Can't join domain using Cisco AnyConnect VPN

I got a cisco ASA5505 that uses anyconnect to create a vpn. I'm trying to get a remote laptop to join the domain. I have configured the vpn to start before login, so the computer boots up, the user hits ctrl+alt+del and the cisco vpn box comes up and asks them for the vpn credentials. They enter the credentials then it takes them to the normal login screen, where they are logging on to the local machine at the moment. I try to join the join the laptop to the domain by clccking on computer name on the laptop and clicking on change then entering the domain name. Then I get this error:
A domain controller for the domain *name* could not be contacted. Ensure that the domain name is typed correctly. If the domain name is correct click details for troubleshooting information. So I click details and get this:

The domain name *name* might be a NetBIOS domain name.  If this is the case, verify that the domain name is properly registered with WINS.

If you are certain that the name is not a NetBIOS domain name, then the following information can help you troubleshoot your DNS configuration.

The following error occurred when DNS was queried for the service location (SRV) resource record used to locate a domain controller for domain nrsc:

The error was: "DNS name does not exist."
(error code 0x0000232B RCODE_NAME_ERROR)

The query was for the SRV record for _ldap._tcp.dc._msdcs.*name*

Common causes of this error include the following:

- The DNS SRV record is not registered in DNS.

- One or more of the following zones do not include delegation to its child zone:

*name*
. (the root zone)

For information about correcting this problem, click Help.

I think the problem may be with the cisco router. Because when I connect to the vpn I get a valid ip address for the network I  am trying to connect to, but I can't ping the router itself or any computers by name, I can ping them by ip address though (except the router I can't ping that at all). Any suggestions?
FreeRangersAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

workgaCommented:
As far as I can see, your DNS does not get passed down to the vpn connection.  You might have to open the appropriate port for DNS on the router and make sure your dns settings are getting passed down to the computer.  You can try to add dns server ip to you vpn connection on the laptop to see if you can add the laptop to the domain.  IF that is successful you have to modify your router config to include that dns server.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
FreeRangersAuthor Commented:
Now I can't ping anything. which means I can't remote access the router, or any other machine on the domain. I can't really go to the physical location of the router as it is several hours away and in an un maned office right now. I s there a way I can fix it remotely?
0
Casey HermanCitrix EngineerCommented:
Were you able to ping before? Cisco generally kills all ICMP traffic to help prevent DoS attacks.

Try setting the DNS on the network interface of the client to the IP of your domain controller as the primary and the local internet or what have you as the secondary. This may get you past joining the domain. You should probably also statically assign the WINS server.
0
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

FreeRangersAuthor Commented:
I could ping other computers on the domain by ip address, but not by name, and could ping the router at all. Now I can't ping any computer on the domain (by IP address or name)
0
FreeRangersAuthor Commented:
I can't even ping google, but I can get internet. Setting the dns on the client didn't do anything.
0
FreeRangersAuthor Commented:
I can ping google now (just restarted the laptop) but still can't ping any domain computers, meaning can't get to the cisco router to fix whatever I broke.
0
FreeRangersAuthor Commented:
Is there any way to remotely fix the router? I was able to access it earlier, but then I (thought) I opened up the dns port as that may have solved my initial problem, but now I can't get access to any network computer.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Routers

From novice to tech pro — start learning today.