Recommended Posts

I have created Windows VPN on a Win2k8 server, Outside our local network, i am able to connect to the VPN. Issue i am having is, once i connect to VPN i want to be able to remote into other Virtual Machines on the corp. network using machine names i.e abc:port, it shows an error saying remote desktop connection failed.

I am able to remote into virtual machines using public IP, as well as machine local IP (all virtual machines are configured using static IPs), also i am able to ping all the Virtual machines on the network. So it seems like system is not able to process requests based on machine names. which works fine when accessed locally.

Can anyone tell me what do i need to do regarding this?

Well how are you going to resolve a host name? abc, do you have a wins server? if not then since its not a fqdn (dns like abc.domain.tld) you would have to broadcast for it. You can not broadcast across segments.

So no hostname across a vpn rarely work unless your bridging?

So a few options, use DNS - if your talking w2k8 server - do you have a Domain(AD) then you would have to have DNS - use that to resolve your computers name. If you setup a search suffix for your domain.tld then sure you can use just hostname portion and the dns query will auto add the domain.tld part.

Setup Wins if you want and don't have AD with DNS. Or just setup a host file on your computer that has a listing off all your machines IP and names and then you can use the names to connect like

192.168.1.100 abc

192.168.1.101 dfg

192.168.1.203 xyz

etc.

so for example I run dns on my local network at home, local.lan - and I have my computes in dns - so when I vpn in I hand off this dns

ethernet adapter ovpn:

	   Connection-specific DNS Suffix  . : local.lan
	   Description . . . . . . . . . . . : TAP-Win32 Adapter V9
	   Physical Address. . . . . . . . . : 00-FF-79-1A-85-63
	   Dhcp Enabled. . . . . . . . . . . : Yes
	   Autoconfiguration Enabled . . . . : Yes
	   IP Address. . . . . . . . . . . . : 10.0.200.6
	   Subnet Mask . . . . . . . . . . . : 255.255.255.252
	   Default Gateway . . . . . . . . . :
	   DHCP Server . . . . . . . . . . . : 10.0.200.5
	   DNS Servers . . . . . . . . . . . : 192.168.1.253
	   Lease Obtained. . . . . . . . . . : Tuesday, November 06, 2012 3:11:53 PM
	   Lease Expires . . . . . . . . . . : Wednesday, November 06, 2013 3:11:53 PM

So I can resolve hosts in my network via their fqdn, and my search suffix of local.lan

D:\>ping i5-w7

Pinging i5-w7.local.lan [192.168.1.100] with 32 bytes of data:

Reply from 192.168.1.100: bytes=32 time=121ms TTL=127

Reply from 192.168.1.100: bytes=32 time=121ms TTL=127

Reply from 192.168.1.100: bytes=32 time=131ms TTL=127

Reply from 192.168.1.100: bytes=32 time=119ms TTL=127

Ping statistics for 192.168.1.100:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 119ms, Maximum = 131ms, Average = 123ms

The HOSTS file is here: C:\Windows\System32\drivers\etc\HOSTS

The file is a text file, just edit the text file and you should see something like this....

127.0.0.1 localhost

So, just add in the IP address and the name that you want to access it.

If I use localhost in my browser it goes directly to 127.0.0.1, this is how it works.

For example...

127.0.0.1 localhost

192.168.1.100 abcport

I would not suggest you setup AD just so you can use dns - you could always just fire up dns on your w2k8 box you don't have to setup AD for just simple dns.

Easier is just host file - above is the location. You will prob have problem editing it, you need to elevate your text editor to admin to be able to edit the file.

But if you were running AD, more than likely your machines would already be registering themselves in your DNS - so there would be nothing to do but use that dns server and domain suffix in your query from your remote box that vpn'd in.

"Enabling DNS in AD has taken take care of it."

This statement confuses me - you can not have AD without DNS. So there is no enabling it in AD, if you setup AD dns it is part of the setup and would be enabled from the git go.

Do you mean you enabled the DNS role and don't have AD running?

This topic is now closed to further replies.
  • Posts

    • Hello, It would appear so, according to https://finance.yahoo.com/news/how-to-hide-your-home-on-google-maps-apple-maps-204146687.html. Regards, Aryeh Goretsky      
    • Hello, The Nvidia Founders Edition 3080 video card is approximately six years old, correct? Have you looked into whether replacement fans are available for it? Perhaps replacing those will improve cooling, especially when combined with cleaning the card's heatsink and replacing the thermal interface materials. Regards, Aryeh Goretsky  
    • Hello, While ~104 GB of space may seem generous (at least compared to other e-readers which have 8-32GB), I feel at this price point the device should have a Micro SDXC card slot for expansion, particularly if it allows audio books to be installed and played. I hope to see more reviews of 6" phone-sized e-readers on Neowin in the future. It will be interesting to see how they compare. Regards, Aryeh Goretsky
    • Sandboxie Plus 1.17.8 / Classic 5.72.8 by Razvan Serea Run programs in a sandbox to prevent malware from making permanent changes to your PC. Sandboxie allows you to run your browser, or any other program, so that all changes that result from the usage are kept in a sandbox environment, which can then be deleted later. Sandboxie is a sandbox-based isolation software for 32- and 64-bit Windows NT-based operating systems. It is being developed by David Xanatos since it became open source, before that it was developed by Sophos (which acquired it from Invincea, which acquired it earlier from the original author Ronen Tzur). It creates a sandbox-like isolated operating environment in which applications can be run or installed without permanently modifying the local or mapped drive. An isolated virtual environment allows controlled testing of untrusted programs and web surfing. Sandboxie is available in two flavors Plus and Classic. Both have the same core components, this means they have the same level of security and compatibility. What's different is the user interface the Plus build has a modern Qt based UI which supports all new features that have been added since the project went open source. The Classic build has the old no longer developed MFC based UI, hence it lacks support for modern features, these features can however still be used when manually configured in the Sandboxie.ini. Sandboxie Plus 1.17.8 / Classic 5.72.8 release notes: Added added DisableCustomTitleOpt=[process,][y|n] to allow [#] sandboxie title markers on custom-titlebar windows (Delphi VCL, Qt, Electron) that were previously skipped to prevent DWM repaint CPU loops #5387 Changed updated bundled ImDisk driver to 3.0.2 #5419 Fixed fix Suppress logs for expected non-user SIDs #5422 SbieSvc.exe: SBIE2218/2219 error when run program as administrator #5417 fixed explorer.exe crashes in Application Compartment when Huorong Security is installed #5423 Download: Sandboxie Plus (64-bit) | 23.5 MB (Open Source) Download: Sandboxie Classic (64-bit) | 3.0 MB Links: Sandboxie Website | GitHub | ARM64 | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • Hello, Christian Maas' XVI32 is a nice (and very small) hex editor. Speaking of hex editors, many years ago a colleague and I who both worked at Tribal Voice managed to edit a copy of the company's PowWow instant messaging client to make it behave better now that all of its lookup servers and other server-side tech was gone.  The program didn't support NAT (RFC-3022 was introduced in January 2001, the same time Tribal Voice was shuttered), but it still worked okay if you manually set up port-forwarding on your router.  The server at http://powwow.jazy.net/ hosts a copy (usual warnings about downloading and running untrusted code from random internet servers apply). I occasionally use some tools like Funduc Software's Search and Replace and Application Mover when I need to make mass-edits to text-based files or move programs with a hard-coded installation directories, respectively.  When I need to figure out the exact LCD panel inside of a laptop, EnTech Taiwan's Monitor Asset Manager is my go-to tool for that purpose. JD Design's website (now hosted on github.io) has a number of interesting freeware and shareware utilities.  I used to use their TouchPro utility to set the file timestamps on software I was mastering to match its version number (e.g., version 3.00 of a program had all of its files dates set to 3:00AM, and so forth). Karenware has a number of interesting freeware utilities, too. Regards, Aryeh Goretsky  
  • Recent Achievements

    • Week One Done
      Jeroen Wilms earned a badge
      Week One Done
    • Week One Done
      rolfus earned a badge
      Week One Done
    • One Month Later
      Leroy Jethro Gibbs earned a badge
      One Month Later
    • Conversation Starter
      flexorcist earned a badge
      Conversation Starter
    • One Month Later
      AndreaB earned a badge
      One Month Later
  • Popular Contributors

    1. 1
      +primortal
      509
    2. 2
      +Edouard
      198
    3. 3
      PsYcHoKiLLa
      138
    4. 4
      ATLien_0
      90
    5. 5
      Steven P.
      82
  • Tell a friend

    Love Neowin? Tell a friend!