Windows Server 2003 - Internet Acces

[Divine]

Hello,

I'm having a little problem with my internet access on my Server when I make a Domain Controller of my Server. I hope anybody can help me out here.

Last week I bought myself a Router (with integretad wireless Access Point and integrated 4 Ports Switch). With this I would like to create a little network at my home with 2 client laptops and 1 PC Desktop as File Server AND Domain Controller.

The first thing I did is, I installed the OS Windows Server 2003 on my PC. Then I added the role "Terminal Server" to my Server. When I try to go to internet at this time, everything looks fine.

The next step I did is installing the Active Directory (with DHCP and DNS ofcourse) to make my server also a Domain Controller.
But the problem is now that I can't make access to internet anymore.

I think it has to do something with my DHCP or DNS settings.
My router has default 193.168.2.1 IP Adress.
But I changed it while installing the "Domain Controller" role to IP Adress 10.0.0.1.

I configured the DHCP and the DNS also with 10-range IP adress.

My question is know, is it possible what I'm trying to do (= to make a Domain Controller and File Server ... on the same PC)
If yes, can somebody give me a possible reason I can't access the internet when I make my server a DC.

I would appreciate any help from anybody.

Thanks in advance.

Divine

[snowmonkey]

You problem is having two DHCP server on the same network. If your router is doing the DHCP then you should tune the DHCP service of on the server, that's why you client can access Internet.
Two DHCP server on the server is a NO NO.

Cheers

[Divine]

This solved the problem!


Thanks a lot Snowmonky.

[Divine]

I'm sorry, I was to quick to say that my problem was solved.

I reinstalled Windows Server 2003 on my Server without installing a DHCP server. Next I installed Active Directory.

Now I can access the internet from my DC. This problem is solved.

But now I have another problem. I can't add my client to the domain.


These are my settings:
- IP Adress PDC 192.168.2.110
- Subnet Mask: 255.255.255.0
- Router IP Adress 192.168.2.1
- Prefered DNS: 127.0.0.1

- client IP Adress 192.168.2.100
--> When I try to add this client to the domain his giving the error that the domain "contoso" doesn't exist or can't make connection to this domain.

I'm sure the domain exists because I log in with the domain controller on the same domain "contoso". And when the system prompts for a user name and password, I input the Administrators' username and password, so that can't be the problem.

May be there is something wrong with the prefered DNS??

Please Help!!

thx

[Divine]

This is my status NOW:

I've created a little domain at my place with one server (also DNS Server and Domain Controller) with Windows Server 2003.

I'm using a router with integrated switch that's doing DHCP.

I'm using just 1 NIC in my Domain Controller for as well my LAN-connection as my Internet Connection (to the router/switch).

I'm also using static IP Adresses, as well for my Domain Controller as my clients.

I'm able to join clients to my domain.


PROBLEM:

--> My Domain Controller has Internet access but NOT my clients!!

I already understand that ICS (Internet Connection Sharing) is not working with Active Directory.

So the only option there, is to configure a virtual router (RASS = Router & Remote Access Service) to share my internet-Connection??

Isn't my Router/Switch doing the routing for my Internet to all pc's on my network??

Anyway, I've been trying a little to configure and to enable RASS on my DC but it seems to be a little sophisticated. Isn't there a guide manual or something to realise this one (for RASS with NAT).

Please HELP!!

[t304pk]

I got similar with my network.
My server and I are on Windows Server 2003 Ent. He manages users through ADS and share internet with ISA.
Earlier, when server was using Windows 2000, I could access internet fine.
Since they have converted to Windows Server 2003, I can only browse internet. But can't browse the network or join the domain. All proxy access (downloaders (DAP, FlashGet, MassDownloader, ...) and chat messengers) has been blocked.
Got an idea

[snowmonkey]

Divine,
1-Router is doing the DHCP so there is no need to have static IP in either computer.

2- don't mess around with DNS and ICS, DNS is provided by your ISP and ICS is done through you Router.

3-Set you IP in both machine to dynamic and then try to ping your router (Gateway) and the server.

Q; is your computer and server both connected to the LAN ports of the router ? can you make sure that you did not connect either the server or the client system to the DMZ port (if you have one ).

4- check out the port setting / policy in your router to make sure you did not block any thing to either systems.

Let us know how that goes.

t304pk,
ISA server is security gateway of any network and trust me if you don't have the authority to log into the system setting then there is no way to get around the security policy, ISA server is VERY efficient in port blocking so don't even think about it.

Cheers

[Divine]

Ok,

as well my client as my PDC have dynamic IP-addresses now and I am able to ping them.

Still I can not access the internet with my client. I must tell you that my client connects through a wireless NIC to the Router (don't think this can be a problem), but my PDC is connected through UTP to the Router.

You asked me if one of my PC's is connected to the DMZ port. Well, I don't know if I have one. How can I check this???

I've been lookin' around in my Router Settings but can't find something like DMZ. Neither I can't find a policy in those settings from blocking anything.

Grtz.

[danjwalker]

if you are using active directory, u need dns. if u use dns, u need a static ip. u can set your dns to forward to your router. its seemless.

[Divine]

Ok, I finally received an answer from my routers' fabrikant "Sweex".

I had 2 options:

1 Sharing the internet from my Domain Controller because when my clients logs into the domain he's looking for the internet through my Domain Controller. So I suppose sharing the internet with RASS.

2 If I want my router to do the routing I need to set my Router IP as Preferred DNS in the LAN-Settings of my clients.

I applied the second option and finally, IT WORKS!! :-)

All thx.

Grtz.

[danjwalker]

That will work but your clients on the network will not be able to resolve each others addresses by hostname.

[Divine]

I tried to ping each PC on hostname and it worked fine. I'm also able to make network drive connections via hostname.

Another question now. I have a PC from work with 2 NIC's. How can I join that PC to 2 domains. (domain "Work" and domain "Home")????

[danjwalker]

You cannot do this. When you join a domain, your computer gets a password so it can make a secure channel to the domain to transfer secure information during logon and other times etc...

This password will be set when you join one domain, then changed when you do another. Even if you set the domain names the same at home as it is at work, it will not work.

[02aqimeh]

Give you a tip !!!! Check on ebay for unlimited hosting I have lots already.

Windows 2003 support ASP.net ? Well if you want to have ASP + .net then I suggest you keep your hosting.

[bhattmilan]

Dear Friend,

I am new to networking so my problems might be silly for you guys but please help me a little...i have windows 2003 small business server, and it works fine. This pc is domain controller also and 4 computers in house are connected to domain through 2nd network card via switch, sharing internet also. Now before today everything was okay but today I tried to install Cisco VPN software on windows 2003 small business server to connect to my university and while installing that some error occurred and somehow vpn didn’t work. I uninstalled it. And restarted the win 2k3, but local network internet sharing started giving troubles...from client pcs are win xp prof. service pack 2 with security and cookies settings middle. Now they can access only google, gmail websites...when I type hotmail, yahoo or any common website it searches and no page found error...so they have internet but why it is behaving like this??? Can anybody help please...

Thanks,

Milan