Re: Firewall client...

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Raphael Whitfield [MSFT] (a-chrwhi_at_online.microsoft.com)
Date: 03/12/04


Date: Fri, 12 Mar 2004 22:15:39 GMT

You might also try verifying that the DNS tab in the TCP/IP properties is
set the same as the other systems. Some items there do not push via DHCP.
Specifically, based upon your post, the 'Register this connection's
addresses in DNS' and 'Use this connection's DNS suffix in DNS
registration' should be the same as your other machines as well as any
suffixes being listed. If everything is the same, you might try manually
appending the DNS suffix for your local domain. I hope this information
helps.

Raphael Whitfield,

Microsoft Corporation

 

Get Secure! - www.microsoft.com/security

 

=====================================================

When responding to posts, please "Reply to Group" via

your newsreader so that others may learn and benefit

from your issue.

=====================================================

 

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>From: "Matthew Huynh \(MSFT\)" <mhuynh@online.microsoft.com>
>References: <OPROTw##DHA.808@TK2MSFTNGP12.phx.gbl>
<eX4HWu$#DHA.1792@TK2MSFTNGP12.phx.gbl>
<eGMHI4K$DHA.792@TK2MSFTNGP11.phx.gbl>
>Subject: Re: Firewall client...
>Date: Thu, 26 Feb 2004 14:57:34 -0800
>Lines: 103
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
>Message-ID: <eLKPhvL$DHA.4012@tk2msftngp13.phx.gbl>
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: 207.46.238.143
>Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
>Xref: cpmsftngxa06.phx.gbl microsoft.public.windows.server.sbs:45640
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Sorry, misunderstood your original comment about only one client. I though
>all 10 were having the issue.
>
>A couple of things to try:
>
>1. Verify that your DNS settings are correct on the "rogue client" - You
>can compare an ipconfig /all output from a client that works
>2. Verify that you don't get this behavior if you just disable the
firewall
>client - right click on the systray icon and select disable
>3. Verify that the LAT is being pushed down correctly to that client - Go
>to Documents and Settings\All Users\Application Data\Microsoft\Firewall
>Client directory and verify that msplat.txt show that you have the correct
>network
>
>
>
>--
>Matthew Huynh
>
>This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
>"Bill (nee Gizmo) Swan" <bill@nospam.firstresponseit.co.uk> wrote in
message
>news:eGMHI4K$DHA.792@TK2MSFTNGP11.phx.gbl...
>> Hi Matthew...Yes LAT is correct...on the default. Rogue pc gets DHCP
>> address, IP DNS Gateway etc.
>>
>> What was your possible thinking that it was the LAT ? All other nine pcs
>are
>> fine.
>>
>> Have seen that rogue pc is listed in DHCP server leases as just ' pcname
'
>> whereas others are listed as ' pcname.company.local ' ...hmmmm
>>
>> --
>> www.smallbizserver.net (2000 and 2003)
>>
>> microsoft.public.backoffice.smallbiz2000 (2000 NG)
>>
>> microsoft.public.windows.server.sbs (2003 NG)
>>
>>
>http://groups.google.com/groups?hl=en&safe=off&group=microsoft.public.backo
ffice.smallbiz2000
>>
>>
>http://groups.google.com/groups?hl=en&lr=lang_en&ie=UTF-8&safe=off&group=mi
crosoft.public.windows.server.sbs
>>
>> http://www.sbslinks.com/
>>
>> "Matthew Huynh (MSFT)" <mhuynh@online.microsoft.com> wrote in message
>> news:eX4HWu$%23DHA.1792@TK2MSFTNGP12.phx.gbl...
>> > Validate that you LAT is correctly setup in ISA. It should include the
>> > internal subnet that your clients are on.
>> >
>> > The default is:
>> > 192.168.16.0-192.168.16.255
>> >
>> > The clients on this network should have IPs of something like
>192.168.16.x
>> >
>> > --
>> > Matthew Huynh
>> >
>> > This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>> >
>> >
>> > "Bill (nee Gizmo) Swan" <bill@nospam.firstresponseit.co.uk> wrote in
>> message
>> > news:OPROTw%23%23DHA.808@TK2MSFTNGP12.phx.gbl...
>> > > Installed firewall client on 10 XPs..all fine except one !!
>> > >
>> > > When installed cant validate on domain, access internet or company
>> > > shares...remove it and all fine????
>> > >
>> > >
>> > >
>> > > --
>> > > www.smallbizserver.net (2000 and 2003)
>> > >
>> > > microsoft.public.backoffice.smallbiz2000 (2000 NG)
>> > >
>> > > microsoft.public.windows.server.sbs (2003 NG)
>> > >
>> > >
>> >
>>
>http://groups.google.com/groups?hl=en&safe=off&group=microsoft.public.backo
ffice.smallbiz2000
>> > >
>> > >
>> >
>>
>http://groups.google.com/groups?hl=en&lr=lang_en&ie=UTF-8&safe=off&group=mi
crosoft.public.windows.server.sbs
>> > >
>> > > http://www.sbslinks.com/
>> > >
>> > >
>> >
>> >
>>
>>
>
>
>



Relevant Pages

  • Re: DNS Error
    ... I only have 3, but it allows me to set an alternate DNS server to the router in case the server goes down, my clients will still have an internet connection. ... For a DHCP client, please make sure the Option 15 DNS domain name is ... Please make sure the primary DNS suffix for the computer is properly ... try to reproduce the issue and capture the network ...
    (microsoft.public.windows.server.sbs)
  • Re: Always dynamically update DNS A and PTR records
    ... i tryed the script its worked and register the client, with one diffrance, ... if add the primery DNS Suffix manully and just restart the DHCP service it ... configured DNS servers. ...
    (microsoft.public.windows.server.dns)
  • Re: Viewing companyweb page over VPN?
    ... So it sounds like the DNS suffix is different or possibly not specified on ... What OS is the client? ... If it's a NT/2000/XP client is the machine a member of the SBS ...
    (microsoft.public.windows.server.sbs)
  • Re: Client side DNS suffixes
    ... setting to append a dns suffix search list. ... On the client side, the GP takes effect. ... does not append the dns suffix domain3.corp.com. ... The way a delegation works is you would delegate a child domain name from ...
    (microsoft.public.windows.server.dns)
  • Re: Cannot request computer certificate.
    ... Windows Server 2003 SP1 ... >> and verify that you can get a computer/server certificate from it. ... >> Kerberos, or dns. ... >> List of NetBt transports currently bound to the Redir ...
    (microsoft.public.windows.server.security)