NETDIAG Diagnostic Capabilities in Windows 2000

The Network Diagnostic tool (NETDIAG) is a command-line utility included in the Microsoft Windows 2000 Support Tools designed to isolate network client and connectivity problems. This article provides a comprehensive overview of the diagnostic capabilities of NETDIAG, detailing the specific hardware, protocol, name resolution, and Active Directory tests the tool executes to verify the operational state of a Windows 2000 system on a network.

Overview of NETDIAG Architecture

NETDIAG runs a sequence of predefined, non-destructive tests against the local system. It evaluates the network configuration by directly querying network drivers, transport protocols, network services, and domain resources. Instead of requiring administrators to manually execute individual tools such as PING, IPCONFIG, NSLOOKUP, and NLTEST, NETDIAG consolidates these diagnostics into a single automated execution.

Network Adapter and Configuration Diagnostics

NETDIAG examines physical and logical adapter settings to verify that local hardware and base configurations are functioning properly:

  • Network Card Test (Netcard): Extracts hardware details including Media Access Control (MAC) addresses, adapter descriptions, interrupt requests (IRQs), memory ranges, and driver status.
  • IP Configuration Test (IPConfig): Enumerates all TCP/IP settings configured on the host, including IP addresses, subnet masks, default gateways, and whether Dynamic Host Configuration Protocol (DHCP) is enabled.
  • Default Gateway Test (Gateway): Tests end-to-end IP reachability by pinging all configured default gateways to verify local subnet egress.
  • Autonet Test (Autonet): Identifies whether the machine is using an Automatic Private IP Addressing (APIPA) address (169.254.x.x range), which often indicates a failed DHCP negotiation.

Protocol and Core Service Testing

The utility verifies that critical core protocols and subsystems are properly loaded and responding:

  • Winsock Test (Winsock): Checks the integrity of the Winsock catalog, protocol entries, and namespace providers.
  • IPX and NetBEUI Tests: If installed, verifies bindings and configuration parameters for legacy protocols like NWLink (IPX/SPX) and NetBEUI.
  • Routing and RAS Configuration: Gathers information on remote access connections and routing tables active on the host.

Name Resolution Verification

NETDIAG runs comprehensive tests against all configured name resolution mechanisms:

  • DNS Test (DNS): Verifies that configured DNS servers are reachable and actively responding. It tests whether the machine’s host record (A record) and service location records (SRV records) are correctly registered in the DNS infrastructure.
  • WINS Test (WINS): Queries primary and secondary Windows Internet Name Service (WINS) servers to confirm reachability and verifies that NetBIOS names are correctly registered.
  • NetBT Test (NetBT): Examines NetBIOS over TCP/IP parameters, including node type and scope ID configurations.

Active Directory and Domain Membership Diagnostics

For machines joined to a Windows 2000 domain, NETDIAG provides deep visibility into directory service connectivity, secure channels, and authentication mechanisms:

  • Domain Controller Discovery (DsGetDcName): Locates accessible Domain Controllers (DCs) for both the local domain and the forest root.
  • Domain Membership and Secure Channel Test (Member): Validates the secure channel between the local computer account and a Domain Controller.
  • Kerberos Test (Kerberos): Verifies the host's ability to authenticate using the Kerberos v5 protocol, checking the retrieval and validity of ticket-granting tickets (TGT).
  • Trust Relationship Test (Trust): Tests domain trusts associated with the primary domain, validating bidirectional communications across forest and domain boundaries.
  • LDAP and RPC Verification: Confirms that the host can initiate Lightweight Directory Access Protocol (LDAP) connections and Remote Procedure Calls (RPC) to domain controllers.

Execution Options and Automated Remediation

NETDIAG includes command-line switches that tailor diagnostic output to specific troubleshooting requirements:

  • Automated Repairs (/fix): Enables the utility to automatically repair minor configuration issues, such as re-registering DNS records (ipconfig /registerdns) or rebuilding a damaged secure channel with a domain controller.
  • Detailed Output (/v): Generates verbose log output detailing every step, API call, and response code.
  • Targeted Diagnostics (/test:<TestName> / /skip:<TestName>): Allows administrators to run only specific tests or bypass tests that are not relevant to the current troubleshooting scenario.
  • Output Redirection (/l): Automatically saves the diagnostic report to a NetDiag.log file in the current working directory.