Correct way to setup Active Directory in this Environment
Posted on 2004-03-28
Here is the setup i just did for a business.
DSL > Pix 501 > Switches > AS400 Server & Win2k3 SBS server
The Pix i believe is giving out the DHCP IPs. I set the win2k3 machine to a static ip of 192.168.5.3 (192.168.5.x is everything else) - i'm coming into this network blind, so i didn't configure the Pix or the AS400. They have a domain name they use, but it's not hosted by them nor is their email. So when i was setting up active directory i didn't do companyname.com i did companyname and AD said i need to install DNS Server. So i did all this, installed the DNS server and installed the domain with just companyname. Well, the computers now joined to the domain seem to work sometimes and not work sometimes with the given IPs from the Pix. when is ay work - sometimes they flip out and say they can't find the domain, when other times they can find it just fine. For instance i have "password must be changed xxxxx" and so when i go to login with one of the XP machines it says "password must be changed" as soon as i hit enter, so i type in my old password and the 2 new ones and i hit enter and it takes forever and then times out saying the domain is unavailable... it's really strange? I kind of blew it off and was able to map network drives on a few of the computers, but after i mapped them, it couldn't get to them b/c it couldn't authenticate b/c the domain was unavailable again... it's really strange...
A possible solution i found is this: to set the DNS server IPs on the client machines to point to the local IP of the server... however, this defeats the freedom of DHCP, but in initial trials it works, and it makes sense why it works, however this can't be the only way to do this. Another possible solution i had was to configure the PIX to throw out the serverIP for the DNS DHCP, however, i don't want their internet to rely on a win2k3 server to be up and running...
So basically, how do you configure a "local/inhouse" domain without having a ".com" or ".net" ... I have access to my own webhosting company's DNS so i could make a companyname.mydomain.com and point it to their net IP and map that then through the Pix, however, there has to be a better solution.
I have to go back otu tomorrow with a solution, so any help would be great.