Recommended Posts

I have created Windows VPN on a Win2k8 server, Outside our local network, i am able to connect to the VPN. Issue i am having is, once i connect to VPN i want to be able to remote into other Virtual Machines on the corp. network using machine names i.e abc:port, it shows an error saying remote desktop connection failed.

I am able to remote into virtual machines using public IP, as well as machine local IP (all virtual machines are configured using static IPs), also i am able to ping all the Virtual machines on the network. So it seems like system is not able to process requests based on machine names. which works fine when accessed locally.

Can anyone tell me what do i need to do regarding this?

Well how are you going to resolve a host name? abc, do you have a wins server? if not then since its not a fqdn (dns like abc.domain.tld) you would have to broadcast for it. You can not broadcast across segments.

So no hostname across a vpn rarely work unless your bridging?

So a few options, use DNS - if your talking w2k8 server - do you have a Domain(AD) then you would have to have DNS - use that to resolve your computers name. If you setup a search suffix for your domain.tld then sure you can use just hostname portion and the dns query will auto add the domain.tld part.

Setup Wins if you want and don't have AD with DNS. Or just setup a host file on your computer that has a listing off all your machines IP and names and then you can use the names to connect like

192.168.1.100 abc

192.168.1.101 dfg

192.168.1.203 xyz

etc.

so for example I run dns on my local network at home, local.lan - and I have my computes in dns - so when I vpn in I hand off this dns

ethernet adapter ovpn:

	   Connection-specific DNS Suffix  . : local.lan
	   Description . . . . . . . . . . . : TAP-Win32 Adapter V9
	   Physical Address. . . . . . . . . : 00-FF-79-1A-85-63
	   Dhcp Enabled. . . . . . . . . . . : Yes
	   Autoconfiguration Enabled . . . . : Yes
	   IP Address. . . . . . . . . . . . : 10.0.200.6
	   Subnet Mask . . . . . . . . . . . : 255.255.255.252
	   Default Gateway . . . . . . . . . :
	   DHCP Server . . . . . . . . . . . : 10.0.200.5
	   DNS Servers . . . . . . . . . . . : 192.168.1.253
	   Lease Obtained. . . . . . . . . . : Tuesday, November 06, 2012 3:11:53 PM
	   Lease Expires . . . . . . . . . . : Wednesday, November 06, 2013 3:11:53 PM

So I can resolve hosts in my network via their fqdn, and my search suffix of local.lan

D:\>ping i5-w7

Pinging i5-w7.local.lan [192.168.1.100] with 32 bytes of data:

Reply from 192.168.1.100: bytes=32 time=121ms TTL=127

Reply from 192.168.1.100: bytes=32 time=121ms TTL=127

Reply from 192.168.1.100: bytes=32 time=131ms TTL=127

Reply from 192.168.1.100: bytes=32 time=119ms TTL=127

Ping statistics for 192.168.1.100:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 119ms, Maximum = 131ms, Average = 123ms

The HOSTS file is here: C:\Windows\System32\drivers\etc\HOSTS

The file is a text file, just edit the text file and you should see something like this....

127.0.0.1 localhost

So, just add in the IP address and the name that you want to access it.

If I use localhost in my browser it goes directly to 127.0.0.1, this is how it works.

For example...

127.0.0.1 localhost

192.168.1.100 abcport

I would not suggest you setup AD just so you can use dns - you could always just fire up dns on your w2k8 box you don't have to setup AD for just simple dns.

Easier is just host file - above is the location. You will prob have problem editing it, you need to elevate your text editor to admin to be able to edit the file.

But if you were running AD, more than likely your machines would already be registering themselves in your DNS - so there would be nothing to do but use that dns server and domain suffix in your query from your remote box that vpn'd in.

"Enabling DNS in AD has taken take care of it."

This statement confuses me - you can not have AD without DNS. So there is no enabling it in AD, if you setup AD dns it is part of the setup and would be enabled from the git go.

Do you mean you enabled the DNS role and don't have AD running?

This topic is now closed to further replies.
  • Posts

    • AMAZON needs to take total accountability for this.
    • Server Summit had a heap of announcements, ADCS changes are baller.
    • Nice, hope they *finally* fixed the issue with the NTFS driver where the system would completely brick during large file copies using the built in driver. It's been broken for years requiring me to use the older, slower, NTFS-3G FUSE driver.
    • Windows 11 KB5094126 BSODing, freezing, forcing BitLocker lockout, breaks OneDrive, and more by Sayan Sen Microsoft released Windows 11 KB5094126 and KB5093998 last week as the latest Patch Tuesday updates. Following that the company also published the accompanying dynamic updates under KB5094149, KB5095971, and KB5094156. While Microsoft has so far not acknowledged any major problems with the release, some users online are running into problems. These range from OneDrive and Dropbox access issues, BitLocker recovery lockouts, to blue screens and BSODs. The most common one seems to be happening with HP systems wherein affected users say they hit 0xc0430001 BSOD (blue screen of death) error code after the KB5094126 update. We wonder if this could be related to the recent bug we covered on HP devices wherein the ongoing Secure Boot certificate updates are leading to similar issues. While we are not certain, users affected by this issue likely need to ensure that the boot.stl file is included on the installation media (such as a USB installer or ISO), if the above-mentioned dynamic updates are deployed. If this file is missing, computers may fail to boot from the installation media and could display the error 0xc0430001. This STL file is used by Secure Boot to verify that the boot files are trusted, so it must match the same Windows version and system architecture. To ensure the file is included, Microsoft recommends using the Update WinPE script, which automatically updates the image and handles the required files. Alternatively, you can manually copy the boot.stl file from the Windows\Boot\EFI folder on a Windows device and place it in the matching folder on your installation media before deploying the updated image. Aside from blue screening some users also note their systems have been freezing following the update. This could be happening to Lenovo PCs specifically. In the case of the OneDrive and Dropbox access issues, a user figured out that there could be a conflict with UAC. He explained: "Okay, so I did some digging, and in our environment KB5094126 breaks OneDrive and Dropbox in Explorer. I went through all our GPOs and found out that the combination of disabling UAC and having my user being a local admin breaks OneDrive in Explorer. ... If I enable UAC again, then it works, even with KB5094126 still installed." Hopefully, Microsoft will look into these issues. Source: Microsoft forum (link1, link2, link3, link4), Reddit (link1, link2, link3, link4)
    • It is when it's a desktop in my house though for a PC that's lightly used and not really important when it is. If it was a laptop, it would be a different story. The real solution is varied and begins starting at post #22 in that thread.
  • Recent Achievements

    • Week One Done
      Jeroen Wilms earned a badge
      Week One Done
    • Week One Done
      rolfus earned a badge
      Week One Done
    • One Month Later
      Leroy Jethro Gibbs earned a badge
      One Month Later
    • Conversation Starter
      flexorcist earned a badge
      Conversation Starter
    • One Month Later
      AndreaB earned a badge
      One Month Later
  • Popular Contributors

    1. 1
      +primortal
      508
    2. 2
      +Edouard
      197
    3. 3
      PsYcHoKiLLa
      138
    4. 4
      ATLien_0
      90
    5. 5
      Steven P.
      80
  • Tell a friend

    Love Neowin? Tell a friend!