Re: applying computer settings takes a lot of time

Ive put the pc in the site where the dc is and the problem still appear

PC and DNS/DC are in the 192.168.10.x subnet

Can i send you the file USERENV and also ive run wireshark to collect logs

Thanks !

"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message news:ff16fb6629ebf8cbd3b008f5201b@xxxxxxxxxxxxxxxxxxxxxxx
Hello Jac,

Add a DNS/DC to the site where the computers are located and let the clients use that machine as preferred DNS on the NIC and another site DNS as secondary for redundancy.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

The problem came back anyone can help me please

Thanks !

"Jac" <support@xxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:ellvdlc9JHA.3544@xxxxxxxxxxxxxxxxxxxxxxx

The dns user by all user are in subnet 192.168.10 and 192.168.40.0
wich is for another site

The problem now is gone for all the 3 users that had the problem.
Once you let the pc applying the settings it seem to be ok but it
seem to come back after a few days....

What kind of connection is between the locations = We have user that
are in same location as the dns server that have the problem and
other users are in another location that user a 10 Mbits fiber link

Thanks for helping

"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb66285258cbc3be6d03e49c@xxxxxxxxxxxxxxxxxxxxxxx

Hello Jac,

I didn't say they can't, i try to understand your network setup. So
in the moments the computer connected to another subnet to reach a
DC/DNS server to authenticate and apply configuration settings, GPO
etc.

So is there a DNS server in there subnet available?

What kind of connection is between the locations?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
Why client could not be in a different subnet ?

Subnet 10 is for server and printer.

Subnet 80 is for users

"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb66285048cbc3a75e6fb65c@xxxxxxxxxxxxxxxxxxxxxxx

Hello chriske911,

The "island" problem was in windows 2000 and is solved. So do you
have a DNS server in the client location?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties,
and
confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
Meinolf Weber [MVP-DS] was thinking very hard :

Hello Jac,

Why does your client is located in a different subnet then the
DC/DNS servers, 192.168.80.x? The DC/DNS are either 192.168.10.x
or 192.168.40.x

Also configure all DNS to itself as preferred and the others as
secondary.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties,
and
confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!!
http://www.blakjak.demon.co.uk/mul_crss.htm
Yes they are DC

I removed the domain name and suffix in the capture

Did you configure AD sites and subnets for the subnets in use
and add the

DC/DNS servers to the correct site?

Yes all the DC are in the good Site and i configure subnet to
be use for each sites

DNS zone names = ville.xxxx.qc.ca

the name listed in AD UC for my three DC =
VIRTIDC1.ville.xxxx.qc.ca
VIRTIDC2.ville.xxxx.qc.ca
INFCOMPRINT.ville.xxxx.qc.ca
NetBios Name =
VIRTIDC1
VIRTIDC2
"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in
message
news:ff16fb66283048cbc2390405a140@xxxxxxxxxxxxxxxxxxxxxxx
Hello Jac,

Are this computers domain controllers, i assume yes? None of
them has a domain name listed and a primary DNS suffix or DNS
search suffix, or did you remove them from the output?

Did you configure AD sites and subnets for the subnets in use
and add the DC/DNS servers to the correct site?

Please post the DNS zone names, the name listed in AD UC and
the NetBIos name.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no
warranties,
and
confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!!
http://www.blakjak.demon.co.uk/mul_crss.htm
Here is a ipconfig from one computer that have the problem.
One strange thing is that if we let the computer at "Applying
computer settings" the next time we power on the pc
everything is ok

Only one nic in all the pc

DNS - PC
C:\Documents and Settings\PIERPARA>ipconfig /all
Configuration IP de Windows
Nom de l'hôte . . . . . . . . . . : finchcomp
Suffixe DNS principal . . . . . . :
Type de noud . . . . . . . . . . : Hybride
Routage IP activé . . . . . . . . : Non
Proxy WINS activé . . . . . . . . : Non
Liste de recherche du suffixe DNS :
Carte Ethernet Connexion au réseau local:
Suffixe DNS propre à la connexion :
Description . . . . . . . . . . . : Intel(R) PRO/1000 PM
Network
Connect
ion
Adresse physique . . . . . . . . .: 00-10-C6-AB-BB-AC
DHCP activé. . . . . . . . . . . : Oui
Configuration automatique activée . . . . : Oui
Adresse IP. . . . . . . . . . . . : 192.168.80.123
Masque de sous-réseau . . . . . . : 255.255.255.0
Passerelle par défaut . . . . . . : 192.168.80.1
Serveur DHCP. . . . . . . . . . . : 192.168.10.81
Serveurs DNS . . . . . . . . . . : 192.168.10.3
192.168.10.81
192.168.40.8
Bail obtenu . . . . . . . . . . . : 22 juin 2009 21:34:07
Bail expirant . . . . . . . . . . : 30 juin 2009 21:34:07
DNS1
C:\Documents and Settings\Administrator>ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : VIRTIDC1
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . :
Ethernet adapter Local Area Connection 2:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : VMware Accelerated AMD
PCNet
Adapter
Physical Address. . . . . . . . . : 00-50-56-B7-59-37
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.10.3
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.10.1
DNS Servers . . . . . . . . . . . : 192.168.10.3
192.168.10.81
DNS2
C:\Documents and Settings\jeancout>ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : VIRTIDC2
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . :
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : VMware Accelerated AMD
PCNet
Adapter
Physical Address. . . . . . . . . : 00-50-56-B3-58-1A
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.10.81
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.10.1
DNS Servers . . . . . . . . . . . : 192.168.10.3
192.168.40.8
DNS3
C:\Documents and Settings\administrator>ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : INFCOMPRINT
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . :
Ethernet adapter VLAN1:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : HP Network Team #1
Physical Address. . . . . . . . . : 00-0B-CD-4D-EF-56
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.40.8
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.40.1
DNS Servers . . . . . . . . . . . : 192.168.40.8
192.168.10.3
192.168.10.81
Thanks !
"Florian Frommherz [MVP]"
<florian@xxxxxxxxxxxxxxxxxxxxxxxxxx>
wrote
in message news:udSUdb88JHA.3836@xxxxxxxxxxxxxxxxxxxxxxx
Jac,

Jac schrieb:

USERENV(798.f64) 17:12:30:681 ImpersonateUser: Failed to
impersonate
user
with 5.
USERENV(798.f64) 17:12:30:697 GetUserDNSDomainName: Failed
to
impersonate
user
USERENV(494.4e0) 17:20:01:000 GetUserNameAndDomain Failed
to
impersonate
user
USERENV(494.4e0) 17:20:01:000 GetUserDNSDomainName: Domain
name
is
NT
Authority. No DNS domain name available.
USERENV(494.4e0) 17:21:01:015 ImpersonateUser: Failed to
impersonate
user
with 5.
Yet, Meinolf is right, that reads like it was a DNS problem.
What does the DNS configuration on the client look like? Is
it configured to use the internal DNS servers/Domain
Controllers?

Also, does that client machine have multiple NICs?

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german):
http://frickelsoft.net/cms/index.php?page=mailingliste
I thought the recommended setup was to point to a secondary first
to avoid the island problem

grtz




.

Relevant Pages

  • RE: Problem pinging IP and host names - Server 2003 DNS
    ... Connection-specific DNS Suffix. ... And here is one of the clients which I can not ping by IP or Hostname ... I went to my DNS server, deleted their A record, went to their ...
    (microsoft.public.windows.server.dns)
  • DNS not working
    ... DNS packet. ... The DNS server has encountered numerous run-time events. ... event log entries that precede this event. ... Connection-specific DNS Suffix. ...
    (microsoft.public.windows.server.sbs)
  • Re: dns over subnets
    ... Why must a domain member "see" the _msdcs zone of the root domain, ... > subnet as compared to another in this scenario. ... > Usually this is done by allowing access to a DNS server that can resolve ... > the zonehosted by a local DNS server by use of a zone transfer. ...
    (microsoft.public.windows.server.dns)
  • Re: applying computer settings takes a lot of time
    ... So in the moments the computer connected to another subnet to reach a DC/DNS server to authenticate and apply configuration settings, ... So is there a DNS server in there subnet available? ... Connection-specific DNS Suffix. ...
    (microsoft.public.windows.group_policy)
  • Re: 2008 DNS Issues
    ... so i dont believe that RAS is causing the DNS issue, the link to the MS KB ... Connection-specific DNS Suffix. ... The DNS server 192.168.0.1 is that your router? ...
    (microsoft.public.windows.server.dns)
Loading