Block a computer with same domain name from rest of domain

Posted on 2010-09-08
Last Modified: 2012-05-10
I have an old windows XP client that was on an old domain years ago. We recently got a new server. When we set up the domain, it happens to have the same name as the very very old domain that this XP machine used to be on. We can log on to the machine as long as it is not in the same network as our new server, but when it is on the same network it attempts to connect up to the new domain and login is impossible. Is there any way to segregate this one machine from talking to the server WITHOUT putting it on a different subnet? I have already tried writing firewall rules on the server side blocking all ports and all programs in relation to that machine's IP, but this didn't help. My goal would be to have the XP machine and the server to absolutely never communicate with each other, but still allow the XP machine access to the internet, and to log in still without having to transfer data and programs to a new profile (which is impossible at this point, it's quite a mess in there). Any ideas?
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3

Expert Comment

ID: 33630797
Why not change the name?

Author Comment

ID: 33630826
I mean the domain name. If i take it off its domain name I won't be able to log in to that particular account any more, correct?

Accepted Solution

MISOperations earned 250 total points
ID: 33630839
Why not change the newer one so they don't conflict?
Get your Disaster Recovery as a Service basics

Disaster Recovery as a Service is one go-to solution that revolutionizes DR planning. Implementing DRaaS could be an efficient process, easily accessible to non-DR experts. Learn about monitoring, testing, executing failovers and failbacks to ensure a "healthy" DR environment.


Author Comment

ID: 33630946
Can i change the domain name once it is in place? We have workstations on the domain and the server is running Exchange, DNS, and DHCP. I would be willing to opt for that if there is really no other option for me and if it takes less time than subnetting out the XP machine. I was hoping to just stop the communication between the two, but the active directory domain service seems to be running at a deeper level.

Expert Comment

ID: 33631006
Yeah, it would be faster to just do it that way, the other way your thinking of would be too tedious and time consuming, this would be much faster and have way less downtime.

Assisted Solution

ted_sin earned 250 total points
ID: 33631393
I would try to set another dns address on the xp machine say external google dns, so it doesn't query your current dns servers that points to your DC. If this doesn't work then try also disabling netbios on the XP machine.

try it and see how it works.

Author Closing Comment

ID: 33632023
I tried playing around with both suggestions. Even though both answers worked, the owner of the machine just ended up moving to another subnet.

Featured Post

Optimize your web performance

What's in the eBook?
- Full list of reasons for poor performance
- Ultimate measures to speed things up
- Primary web monitoring types
- KPIs you should be monitoring in order to increase your ROI

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
Make the most of your online learning experience.
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…

635 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question