Avatar of nick3rd
nick3rdFlag for United States of America asked on

DNS Problem on windows 2008 Server

I have client who is switching from windows 2003 SBS to new servers and a new domain on windows server 2008, I have active Directory setup and DNS set up. I have migrated all the machines to the new domain. I have 2 machines out of 10 that are able to connect to the serves and use applications but are not able to browse or pinng or resolve anything past the firewall. I am pulling my hair out of my head on this. If I use the machines at a different location they can resolve websites and ping no problem. So I know it has to be DNS related just cannot figure out what and why only these too machines.
Windows Server 2008

Avatar of undefined
Last Comment
nick3rd

8/22/2022 - Mon
ittogo

If the machines are Vista, go to the network and sharing center and make sure that the networks are listed as private.  If they are public, you will not be able to see past the firewall.
ASKER
nick3rd

All the workstations on the domain are windows XP Professional SP2 or SP3
ittogo

Can you ping an outside address by IP address?  Try to connect to http://64.233.161.104/ (google) and see if it connects.  Also if you run ipconfig /all does it show a dns server?
All of life is about relationships, and EE has made a viirtual community a real community. It lifts everyone's boat
William Peck
ASKER
nick3rd

2 of the machines are unable to ping outside the firewall the other 8 are able to pring outside the firewall
if I run ipconfig /all I get IP address SN, gateway, DNS servers, shows the dhcp server., I can even use programs on the server I just cannot get outside the firewall on these 2 machines. one of the machines is a fresh install of windows XP
ittogo

First check that the gateway address is correct (address of the firewall).  You might try to put in a static address on the machine (IP address, gateway and dns servers) and see if that helps.  Also check the firewall is not blocking those addresses by either IP or by MAC address.
ASKER
nick3rd

Gateway is correct, it is the firewall. Static address doesnt help. The firewall is not blocking IP or MAC adddress
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
ittogo

Find the MAC address of the firewall from one of the working machines (arp -a <ip of firewall>) and make sure the other 2 machines are using the same MAC address.
ASKER
nick3rd

the results of arp -a  192.168.1.1 00-90-7f-1c-e9-e1 on working machine and 2 non working machines
ittogo

I'm starting to think the issue might be at the firewall.  From the filrewall can you ping the machines in question?  Have you rebooted the firewall to flush any bad arp cache or bad routes?
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes
ASKER
nick3rd

I can ping the machines in question from the firewall. The firewall has been rebooted. Remember I have 8 other machines that connect and browse without problem..
ittogo

Had another thought.  Have you installed a third party firewall software, usually included with the antivirus software?  If so try disabling it, along with the windows firewall to see if it is blocking access.
ASKER
nick3rd

I have windows firewall turned off, I have removed the anti-virus. I even reloaded the OS on one of the machines. II am beginning to think there is something wrong with the NIC.  The only thing that makes me think it is nit the NIC is that I get assigned IP address, SN Gateway, DNS1 & 2, and I can browse the Domain and use applications I just cannot browse to the outisde of the firewall and If I bring the machine home with me it accesses the internet no problem
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
ittogo

run route print and make sure that the 0.0.0.0 network is pointing to the gateway through the right interface.  
You can connect to internal machines - not likely the cable or the nic
If your firewall has the capability, try to log all packets and see if any packets are getting there from the machine in question.  It might also give you a clue why they are not getting through.

You can try changing out the nic just incase it is something really wierd.

I am sure you have tried this, but have you tried using a different IP address?
ASKER
nick3rd

Solved the problem.  Was a combinations of several things you suggested and I had already tried
7pm last night I systematically rebooted all the devices in the rack. I was getting some positive responses from the 2 machines in question. I so decided to turn everying off and let it sit for 30 minutes. I brought everything down the switches the routers, the servers the firewall everything. the rack sat  without power for 30 minutes then I systematically brouht the rack back online and the 2 machines in question worked. Thanks for your help.. sometime you need another head to bounce ideas off of. Thanks again i will be awarding you full points
ASKER CERTIFIED SOLUTION
ittogo

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
ASKER
nick3rd

Thanks for your Help..
This is the best money I have ever spent. I cannot not tell you how many times these folks have saved my bacon. I learn so much from the contributors.
rwheeler23