Beginning on Monday of last week I have 5 workstations and counting (amongst
400) that have lost the ability to connect to and authenticate to our network
server shares or AD but yet are able to access the internet. The issue is
also not limited to the individual user profile as our own (admin) logins on
the affected systems also fail to reach these servers from affected machines.
An error of "no path found" or "you may not have proper permissions" occurs.
The other identifiable feature is that the winlogon.exe process is consuming
50% of the CPU capacity.
The system responds to a ping, and can ping other systems including the
systems with shares that can't be accessed.
Nbtstat, shows nothing listed.
Running F-Port revealed that most of the communications ports pid's were Not
tied to a directory (McAfee and RDT did).
I have tried practically everything I can think of:
>Ran Full McAfee scan, removed & reinstalled McAfee 8.5i
>Ran process explorer- nothing unusual
>Ran Rootkit revealer- no root kits seen
>Ran WireShark, nothing obvious was evident
>Removed system from Domain
>Unchecked and Re-installed Client for MS Neworks & File & Print from local network connection.
>Tried connecting to vpn, failed
>Ran sfc, no errors
> Ran netsh int ip reset, seemed to hang, fail
Any ideas or help appreciated! (also posted on RedmondMag.)