.com/

Might be they set the workgroup name the same as your domain name.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

"Fredrick A. Zilz" wrote:
| I don't currently run an network monitor, but will have to look into
| something.
|
| The scary thing to me is that this computer was in fact listed as a domain
| computer, in that under network places, windows network, and my domain
this
| computer was listed along with all of my legitamet computers. But was not
| listed in my AD, or DNS, or DHCP??

"Dave Patrick" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Might be they set the workgroup name the same as your domain name.

Yes, that is all they would have to do to make it appear to be on the domain
when it really isn't.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com