Is there a way to change the DNS order on a CiscoVPN client in Vista Enterprise SP1?

Posted on 2009-02-23
Medium Priority
Last Modified: 2012-05-06
Here is the issue we are having:
Our remote users use Vista Enterprise SP1 on Laptops and connect to our network via a Cisco VPN client connecting to a Pix 515.  We have never had an issue before, but now with Vista, it seems to override the DNS entries, putting their ISP DNS first.  This is usually not an issue either, except for some ISPs are now redirecting erroneous pages to a search engine instead of checking the next DNS entry.  Our VPN client does use DHCP to put in the correct corporate DNS, but when one of our servers are entered, the ISP DNS cannot find it and therefore redirects them to a search engine.
My question:  Is there a way to override this or have the client supercede the host DNS entries in order to put ours in the top of the order?

IPV6 is disabled in the clients already and we have considered using a hosts file, but would prefer a DNS fix instead of hosts entries.  This is critical that we resolve this as our remote sales people run across this problem in various hotel settings mainly.

I hope I have explained this correctly.
Question by:Timothy Kashin

Accepted Solution

jeffiepoo earned 1500 total points
ID: 23713427
When the VPN is installed on any machine, it will install the Deterministic Network Enhancer as a new "logical" connection. You may want to play around with this. To get there and see it, open "Network and Sharing Center" and click "manage my network connections" on the left pane. Your DNE should be another network entry titled "VPN something something". This would be the place to screw with it. I've never actually looked to see what settings it has, but it's possible it's set to use static addresses somewhere. Right click and go to properties and see what you can fool around with.

Hopefully this helped somewhat,


Author Closing Comment

by:Timothy Kashin
ID: 31550160
Thanks for the help, your answer partially helped us find the issue, but there was more to it than that when dealing with Vista, which unfortunately has proven to be a waste of time and money in the Corporate environment.  Thanks for your reply though =)

Featured Post

Vote for the Most Valuable Expert

It’s time to recognize experts that go above and beyond with helpful solutions and engagement on site. Choose from the top experts in the Hall of Fame or on the right rail of your favorite topic page. Look for the blue “Nominate” button on their profile to vote.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

OpenVPN is a great open source VPN server that is capable of providing quick and easy VPN access to your network on the cheap.  By default the software is configured to allow open access to your network.  But what if you want to restrict users to on…
How to set-up an On Demand, IPSec, Site to SIte, VPN from a Draytek Vigor Router to a Cyberoam UTM Appliance. A concise guide to the settings required on both devices
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question