Recommended Posts

I own a small business and run Windows Server 2008 R2 and about 7-8 workstations. The problem I've run into recently is odd network behavior on my workstation. For instance, every morning I come in and there's an X through all my shared network drives (not mapped but set in my user profile on the server) when they worked perfectly the previous day. I have to reboot the computer in order to get them back. I also started having an issue where websites would not load until I hit reload in the browser a bunch of times. I solved this one by changing the DNS server addresses on my workstation. I also have developed a problem printing to network printers until a reboot.

Just for information, my server address is 192.168.10.2 and the default gateway is 192.168.10.1. All my workstations have static IP's, for instance my personal workstation is 192.168.10.40

What could possibly have changed to make my network so messed up? I've noticed this behavior on 2 other workstations. Do I need to change some setting on the server in Administrative Tools? I barely ever touch the server so I don't know what could have gone wrong.

Link to comment
https://www.neowin.net/forum/topic/1119406-server-domain-problems/
Share on other sites

Hmm sounds odd, so it has been working in the past without the issues and all of a sudden they've started to happen?

The first thing i'd check tbh is the time on the DC, then look at each machine and ensure the same time is there, as it sounds abit like a credential failure, which can occur if times are out, usually anymore than 5 mins is considered a big chance difference in Active Directory.

Report back your findings, I wouldn't want to say do this and do that if it has worked in the past without any modifications occuring, would make sense for this to happen if you/someone has been playing around.

Yeah all of a sudden. The only change I did do was upgrade AVG Business Edition to the latest version. I just checked the time on the DC and it's exactly the same as my workstation. Your line of think does seem to make sense since this literally happens over night. Is there something I should do to make sure my time is properly synchronized with the DC at all times?

"I solved this one by changing the DNS server addresses on my workstation."

What did you change it too? the ONLY dns that a member of a domain should point to is the AD dns, normally in small setup this is the one DC they have. If you are pointing to your isp, googledns, opendns, etc. on the workstation even if added as secondary then yeah your going to have nothing but grief with your AD.

googledns does not know anything about your AD. Clients need to talk to AD dns, AD dns then forwards to googledns, isp dns, etc. or looks up from roots directly. If you were having issues with looking up websites, this tells me you have something wrong setup in your AD dns.

"I solved this one by changing the DNS server addresses on my workstation."

What did you change it too? the ONLY dns that a member of a domain should point to is the AD dns, normally in small setup this is the one DC they have. If you are pointing to your isp, googledns, opendns, etc. on the workstation even if added as secondary then yeah your going to have nothing but grief with your AD.

googledns does not know anything about your AD. Clients need to talk to AD dns, AD dns then forwards to googledns, isp dns, etc. or looks up from roots directly. If you were having issues with looking up websites, this tells me you have something wrong setup in your AD dns.

The website loading errors got to be so annoying that I changed them to 4.2.2.1 and 4.2.2.2

I know what you're saying and for years I pointed it to the AD DC by using 192.168.10.1. I could change it back but would that have anything to do with these other issues?

Sorry you NEED to point to your AD for dns - maybe there is something wrong with it resolves outside domains slow. FIX IT!!

How do you resolve your AD records if your not usnig its DNS? 4.2.2.2 does not know about it for damn sure.

If your AD is having issues with resolve outside domains - then you Need to FIX that. And yes not pointing to your AD dns could cause all kinds of issues like not being able to auth to stuff, stuff being disconnected, not being able to log in or taking a LONG time to, etc. etc.

Having issue finding the MS article that lists it as one of the top mistakes, but here

http://mcpmag.com/ar...ur-network.aspx

10 DNS Errors That Will Kill Your Network

1. TCP/IP Configuration Points to Public DNS Servers

This is by far the most common DNS error. Each network interface has a set of TCP/IP settings that lists the DNS servers used by that interface.

If the TCP/IP settings for a member computer specify the IP address of a public DNS server?perhaps at an ISP or DNS vendor or the company?s public-facing name server?the TCP/IP resolver won?t find Service Locator (SRV) records that advertise domain controller services, LDAP, Kerberos and Global Catalog. Without these records, a member computer can?t authenticate and get the information it needs to operate in the domain. It then acts like a teenager who can?t get the car keys, growing sullen and exhibiting a variety of bad behaviors.

I pointed my workstation DNS servers to the DC and website loading problems started immediately. When I went back to the ones listed above, everything went back to normal.

I just don't know how there can be any "DNS errors" when my Domain has worked fine for 10 years.

you need to learn active directory and dns....

cliffs:

dns....setup forwarders in your ad dns to your dns servers that are not having issues. uncheck use root hints if no forwarders are available.

clients use the ad dns server for all lookups. also the ad server points to its ip in tcpip properties, not the loop back.

post-118098-0-15402700-1352921254.jpg

"I just don't know how there can be any "DNS errors" when my Domain has worked fine for 10 years."

Well where are you forwarding your non authoritative zone lookups too on your AD dns? As sc302 points out on your AD dns you can have it either use root hints or your isp dns or some other dns server.

FACT!!! - All members of AD NEED!!! and Require to ONLY use your AD for dns, if they point or have multiple entries to other outside dns, then your going to have issues with your AD, plain simple FACT!! The only dns that knows anything about your AD is your AD dns, googledns sure and the hell does not have your srv records, nor does 4.2.2.2, etc. So if you ask them for stuff about your AD, your going to get back nxdomain. This is going to cause you NOTHING but pain!!!

Point your clients to your AD dns, and then work out why your AD dns can not resolve google.com, neowin.net, etc.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • A few years ago walmart had the 512 models on clearance for $35. I bought 3 of them. I should have purchased more.
    • I'm fine with a little reasonable promotion of Edge, but the degree which they do it right now I consider extremely unreasonable. 
    • Microsoft AI boss no longer believes that AI will replace human workers by David Uzondu Mustafa Suleyman, the head of Microsoft AI, recently took back his statements concerning white-collar jobs that he gave to the Financial Times in an interview made back in February, where he claimed that AI would replace office workers within 12 to 18 months. On Monday's episode of The Verge's Decoder, Suleyman recast the technology as more like a helpmate than a tool designed to take over your job. He explained that smaller office duties will "increasingly become digitized, automated" as people generate more digital materials. During the discussion, Suleyman emphasized a "very important distinction" between "tasks" and "jobs" to clarify his previous claims. He argued that his earlier comments only referred to individual actions that people perform at their desks. Suleyman used to work for DeepMind, the research lab he co-founded in 2010 alongside Demis Hassabis and Shane Legg, before he left in 2022 to establish Inflection AI and build an empathetic digital assistant. Microsoft hired him in March 2024 to lead its newly formed "Microsoft AI" division, placing him in charge of consumer products like Copilot, Bing, and Edge. His February comments also detailed plans for Microsoft to achieve self-sufficiency with a $140 billion infrastructure budget to train frontier models, predicting that creating a customized AI will soon feel like creating a podcast or a new blog: The 41-year-old is not the only AI executive who's softened his "AI will replace you" stance. OpenAI's CEO, Sam Altman, last month used X to push back against employment panic by arguing that his startup builds tools to assist humans rather than build replacements. He had previously garnered backlash by suggesting that many modern office roles that AI might replace did not qualify as "real work" in the first place, at least when you compare desk jobs to physical, historical labor like farming.
    • Adobe Acrobat Reader DC 2026.001.21662 by Razvan Serea Adobe Acrobat Reader DC software is the free, trusted standard for viewing, printing, signing, and annotating PDFs. Its the only PDF viewer that can open and interact with all types of PDF content – including forms and multimedia. It’s connected to Adobe Document Cloud – so you can work with PDFs on computers and mobile devices. Adobe Document Cloud is a revolutionary, modern and efficient way to get work done with documents in the office, at home or on-the-go. At the heart of Document Cloud is the all-new Adobe Acrobat DC, which will take e-signatures mainstream by delivering free e-signing with every individual subscription. Document Cloud includes a set of integrated services that use a consistent online profile and personal document hub. With Adobe Document Cloud, people will be able to create, review, approve, sign and track documents whether on a desktop or mobile device. Businesses will be able to take advantage of Document Cloud for enterprise which provides enterprise-class document services that integrate into systems of record such as CRM, HCM, CLM, and CMS, adding speed, efficiency and transparency to getting business done with documents. Adobe Acrobat Reader DC new feature highlights: Work with PDFs from anywhere with the new, free Acrobat DC mobile app for Android or iOS. Select functionality is also available on Windows Phone. Use the new Fill & Sign tool in your desktop software to complete PDF forms fast with smart autofill. Download the free Adobe Fill & Sign mobile app to add the same option to your iPad or Android tablet device. Save money on ink and toner when printing from your Windows PC. Store and access files in Adobe Document Cloud with 5GB of free storage. Get instant access to recent files across desktop, web, and mobile devices with Mobile Link. Sync your Fill & Sign autofill collection across desktop, web, and iPad devices. Adobe PDF Pack premium features includes: Convert documents and images to PDF files. Use your mobile device camera to take a picture of a paper document or form and convert it to PDF. Turn PDFs into editable Microsoft Word, Excel, PowerPoint, or RTF files. Combine multiple files into a single PDF (web only). Get signatures from others with a complete e-signature service. Send, track, and confirm delivery of documents electronically instead of using fax or overnight services (tracking not available on mobile). Store and access files online with 20GB of storage. Download: Adobe Acrobat Reader DC 64-bit | 719.0 MB (Freeware) Link: Adobe Acrobat Reader DC Home Page | Release Notes | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • Meta will now use data from outside businesses to personalize AI responses by David Uzondu In an update that's rolling out globally (except in a handful of countries), Meta will use your data from outside businesses to personalize your AI responses and your primary feeds. Meta already utilizes your shopping activity to target ads, but the company now plans to expand this tracking to personalize other "parts of your experience" like feed algorithms and AI assistant chats. The company is replacing the two settings ("Your activity off Meta technologies" and "Activity from other businesses") that currently let you disconnect off-platform activity with a single, renamed setting called Activity from other businesses. If you don't want Meta to manipulate your feed and AI responses using your outside history, you can just turn the Activity from other businesses setting off in your account settings. This toggle resides within your Accounts Center, applying your choice to every connected profile. Turning this off will not stop companies from sending your data to Meta. The company will still collect your web interactions, but it only uses them to train products, while still accessing external accounts you connect. When The Verge spoke to Meta spokesperson Emil Vazquez, the representative said that this update will exclude several locations at launch, including the European region, the UK, Brazil, Thailand, South Africa, Turkey, South Korea, Ecuador, Nigeria, and Kenya. The new update comes at a time when the social media giant is recovering from a major PR disaster involving generative AI. Last week, there was a huge security issue on Instagram where attackers figured out a way to trick Meta AI into handing over account ownership (even if the victim had 2FA enabled). Some of the affected accounts include the dormant Obama White House profile, cosmetics brand Sephora, the Chief Master Sergeant of the Space Force, and security researcher Jane Manchun Wong. Internally, the company also had to scale back plans on its Model Capability Initiative (MCI), an employee-monitoring program designed to train corporate AI models by recording worker keystrokes and screen activity, after employees raised privacy concerns and complained about severe battery life drain.
  • Recent Achievements

    • One Year In
      Primer1st earned a badge
      One Year In
    • Experienced
      JayZJay went up a rank
      Experienced
    • Reacting Well
      Sir_Timbit earned a badge
      Reacting Well
    • Week One Done
      rubentuben8 earned a badge
      Week One Done
    • Week One Done
      ARaclen earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      512
    2. 2
      PsYcHoKiLLa
      229
    3. 3
      Edouard
      134
    4. 4
      ATLien_0
      87
    5. 5
      Steven P.
      80
  • Tell a friend

    Love Neowin? Tell a friend!