• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 642
  • Last Modified:

Group policy, DNS suffix and Net Use

I’ve implemented a Group Policy on Windows Server 2003 that simply assigns a DNS suffix list to XP clients.  I have assigned this to the default group policy.  The purpose for this is to allow host names in a secondary domain to be identified.  Before I did this we would simply amend local host files for users who needed to resolve host names in the secondary domain.    

However, users who access the second domain also have a local BAT file that’s maps and authenticates access to a server in the secondary domain (using Net Use).  Without the local host files mentioned above the BAT file fails to access the secondary domain server and map the drive.  However I can ping the server in question from the associated client using the domain suffix group policy and ipconfig /all shows both domains.  

With the secondary domain host file the BAT file mapping works.

Hope this makes sense.

And comment s as to what the problem is are welcome.  
0
DHPBilcare
Asked:
DHPBilcare
  • 3
  • 2
1 Solution
 
Darius GhassemCommented:
You need to setup DNS Forwarders within your DNS to point to the second Domain's DNS servers this will allow the clients to append the suffix then look to DNS for the proper IP address.

If you don't want to do that you can use IP addresses within your Bat file instead of names.
0
 
Tony MassaCommented:
Are you saying that from CLIENT.DOMAIN1.NET, you can ping SERVER1 and get a response from SERVER1.DOMAIN2.COM?  I think Darius is on track here.  Adding conditional forwarders to your DNS servers would certainly be expected in your scenario.

How to add AD-Integrated Conditional Forwarders:
http://msmvps.com/blogs/ulfbsimonweidner/archive/2006/09/30/DNS-Conditional-Forwarders-_2D00_-AD-integrated.aspx
0
 
DHPBilcareAuthor Commented:
Sorry I should have added that I have already added the second domain as a secondary domain on my internal DNS Servers.  

This includes both a primary and secondary DNS serve address for the second domain.
0
NEW Veeam Backup for Microsoft Office 365 1.5

With Office 365, it’s your data and your responsibility to protect it. NEW Veeam Backup for Microsoft Office 365 eliminates the risk of losing access to your Office 365 data.

 
DHPBilcareAuthor Commented:
I've tried replacing the host name with IP in the BAT file and still no luck.
0
 
DHPBilcareAuthor Commented:
Ignore my last post, the change to IP in the BAT file works.  

However why is the hostname not being resolved in the BAT file when I can ping the host at the cmd prompt?
0
 
Tony MassaCommented:
If I'm not mistaken, UNC connections will always try NETBIOS.  PING isnt the same process as NET USE  Try going to the RUN command and type \\SERVER\. Does it find it?  Just use the FQDN in your bat would fix it.

You can test with wireshark to confirm that the PC isn't using DNS. Is there WINS in your domains?
0

Featured Post

 [eBook] Windows Nano Server

Download this FREE eBook and learn all you need to get started with Windows Nano Server, including deployment options, remote management
and troubleshooting tips and tricks

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now