xendrome Posted May 18, 2015 Share Posted May 18, 2015 Ok, I have 2 brand new Dell Latitude 5550 laptops. One is used a Powerpoint/Presentation laptop and the other is used for digitally recording meetings. Similaraties between both. Running Windows 7 x64 On the same domain Up to date via the same WSUS Server Issue: After the digital recording laptop has say for an undertermined amount of time idle, with a user logged on or not logged on and locked. The system will produce the following symptoms. 1: Cannot remote desktop into system, gives error "Remote Desktop cannot verify the identity of the remote computer because there is a time or date difference between your computer and the remote computer. Make sure your computer's clock is set to the.... blah blah" 2: NETLOGON - This computer was not able to set up a secure session with a domain controller in domain ORANGECITY due to the following: There are currently no logon servers available to service the logon request. 3: GroupPolicy - The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly. 4: During this time, when it is failing, I can login locally, and I can still access any pre-mapped drives, but I am unable to ping or resolve anything via DNS even with NSLOOKUP. What I have tried that has had no change on issue. Fresh load of the OS Wired or Wireless connection, does not make a difference Dynamic IP and Static IP (runs as a static IP normally, same static IP previous laptop it replaced was using) Latest drivers, same as what the other laptop is running Checked DNS on both DCs, entries are fine. Disable IPV6 on both wired/wireless interfaces Checked GPO issued power management settings, same as other laptop and previous Checked time sync with DC, it is fine, time/date/timezone are all correct. What is installed besides just Windows and latest drivers: Microsoft Office 2007, same as other laptop Trendmicro Office Scan, same as other laptop Meraki (Cisco), same as other laptop Recording Software, was on previous laptop This device - http://amzn.com/B00B872ASY - No drivers installed, windows detected it on its own What solves it temporarly: Just a standard reboot At this time I have unplugged the external USB audio recording device and rebooted, going to let it sit. It's hard to troubleshoot since it can take up to 24 hours for it to start to display the issue after a reboot. If I think of any further details, I will post them. I am totally at a loss here. I did the fresh OS load Friday and came in to it today in it's broken state.Reboot fixed it. The above item (2) and (3) are the only symptoms in Event Viewer related to logs. Link to comment Share on other sites More sharing options...
xendrome Posted May 19, 2015 Author Share Posted May 19, 2015 Bump, removing the external USB audio device changed nothing. Link to comment Share on other sites More sharing options...
fusi0n Posted May 19, 2015 Share Posted May 19, 2015 Have you tired uninstalling Meraki (Cisco? Link to comment Share on other sites More sharing options...
+Cryton Subscriber² Posted May 19, 2015 Subscriber² Share Posted May 19, 2015 Do the two device happen to have the same MAC address? Link to comment Share on other sites More sharing options...
+BudMan MVC Posted May 19, 2015 MVC Share Posted May 19, 2015 "but I am unable to ping or resolve anything via DNS" So you can not ping your dns, or your saying stuff does not resolve via ping or nslookup? So what do you get for response with nslookup, and can you even ping your dns? What are you using for dns - please post ipconfig /all from the box when its working, and then when its not working. If you can ping your dns server by IP. But it does not answer dns queries via nslookup. Please verify that the mac address is correct for the dns server. so ping ip of dns server, then use arp -a does that mac match what the dns server is? If you can not even ping the dns. What do you show in arp ? Link to comment Share on other sites More sharing options...
xendrome Posted May 19, 2015 Author Share Posted May 19, 2015 Have you tired uninstalling Meraki (Cisco? I have not, I guess that's worth a shot, but it is installed on the 80 other workstations on the domain. Do the two device happen to have the same MAC address? Have not checked that yet, but wouldn't that affect two systems? I will check and verify to be safe and post back. "but I am unable to ping or resolve anything via DNS" So you can not ping your dns, or your saying stuff does not resolve via ping or nslookup? So what do you get for response with nslookup, and can you even ping your dns? What are you using for dns - please post ipconfig /all from the box when its working, and then when its not working. If you can ping your dns server by IP. But it does not answer dns queries via nslookup. Please verify that the mac address is correct for the dns server. so ping ip of dns server, then use arp -a does that mac match what the dns server is? If you can not even ping the dns. What do you show in arp ? No I can ping the DNS servers, but I cannot resolve anything on system unless it was previously cached. DNS is two internal MS AD DNS servers, 172.16.50.6 and 172.16.50.5. I will have to check the ARP table using arp -a once it starts doing it again, probably first thing in the morning. Link to comment Share on other sites More sharing options...
fusi0n Posted May 19, 2015 Share Posted May 19, 2015 I have not, I guess that's worth a shot, but it is installed on the 80 other workstations on the domain. I've seen Meriki cause weird issues like this.. Link to comment Share on other sites More sharing options...
xendrome Posted May 19, 2015 Author Share Posted May 19, 2015 Now this is interesting, from one of the main AD DC/DNS servers, I do see 2 entries for the same MAC using arp -a 169.254.206.255 34-e6-d7-1b-c1-9a dynamic 172.16.50.149 34-e6-d7-1b-c1-9a dynamic What could be pushing a 169.254 address to the DC/DNS?, Could that even be the problem? Link to comment Share on other sites More sharing options...
fusi0n Posted May 19, 2015 Share Posted May 19, 2015 Now this is interesting, from one of the main AD DC/DNS servers, I do see 2 entries for the same MAC using arp -a 169.254.206.255 34-e6-d7-1b-c1-9a dynamic 172.16.50.149 34-e6-d7-1b-c1-9a dynamic What could be pushing a 169.254 address to the DC/DNS?, Could that even be the problem? This is crazy.. But have you checked the DHCP server and see if there is any reservations setup? Link to comment Share on other sites More sharing options...
xendrome Posted May 19, 2015 Author Share Posted May 19, 2015 This is crazy.. But have you checked the DHCP server and see if there is any reservations setup? No reservations on the scope, and the client is using a static IP Link to comment Share on other sites More sharing options...
xendrome Posted May 19, 2015 Author Share Posted May 19, 2015 There are a few others in arp -a from the main DC that come back like that, but only 2 can I identify as workstations that match anything else. 169.254.45.7 98-90-96-b4-00-85 dynamic 169.254.100.231 98-90-96-b8-24-ac dynamic 169.254.116.227 30-59-b7-88-ae-58 dynamic 169.254.134.243 18-03-73-46-cd-59 dynamic - Another workstation which has a DHCP address on 172.16.50.X scope 169.254.182.247 90-b1-1c-61-21-a2 dynamic 169.254.206.255 34-e6-d7-1b-c1-9a dynamic - Client in question 169.254.221.16 78-52-1a-37-e8-66 dynamic I've seen Meriki cause weird issues like this.. Just uninstalled the Meraki client, worth a shot. fusi0n 1 Share Link to comment Share on other sites More sharing options...
xendrome Posted May 19, 2015 Author Share Posted May 19, 2015 One thing of note, the system's static IP is the same as the previous systems IP that it replaced. However all DNS entries in both DC/DNSs show the correct DNS name for the client. I am going to change the IP to a previously unused address of 172.16.50.144, which has been unoccupied for years and do a ipconfig /registerdns and then verify everything updates. fusi0n 1 Share Link to comment Share on other sites More sharing options...
xendrome Posted May 19, 2015 Author Share Posted May 19, 2015 BudMan any benefit or problem with clearing the ARP cache on the main Domain Controller, none of those 169.x.x.x addresses show in the other Domain Controller. Link to comment Share on other sites More sharing options...
sc302 Veteran Posted May 19, 2015 Veteran Share Posted May 19, 2015 no clearing the arp cache will not cause issues, it will just rebuild it. I can take a look and see if I see anything if you want. Can look at tomorrow sometime. shoot me over teamviewer creds and I would be happy to poke around (it will be a nice break from doing paper work). Link to comment Share on other sites More sharing options...
xendrome Posted May 19, 2015 Author Share Posted May 19, 2015 no clearing the arp cache will not cause issues, it will just rebuild it. I can take a look and see if I see anything if you want. Can look at tomorrow sometime. shoot me over teamviewer creds and I would be happy to poke around (it will be a nice break from doing paper work). Well I cleared the ARP on that server and so far all of the entries are normal. I'd let you take a look but I am limited by CJIS/FBI restrictions and I've have to do a vendor processing of you with a background check and Livescan finger printing just to allow you in. So we'll have to see what happens via the forum and if any of these changes make a difference in the morning, Link to comment Share on other sites More sharing options...
xendrome Posted May 20, 2015 Author Share Posted May 20, 2015 As of this morning after clearing the ARP cache on that one DC, the client is not generating any netlogon/group policy events and all seems normal. I am going to let it sit another day until i deem it solved. fusi0n 1 Share Link to comment Share on other sites More sharing options...
+BudMan MVC Posted May 20, 2015 MVC Share Posted May 20, 2015 but arp cache is very short anyway.. Clearly it might of fixed the problem for a short period, but if you have an issue with the APIPA addresses - that is what 169.254 address are, I would think that would just come back. Devices will give themselves APIPA addresses when set for dhcp and don't get a lease. I would of been curious to see the output of ipconfig /all when you had the problem on the workstation. fusi0n 1 Share Link to comment Share on other sites More sharing options...
xendrome Posted May 20, 2015 Author Share Posted May 20, 2015 but arp cache is very short anyway.. Clearly it might of fixed the problem for a short period, but if you have an issue with the APIPA addresses - that is what 169.254 address are, I would think that would just come back. Devices will give themselves APIPA addresses when set for dhcp and don't get a lease. I would of been curious to see the output of ipconfig /all when you had the problem on the workstation. If it crops back up again I will get a ipconfig /all when it is happening, along with a arp -a from both the workstation and both DC/DNS servers. Link to comment Share on other sites More sharing options...
xendrome Posted May 21, 2015 Author Share Posted May 21, 2015 Well it has begun again this morning. Last Changes: Meraki was uninstalled ARP cache was cleared on both DC/DNS servers If I try to remote into the system right now from my desktop, I get: "Remote Desktop cannot verify the identity of the remote computer because there is a time or date difference between your computer and the remote computer. Make sure your computer's clock is set to the.... blah blah" Even though the time/date and timezones are identical, they sync to the DCs I can ping the DNS name of the laptop from my workstation, it resolves and replies. The mapped drives on the laptop still work, I can access them. I cannot access any other DNS names in Windows Explorer \\computername it fails with a name error. I also cannot access any DNS names via Chrome or IE. I can do NSLOOKUP and successfully resolve computer names and it defaults to the primary DC/DNS server for lookups. IPCONFIG from Laptop with Issue: Windows IP Configuration Host Name . . . . . . . . . . . . : CLERKS-RECORD Primary Dns Suffix . . . . . . . : <removed for privacy but correct FQDN> Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : <removed for privacy but correct FQDN> Ethernet adapter Bluetooth Network Connection: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Bluetooth Device (Personal Area Network) Physical Address. . . . . . . . . : 9C-D2-1E-D5-38-26 DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes Wireless LAN adapter Wireless Network Connection 3: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Microsoft Virtual WiFi Miniport Adapter #2 Physical Address. . . . . . . . . : 3E-D2-1E-D5-38-25 DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes Wireless LAN adapter Wireless Network Connection 2: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Microsoft Virtual WiFi Miniport Adapter Physical Address. . . . . . . . . : 2E-D2-1E-D5-38-25 DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes Wireless LAN adapter Wireless Network Connection: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Dell Wireless 1707 802.11b/g/n (2.4GHZ) Physical Address. . . . . . . . . : 9C-D2-1E-D5-38-25 DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Intel(R) Ethernet Connection (3) I218-LM Physical Address. . . . . . . . . : 34-E6-D7-1B-C1-9A DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes Link-local IPv6 Address . . . . . : fe80::412a:a978:a366:6d95%11(Preferred) IPv4 Address. . . . . . . . . . . : 172.16.50.144(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : fe80::c2ea:e4ff:fe57:5304%11 172.16.50.254 DNS Servers . . . . . . . . . . . : 172.16.50.6 172.16.50.5 NetBIOS over Tcpip. . . . . . . . : Enabled Tunnel adapter isatap.{C814AE50-E2E6-4CDC-AB63-20E816D4EA1D}: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Microsoft ISATAP Adapter Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes Tunnel adapter isatap.{F0FE616E-A22A-4770-AD8D-C5B1F8D6795F}: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2 Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes Tunnel adapter isatap.{0AEA2487-FB41-4C00-9B78-59B736A64853}: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Microsoft ISATAP Adapter #3 Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes Tunnel adapter isatap.{0C9FD2E2-968B-43C8-A18F-04C64D678648}: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Microsoft ISATAP Adapter #4 Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes Tunnel adapter isatap.{4F325E36-023D-4C56-9309-C7CF2E7AAC45}: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Microsoft ISATAP Adapter #5 Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes ARP -A from Laptop with issue Interface: 172.16.50.144 --- 0xb Internet Address Physical Address Type 172.16.50.5 78-2b-cb-0d-82-91 dynamic 172.16.50.6 78-2b-cb-0d-82-79 dynamic 172.16.50.16 b0-83-fe-c6-13-8c dynamic 172.16.50.24 98-90-96-b5-52-0d dynamic 172.16.50.26 4c-bb-58-6e-2e-d0 dynamic 172.16.50.29 98-90-96-b3-fa-b6 dynamic 172.16.50.37 80-be-05-9c-76-7a dynamic 172.16.50.52 98-90-96-b4-02-03 dynamic 172.16.50.53 18-03-73-49-27-01 dynamic 172.16.50.210 18-03-73-49-24-2f dynamic 172.16.50.254 c0-ea-e4-57-53-04 dynamic 172.16.50.255 ff-ff-ff-ff-ff-ff static 224.0.0.22 01-00-5e-00-00-16 static 224.0.0.252 01-00-5e-00-00-fc static ARP -a from main DC/DNS 172.16.50.6 Interface: 172.16.50.6 --- 0xf Internet Address Physical Address Type 172.16.50.4 44-a8-42-05-b4-0e dynamic 172.16.50.5 78-2b-cb-0d-82-91 dynamic 172.16.50.7 00-11-32-25-fb-37 dynamic 172.16.50.8 00-03-ea-0a-17-2b dynamic 172.16.50.11 d4-ae-52-89-ad-0f dynamic 172.16.50.16 b0-83-fe-c6-13-8c dynamic 172.16.50.17 b0-83-fe-c5-3c-14 dynamic 172.16.50.21 18-03-73-46-da-46 dynamic 172.16.50.22 00-50-c2-de-c6-e9 dynamic 172.16.50.23 98-90-96-b3-9a-6a dynamic 172.16.50.24 98-90-96-b5-52-0d dynamic 172.16.50.25 98-90-96-b8-78-fa dynamic 172.16.50.26 4c-bb-58-6e-2e-d0 dynamic 172.16.50.27 00-05-b9-04-20-58 dynamic 172.16.50.28 f8-b1-56-dd-f7-33 dynamic 172.16.50.29 98-90-96-b3-fa-b6 dynamic 172.16.50.30 18-03-73-49-26-5d dynamic 172.16.50.31 18-03-73-49-2a-71 dynamic 172.16.50.32 98-90-96-a5-8e-88 dynamic 172.16.50.33 98-90-96-b3-6c-2a dynamic 172.16.50.34 00-13-20-52-db-e1 dynamic 172.16.50.35 98-90-96-b3-bc-b0 dynamic 172.16.50.36 b8-ca-3a-a4-1c-1a dynamic 172.16.50.37 80-be-05-9c-76-7a dynamic 172.16.50.38 28-98-7b-d2-67-1d dynamic 172.16.50.39 00-25-64-d1-82-f9 dynamic 172.16.50.40 00-25-64-d1-88-dd dynamic 172.16.50.41 98-90-96-b5-e1-b1 dynamic 172.16.50.42 18-03-73-46-cd-6b dynamic 172.16.50.43 b8-ca-3a-73-05-11 dynamic 172.16.50.44 30-8c-fb-46-3f-e7 dynamic 172.16.50.45 b8-ca-3a-73-04-b7 dynamic 172.16.50.46 98-90-96-b8-29-58 dynamic 172.16.50.47 84-2b-2b-b4-b0-86 dynamic 172.16.50.48 98-90-96-b8-95-3a dynamic 172.16.50.49 cc-95-d7-73-35-da dynamic 172.16.50.50 18-03-73-49-18-fd dynamic 172.16.50.52 98-90-96-b4-02-03 dynamic 172.16.50.53 18-03-73-49-27-01 dynamic 172.16.50.54 80-1f-02-9e-29-52 dynamic 172.16.50.55 18-03-73-47-5a-39 dynamic 172.16.50.56 90-b1-1c-94-b9-16 dynamic 172.16.50.57 c0-ea-e4-57-53-04 dynamic 172.16.50.58 c0-ea-e4-57-53-04 dynamic 172.16.50.62 00-10-60-e1-02-f8 dynamic 172.16.50.64 00-23-ae-6b-b0-a4 dynamic 172.16.50.65 00-25-64-d1-66-60 dynamic 172.16.50.68 90-b1-1c-61-21-a2 dynamic 172.16.50.70 00-25-64-d1-88-70 dynamic 172.16.50.71 00-13-20-e9-f2-0e dynamic 172.16.50.73 78-e4-00-07-a9-18 dynamic 172.16.50.76 00-25-64-d1-86-8a dynamic 172.16.50.82 00-25-64-d1-86-9c dynamic 172.16.50.93 18-03-73-c2-e3-36 dynamic 172.16.50.109 b8-ca-3a-72-fe-05 dynamic 172.16.50.110 18-03-73-49-27-3c dynamic 172.16.50.111 00-25-64-d1-86-ad dynamic 172.16.50.112 18-03-73-49-22-76 dynamic 172.16.50.113 90-b1-1c-f9-49-95 dynamic 172.16.50.114 00-25-64-d1-66-2a dynamic 172.16.50.115 b8-ca-3a-73-ca-b3 dynamic 172.16.50.116 f8-b1-56-de-aa-5a dynamic 172.16.50.119 98-90-96-b8-2c-dd dynamic 172.16.50.139 00-23-63-26-75-a5 dynamic 172.16.50.140 00-23-63-24-35-bd dynamic 172.16.50.143 00-14-22-fa-a0-a1 dynamic 172.16.50.144 34-e6-d7-1b-c1-9a dynamic 172.16.50.145 00-25-64-d1-65-e0 dynamic 172.16.50.146 00-19-b9-30-09-af dynamic 172.16.50.148 00-18-8b-29-3f-d1 dynamic 172.16.50.195 30-05-5c-5c-9b-e3 dynamic 172.16.50.196 00-20-6b-8d-89-44 dynamic 172.16.50.197 00-20-6b-8e-e6-4b dynamic 172.16.50.198 00-20-6b-69-b2-24 dynamic 172.16.50.199 00-20-6b-8d-77-11 dynamic 172.16.50.200 30-05-5c-0d-b4-b4 dynamic 172.16.50.202 30-05-5c-07-58-ce dynamic 172.16.50.203 b4-99-ba-dc-75-d1 dynamic 172.16.50.205 00-20-6b-62-da-28 dynamic 172.16.50.206 30-05-5c-2f-e5-88 dynamic 172.16.50.207 00-20-6b-8c-4c-74 dynamic 172.16.50.208 00-20-6b-80-23-b8 dynamic 172.16.50.209 30-0e-d5-bd-87-f2 dynamic 172.16.50.210 18-03-73-49-24-2f dynamic 172.16.50.211 84-2b-2b-b4-ad-21 dynamic 172.16.50.212 98-90-96-b8-24-ac dynamic 172.16.50.213 98-90-96-b5-e3-51 dynamic 172.16.50.214 90-b1-1c-9e-e3-7f dynamic 172.16.50.215 f8-b1-56-de-84-b8 dynamic 172.16.50.216 f8-b1-56-de-3f-52 dynamic 172.16.50.218 18-03-73-49-2a-cb dynamic 172.16.50.219 18-03-73-49-1e-dd dynamic 172.16.50.220 84-2b-2b-b4-a8-fa dynamic 172.16.50.221 98-90-96-b4-00-85 dynamic 172.16.50.222 f8-b1-56-de-b2-4f dynamic 172.16.50.224 5c-f9-dd-77-01-37 dynamic 172.16.50.225 98-90-96-b7-ad-d4 dynamic 172.16.50.227 f8-b1-56-de-2e-48 dynamic 172.16.50.228 00-25-64-d7-1a-96 dynamic 172.16.50.229 00-50-fc-3c-04-1b dynamic 172.16.50.230 f8-b1-56-de-45-32 dynamic 172.16.50.231 00-26-5e-44-fa-12 dynamic 172.16.50.232 00-18-ae-46-11-fd dynamic 172.16.50.233 18-03-73-46-cd-59 dynamic 172.16.50.234 d0-ff-50-88-bc-fa dynamic 172.16.50.235 d0-ff-50-89-dc-c3 dynamic 172.16.50.236 98-90-96-b5-e6-55 dynamic 172.16.50.251 c0-ea-e4-57-53-04 dynamic 172.16.50.254 c0-ea-e4-57-53-04 dynamic 172.16.50.255 ff-ff-ff-ff-ff-ff static 224.0.0.22 01-00-5e-00-00-16 static 224.0.0.252 01-00-5e-00-00-fc static 239.255.255.250 01-00-5e-7f-ff-fa static 255.255.255.255 ff-ff-ff-ff-ff-ff static Link to comment Share on other sites More sharing options...
Haggis Veteran Posted May 21, 2015 Veteran Share Posted May 21, 2015 There was an issue like this at my work and it was to do with the DHCP scope i had no part in it so excuse my ignorance what it turned out to be was a device on the VLAN that had the same IP as the VLAn itself If you set the laptop to DHCP does it work fine then? or change its ip to something else Link to comment Share on other sites More sharing options...
xendrome Posted May 21, 2015 Author Share Posted May 21, 2015 There was an issue like this at my work and it was to do with the DHCP scope i had no part in it so excuse my ignorance what it turned out to be was a device on the VLAN that had the same IP as the VLAn itself If you set the laptop to DHCP does it work fine then? or change its ip to something else The original IP was 172.16.50.149 and I've since changed it to 172.16.50.144, I have not tried DHCP yet, Simply because the system runs a streaming server used once in awhile and it has a firewall rule/NAT policy pointed to that IP to allow some streaming outbound of our Firewall. I suppose that is worth a shot though. I am switching it to DHCP now to test. We do not have any VLANs setup. Link to comment Share on other sites More sharing options...
+BudMan MVC Posted May 21, 2015 MVC Share Posted May 21, 2015 You say the times are correct, but what about the timezones? A simple w32tm /montior should show you what the time difference is to the DC, etc. And for gawd sake clean up that nonsense with teredo and 6to4 isatap -- clearly your not using them.. Are you using ipv6 at.. disable it then. Link to comment Share on other sites More sharing options...
xendrome Posted May 21, 2015 Author Share Posted May 21, 2015 You say the times are correct, but what about the timezones? A simple w32tm /montior should show you what the time difference is to the DC, etc. And for gawd sake clean up that nonsense with teredo and 6to4 -- clearly your not using them.. Are you using ipv6 at.. disable it then. Yep just checked them to confirm time zones match. Results of w32tm /monitor SRV-DC01.<FQDN removed> *** PDC ***[172.16.50.6:123]: ICMP: 0ms delay NTP: +0.0000000s offset from SRV-DC01.<FQDN removed> RefID: 'LOCL' [0x4C434F4C] Stratum: 1 SRV-DC02.<FQDN removed>[172.16.50.5:123]: ICMP: 0ms delay NTP: -0.0161567s offset from SRV-DC01.<FQDN removed> RefID: SRV-DC01.<FQDN removed> [172.16.50.6] Stratum: 2 Warning: Reverse name resolution is best effort. It may not be correct since RefID field in time packets differs across NTP implementations and may not be using IP addresses. Link to comment Share on other sites More sharing options...
sc302 Veteran Posted May 21, 2015 Veteran Share Posted May 21, 2015 have you tried a different port on the switch? have you tried resetting the switch or restarting the switch? do you have any event logs?have you tried a different switch? if it's only the one computer it could be anything that the computer is connected to or it could be the network card. Link to comment Share on other sites More sharing options...
xendrome Posted May 21, 2015 Author Share Posted May 21, 2015 BTW thank you all for taking the time to respond with suggestions, because this is driving me crazy. Link to comment Share on other sites More sharing options...
Recommended Posts