Block a computer with same domain name from rest of domain

Posted on 2010-09-08
Last Modified: 2012-05-10
I have an old windows XP client that was on an old domain years ago. We recently got a new server. When we set up the domain, it happens to have the same name as the very very old domain that this XP machine used to be on. We can log on to the machine as long as it is not in the same network as our new server, but when it is on the same network it attempts to connect up to the new domain and login is impossible. Is there any way to segregate this one machine from talking to the server WITHOUT putting it on a different subnet? I have already tried writing firewall rules on the server side blocking all ports and all programs in relation to that machine's IP, but this didn't help. My goal would be to have the XP machine and the server to absolutely never communicate with each other, but still allow the XP machine access to the internet, and to log in still without having to transfer data and programs to a new profile (which is impossible at this point, it's quite a mess in there). Any ideas?
  • 3
  • 3

Expert Comment

ID: 33630797
Why not change the name?

Author Comment

ID: 33630826
I mean the domain name. If i take it off its domain name I won't be able to log in to that particular account any more, correct?

Accepted Solution

MISOperations earned 250 total points
ID: 33630839
Why not change the newer one so they don't conflict?
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.


Author Comment

ID: 33630946
Can i change the domain name once it is in place? We have workstations on the domain and the server is running Exchange, DNS, and DHCP. I would be willing to opt for that if there is really no other option for me and if it takes less time than subnetting out the XP machine. I was hoping to just stop the communication between the two, but the active directory domain service seems to be running at a deeper level.

Expert Comment

ID: 33631006
Yeah, it would be faster to just do it that way, the other way your thinking of would be too tedious and time consuming, this would be much faster and have way less downtime.

Assisted Solution

ted_sin earned 250 total points
ID: 33631393
I would try to set another dns address on the xp machine say external google dns, so it doesn't query your current dns servers that points to your DC. If this doesn't work then try also disabling netbios on the XP machine.

try it and see how it works.

Author Closing Comment

ID: 33632023
I tried playing around with both suggestions. Even though both answers worked, the owner of the machine just ended up moving to another subnet.

Featured Post

Easy, flexible multimedia distribution & control

Coming soon!  Ideal for large-scale A/V applications, ATEN's VM3200 Modular Matrix Switch is an all-in-one solution that simplifies video wall integration. Easily customize display layouts to see what you want, how you want it in 4k.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
ISP Change 14 63
MSSQL server connection  forced closed 3 38
Reverse DND setup 6 38
Home firewall recommendations 11 58
For many of us, the  holiday season kindles the natural urge to give back to our friends, family members and communities. While it's easy for friends to notice the impact of such deeds, understanding the contributions of businesses and enterprises i…
I had an issue with InstallShield not being able to use Computer Browser service on Windows Server 2012. Here is the solution I found.
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question