NetBIOS names reference

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2, Windows Server 2008, Windows Server 2008 R2, Windows Server 8 Beta

NetBIOS names reference

For all Microsoft operating systems that support and use NetBIOS names, the first 15 characters of a name can be specified by a user. However, the 16th character of the name (00-FF hex) always indicates a resource type.

This section contains additional information and examples of NetBIOS names used by Microsoft networking components.

NetBIOS name types: an overview

The following are the most common types of NetBIOS names that can be used in the WINS database. When creating static mappings, these general types are available for selected use.

Type Description


Used to associate the computer specified by name in Computer name and a single IP address in IP address for this static mapped entry. When this type is selected, three types of records are statically added to the WINS database for the specified computer name. These are the [00h]WorkStation, [03h]Messenger and [20h] File Server types.


Also referred to as a normal group. This type is used to add a static entry for the computer, specified by name in a static mapping, to a workgroup used on your network. If this type is used, the IP address for the computer is not stored in WINS, but is resolved through local subnet broadcasts.

Domain Name

Indicates a domain name [1C] mapped entry for locating Windows NT domain controllers.

Internet Group

Used for special user-defined administrative groups. You can use this to group resources. For example, you can indicate a group of file or print servers for organizing shared resources that are visible when browsing your network places. Each Internet group is represented by a shared group name of [20h] type in the WINS database.


Used to register a unique name for a computer that has more than one IP address (either multiple adapters each using a single address or one network adapter configured with multiple IP addresses).

NetBIOS Unique Names

Format Description


Registered by the Workstation Service on the WINS client. In general, this name is called the NetBIOS computer name.


Registered by the Messenger service on the WINS client. This service is used by the client when sending and receiving messages. This name is usually appended to both the NetBIOS computer name for the WINS client computer and the name of the user currently logged on to that computer when sending messages on the network.


Registered by the Routing and Remote Access service on the WINS client (when the service is started).


Registered by each Windows NT Server 4.0 domain controller running as the domain master browser. This name record is used to allow remote browsing of domains. When a WINS server is queried for this name, a WINS server returns the IP address of the computer that registered this name.


Registered by the Network Dynamic Data Exchange (NetDDE) services. This appears only if the NetDDE services are started on the computer.


Registered by the Server service on the WINS client. This service is used to provide points of service to the WINS client to provide sharing of its files on the network.


Registered by the RAS Client service on the WINS client (when the RAS Client is started).


Registered by the Network Monitoring Agent Service and appearing only if the service is started on the WINS client computer. If the computer name has fewer than 15 characters, the remaining character spaces are padded with plus (+) symbols.


Registered by the Network Monitoring Utility (included with Microsoft Systems Management Server). If the computer name has fewer than 15 characters, the remaining character spaces are padded with plus (+) symbols.


User names for currently logged-on users are registered in the WINS database. Each user name is registered by the Server service component so that users can receive any net send commands sent to the user name. If more than one user logs on with the same user name, only the first computer logged on with that name registers the name.

NetBIOS Group Names

Format Description


Registered by the Workstation Service so that it can receive browser broadcasts from LAN Manager-based computers.


Registered for use by the domain controllers within the domain. These contain up to 25 IP addresses.


Registered for use by master browsers, of which there is only one per subnet. Backup browsers use this name to communicate with the master browser, retrieving the list of available servers from the master browser. WINS servers always return a positive registration response for domain_name[1D], even though the WINS server does not register this name in its database. Therefore, when a WINS server is queried for the domain_name[1D], the WINS server returns a negative response, which forces the client to broadcast for name resolution.


A normal group name. Any computers configured to be network browsers can broadcast to this name, and listen for broadcasts to this name, to elect a master browser. A statically mapped group name uses this name to register itself on the network. When a WINS server receives a name query for a name ending with [1E], the WINS server always returns the network broadcast address for the local network of the requesting client. The client can then use this address to broadcast to the group members. These broadcasts are for the local subnet and should not cross routers.


A special group name called the Internet Group is registered with WINS servers to identify groups of computers for administrative purposes. For example, "printersg" could be a registered group name used to identify an administrative group of print servers.


Registered by the master browser for each subnet. When a WINS server receives a name query for this name, the WINS server always returns the network broadcast address for local network of the requesting client.