Recommended Posts

I have created Windows VPN on a Win2k8 server, Outside our local network, i am able to connect to the VPN. Issue i am having is, once i connect to VPN i want to be able to remote into other Virtual Machines on the corp. network using machine names i.e abc:port, it shows an error saying remote desktop connection failed.

I am able to remote into virtual machines using public IP, as well as machine local IP (all virtual machines are configured using static IPs), also i am able to ping all the Virtual machines on the network. So it seems like system is not able to process requests based on machine names. which works fine when accessed locally.

Can anyone tell me what do i need to do regarding this?

Well how are you going to resolve a host name? abc, do you have a wins server? if not then since its not a fqdn (dns like abc.domain.tld) you would have to broadcast for it. You can not broadcast across segments.

So no hostname across a vpn rarely work unless your bridging?

So a few options, use DNS - if your talking w2k8 server - do you have a Domain(AD) then you would have to have DNS - use that to resolve your computers name. If you setup a search suffix for your domain.tld then sure you can use just hostname portion and the dns query will auto add the domain.tld part.

Setup Wins if you want and don't have AD with DNS. Or just setup a host file on your computer that has a listing off all your machines IP and names and then you can use the names to connect like

192.168.1.100 abc

192.168.1.101 dfg

192.168.1.203 xyz

etc.

so for example I run dns on my local network at home, local.lan - and I have my computes in dns - so when I vpn in I hand off this dns

ethernet adapter ovpn:

	   Connection-specific DNS Suffix  . : local.lan
	   Description . . . . . . . . . . . : TAP-Win32 Adapter V9
	   Physical Address. . . . . . . . . : 00-FF-79-1A-85-63
	   Dhcp Enabled. . . . . . . . . . . : Yes
	   Autoconfiguration Enabled . . . . : Yes
	   IP Address. . . . . . . . . . . . : 10.0.200.6
	   Subnet Mask . . . . . . . . . . . : 255.255.255.252
	   Default Gateway . . . . . . . . . :
	   DHCP Server . . . . . . . . . . . : 10.0.200.5
	   DNS Servers . . . . . . . . . . . : 192.168.1.253
	   Lease Obtained. . . . . . . . . . : Tuesday, November 06, 2012 3:11:53 PM
	   Lease Expires . . . . . . . . . . : Wednesday, November 06, 2013 3:11:53 PM

So I can resolve hosts in my network via their fqdn, and my search suffix of local.lan

D:\>ping i5-w7

Pinging i5-w7.local.lan [192.168.1.100] with 32 bytes of data:

Reply from 192.168.1.100: bytes=32 time=121ms TTL=127

Reply from 192.168.1.100: bytes=32 time=121ms TTL=127

Reply from 192.168.1.100: bytes=32 time=131ms TTL=127

Reply from 192.168.1.100: bytes=32 time=119ms TTL=127

Ping statistics for 192.168.1.100:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 119ms, Maximum = 131ms, Average = 123ms

The HOSTS file is here: C:\Windows\System32\drivers\etc\HOSTS

The file is a text file, just edit the text file and you should see something like this....

127.0.0.1 localhost

So, just add in the IP address and the name that you want to access it.

If I use localhost in my browser it goes directly to 127.0.0.1, this is how it works.

For example...

127.0.0.1 localhost

192.168.1.100 abcport

I would not suggest you setup AD just so you can use dns - you could always just fire up dns on your w2k8 box you don't have to setup AD for just simple dns.

Easier is just host file - above is the location. You will prob have problem editing it, you need to elevate your text editor to admin to be able to edit the file.

But if you were running AD, more than likely your machines would already be registering themselves in your DNS - so there would be nothing to do but use that dns server and domain suffix in your query from your remote box that vpn'd in.

"Enabling DNS in AD has taken take care of it."

This statement confuses me - you can not have AD without DNS. So there is no enabling it in AD, if you setup AD dns it is part of the setup and would be enabled from the git go.

Do you mean you enabled the DNS role and don't have AD running?

This topic is now closed to further replies.
  • Posts

    • Carol, Windows XP is still being used today only in a small capacity. It is still the best OS there is due to its backwards compatibility with other older software, the customization features, and friendly UI, and people often feel that upgrading to newer OSes is cost prohibitive in specialized Industries or developing countries, so the market share as of now is around 0.2%-0.3%
    • If I could, I would commemorate it the best way possible: Replacing old machines that are still running Windows XP with something more modern, stable and better.     Noone and nothing should be running Windows XP in 2026.
    • Google's new hand-wave reCAPTCHA can be bypassed with a stock photo by Ivan Jenic Image: Screenshot Google is testing a new reCAPTCHA method that asks you to wave at your camera to prove you're human. So, besides solving puzzles and reading distorted text, you can now use your computer’s camera to pass the verification test. When the hand gesture verification is triggered, your browser asks for camera access and prompts you to perform a simple gesture, like a wave or an open palm. Google says it records a short video of the movement and uses AI to extract 21 hand-knuckle coordinates to complete the verification process. The video is then immediately deleted, and Google swears it doesn't keep it. The process alone can be uncomfortable for people who wouldn’t want their biometric data, which hand scans technically qualify as, recorded. But it gets even more nuanced, as early testers discovered that the new hand-waving reCAPTCHA can be passed with a simple stock image. A user on X tested the new challenge using a stock image of a hand fed through OBS Virtual Camera, and it passed. I wanted to verify it, so I tried the same thing. It took me a few tries and a few stock images, but in the end, I was also able to pass the test. I simply had to readjust the stock image of a generic person waving inside OBS, and Google’s mechanism registered it as a legitimate hand gesture. Once again, it didn’t even have to be a video or an AI-generated hand animation. Given the simplicity of the process, the entire action can be automated in minutes. All it takes is a simple Python script to render the new reCAPTCHA method obsolete. And it doesn’t even have to be an AI bot, which is usually used for solving puzzles and other verification methods. The new reCAPTCHA method is still in its early phase, and Google will, hopefully, update its AI to at least reject still images. However, this incident, combined with users’ initial skepticism about Google’s practices regarding user data, likely won’t make too many people wave at the camera anytime soon.
    • 🤣🤣🤣🤣🤣 "to fund healthcare and tuition" 🤣🤣🤣🤣 Who do you think you are talking about, some COMMUNIST? We are better than them, doG bless Murica!!! p.s. I'm from a country where government does exactly that, i.e. not form US.
  • Recent Achievements

    • First Post
      carols23 earned a badge
      First Post
    • One Month Later
      Tom Willson earned a badge
      One Month Later
    • Apprentice
      Asgardi went up a rank
      Apprentice
    • One Month Later
      sunrisea2milk earned a badge
      One Month Later
    • Week One Done
      sunrisea2milk earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      495
    2. 2
      +Edouard
      262
    3. 3
      PsYcHoKiLLa
      151
    4. 4
      Steven P.
      92
    5. 5
      macoman
      67
  • Tell a friend

    Love Neowin? Tell a friend!