Solved

Workstation on a Domain can ping gatway, external DNS and resolve External names to IP address but can't browse Internet

Posted on 2006-10-19
12
204 Views
Last Modified: 2010-03-18
We have a Windows 2003 R2 domain with a DC, and 20 workstations. All workstations and servers can browse the internet but 1. The workstation in question can ping internal ip's and netbios names with sucess. It can also resolve external domain names to their appropriate ip addresses and can ping them either by ip or name (ie. www.google.com = 216.239.51.104). When the workstation logs on to the domain the user cannot get a browser to finish connecting, IE or Firefox report "connecting to www.google.com...." but never do.

I have tried changeing firefox's config to "network.dns.disableipv6" from false to true with no joy.

I have checked windows firewall (off) and proxy settings in both browsers (not set).

If I log in to the local machine (not thru the domain) both browsers work. So I am left with something in the profile maybe?????

I created a new user on the machine and logged on to the domain with new user to get a fresh new profile and still no joy!!

Any body?????

Anybody seen th
0
Comment
Question by:entre-tcv
12 Comments
 
LVL 63

Expert Comment

by:SysExpert
ID: 17767069
IS this user the newst in the Domain ?

Have you checked his effective rights  for Browser and Internet access ?

I hope this helps !
0
 

Author Comment

by:entre-tcv
ID: 17767237
Forgot to mention that all workstations are XP Pro SP2.

Problem exists whether workstation receives dynamic IP or static ip.

Have also changed TCP/IP properties on NIC from just the ip of the internal Domain controller only to the DC's IP plus the ISP's DNS servers as 2ndary and terciary (sp?) This also has no change.

SYSExpert: This user was migrated last from local to new domain using Windows XP "Files and Settings Transfer Wizard".

I have not checked effective right for browser as felt all in domain would have the same effective rights and all others can browse.

Other users were also migrated using FSTW....
0
 

Author Comment

by:entre-tcv
ID: 17767263
Why would being the newest in the domain make a difference?  
0
 
LVL 63

Expert Comment

by:SysExpert
ID: 17768690
Well, If he is the newst in the Domain, perhaps some default Profile settings were changed ad that is why only he is affected.

just something to think about.



0
 
LVL 66

Expert Comment

by:johnb6767
ID: 17770220
Any chance there could be a corrupt LSP in his Winsock?

netsh winsock reset

restores the winsock to default..

and even for giggles...

netsh firewall reset

well, you get the idea of that one.....

But a totally blown winsock wouldnt even allow name resolution period though I would think....May be wrong....
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 

Author Comment

by:entre-tcv
ID: 17771241
I tried the winsockfix earlier and couldn't see any difference.

I think it may be that something went awry during the FSTW process, after all it took several hours for the collection phase and wound up running over night. The we migrated the "profile" to the new domain user. The workstation connects fine when you log on to the local machine.

Would you expect to see that if there's a problem within the TCP/ip stack or Winsock?
0
 
LVL 63

Expert Comment

by:SysExpert
ID: 17773399
No, so that is why I think it is a profile issue.

0
 

Author Comment

by:entre-tcv
ID: 17774504
I tend to agree as the transfer took sooooooo long. I believe it may have some gremlims in it. I am in the process of running a full defrag on the "local machine" now and after that will remove everything that isnot essential. I will then try anoth FSTW run after lunch.

I will let you know how it goes.
0
 

Author Comment

by:entre-tcv
ID: 17796575
Ok. I went back and started to clean up the workstation in question by doing a defrag, running scandisk with fix option, deleting all docs and data from other (previous) users of the workstation, etc. Only problem was that by the time I finished re-running Files and Setttings Transfer Wizard again was that the workstation would not connect to web sites thru any browser even logged into the local machine!!

I decided my best bet was to move the primary drive to the second bay in the PC, install a new drive in the workstation and do a fresh OS install of XP Pro on the new drive. That way I would know that the problem wasn't in the OS or the hardware.

After that was done, I checked www connectivity(OK now), made the DC the only DNS entry (experience), re-authenticated the workstation to the domain, added the domain user, re-installed M$Office 2K3 as that user and imported the previously saved PST files and backup cd of the users old Data.

I still don't know what caused the browsers to stop working or how to fix it short of re-installing the OS.
0
 

Author Comment

by:entre-tcv
ID: 18115245
Never got a solution fron anyone and solved it myself.
No points awarded in this case. But thanks for the effort.

0
 
LVL 1

Accepted Solution

by:
Computer101 earned 0 total points
ID: 19253392
PAQed with points refunded (500)

Computer101
EE Admin
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

The Need In an Active Directory enviroment, the PDC emulator provide time synchronization for the domain. This is important since Active Directory uses Kerberos for authentication.  By default, if the time difference between systems is off by more …
We recently endured a series of broadcast storms that caused our ISP to shut us down for brief periods of time. After going through a multitude of tests, we determined that the issue was related to Intel NIC drivers on some new HP desktop computers …
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now