I set up AD 3 weeks ago. It worked fine for 4 or 5 days, then I had an experienced MCSE subcontractor come check it over (I just became and MSCE & MCSA in Feb so I felt I should have someone experienced check it over.) He said I have everything right but our network is being a pain since the following week we upgraded to Domino 5.0.12 (from 5.0.1b). I've spent 1-1/2 weeks working with Domino support and forums assuming it's my Domino but I am now of the belief it's my DNS. 1st question: I can't browse the network neighborhood from any servers, they all show the domain but no clients. The clients can see all computers. My PDC was unable to resolve Name-IP's when I was testing it. (The MCSE sub said it was OK? and it's been a while since my MCSE classes but it doesn't sound OK to me ...) Clients all W2K pro SP3: 20 Gateway M1000 (1 ghz/256Ram) 20 Dell Gx240 (P4 1.53/256Ram) and 20 Dell Gx260 (P4 2.53/256 Ram) I have a Dell Precision 300 (3.06 Ghz w/HT and 1G ram and it even happens to mine). The symptons the clients are experiencing are this: While in Domino, their client will simply lock up. The clients search for email every minute (I know overkill there but that's how they have it). I set up some debugging file in their notes.ini for Lotus and everytime it locks up it hangs for 61000ms, then it re-connects to the server and database it was already connected to. I have tried adding HOST files to their Windows. I changed the DHCP settings so they were not automatic. I have changed Domino's LDAP port to 390 since Windows and Domino both try to use 389. I have set up a second DNS server and that at least made the PDC able to resolve names but the servers still cannot browse the Network. That would bother me if we didn't have all these lock ups. The employees have to hit Ctrl+Brk to stop it or wait for it to time out. That's about it. Thanks! - Vanessa P.S. I checked all stations for MSBlast and it isn't here. I also picked some clients and checked their registry for good measure. I have ports blocked based on Watchguard's alert (4444,135,69)

Addendum: My servers can browse the network as long as I Enable NETbios over TCPIP. That makes me think I have my TCPIP set up wrong ... any help would be appreciated. Thanks Vanessa

Vanessa. It sure is refreshing to see someone that can still construct a proper sentence. First of all, the MCSE that said it was OK probably simply didn't know any better. While you don't need the browsing service for AD, it does indicate a problem if you want to use it, so it's not OK. Your insticts were right. The reality is that the browser service is still NetBios based. It does not use FQDNs and you will need to keep NetBios enable to make it work. You have stumbled on the solution yourself and you didn't even know it. As a matter of fact, often times if you want the browsers service to work correctly across subnets, you may even have to install WINS. When I discovered this I was shocked since I thought this would all be handled by DNS and AD. Not the case I'm afraid. You can use a utility in the resource kit called browstat.exe to help troubleshoot browsing issues. I can't address your Domino issue since I (thankfully) don't use it. I would avoid using LMHOST and HOST file as a general rule however you may need to for some application. Crystal Enterprise and Crystal Reports required me to install WINS on my network in order to get their program to run. Good luck. Glen