Solved

Log on to domain from different network over vpn

Posted on 2011-09-29
7
162 Views
Last Modified: 2012-06-27
Issue: RPC Server unavailable

I know I'm getting the above error because the Laptop cannot find the DC because I am trying to logon to the domain from a different network over a vpn.  This error happens on those 'branch' networks that have their own DC and a different domain.  i.e. I am loging on to a laptop on the ABC domain but the branch network I'm currently on is on the XYZ domain.  nslookup is clearly not able to find the right DC which is at the other end of the branch VPN.

I have made entries in LMHOSTS to compensate but this does not work in this situation. I obviously cannot make the ABC domain DNS server the primary LAN side DNS entry on the XYZ domain.  So to clarify;
- Laptop configured for logon to ABC domain is traveling to branch Network on XYZ domain
- Laptop user logs on the Laptop to be authenticated over vpn on the ABC DC
- ABC DC is not visible so RPC Server not available

Curious, other than the obvious, what do others do as a permanent solution to fix this?

Thx!
0
Comment
Question by:Defianse
  • 4
  • 2
7 Comments
 
LVL 6

Expert Comment

by:bluemeln
ID: 36816666
Questions:
1. Are XYZ and ABC in the same forest? If yes, are they at the same level, or is XYZ actually XYZ.ABC?
2. Did you ever set up a domain trust?
3. What is the domain level of each domain, i.e. mixed, 2003 (any 2000 or 2008 in the mix)?
0
 
LVL 6

Expert Comment

by:penguinjas
ID: 36816846
You could try creating a DNS fowarder in xyz domain to forward unresolved DNS requests to the ABC domain.  This sounds like an issue with DNS resolution so lmhosts would not make a difference.

To test if it's DNS you could add a host entry for the ABC domain controller on the workstation.  Windows checks the hosts file before querying a DNS server.
0
 

Author Comment

by:Defianse
ID: 36816996
bluemein: Q1 & 2 answer is no.  Q3 answer is server 2003R2 but not really the concern, I don't think.

penguinjas: It's definitely a DNS issue.  Question is how to resolve.  'Add host entry for ADC Domain controller on local machine.  I already have an entry in the hosts file but maybe I need to append the domain name to that entry?  I did that in the lmhosts but not the hosts.  My hosts file contains only the netbios name.  That's sounds like it's a possible solution.  I'll try this.
0
Edgartown IT Case Study

Learn about Edgartown's quest to ensure the safety and security of the entire town's employee and citizen data. Read the case study!

 

Author Comment

by:Defianse
ID: 36817276
Resolved.

Added remote domain DC to forwarders list in local dns server.  Works perfectly.
0
 

Author Comment

by:Defianse
ID: 36817725
I've requested that this question be closed as follows:

Accepted answer: 0 points for Defianse's comment http:/Q_27361997.html#36817276

for the following reason:

I was able to find the solution before an expert was able to provide me with one.
0
 
LVL 6

Accepted Solution

by:
penguinjas earned 500 total points
ID: 36817726
In my response I stated "You could try creating a DNS fowarder in xyz domain to forward unresolved DNS requests to the ABC domain. " 

He said he "Added remote domain DC to forwarders list in local dns server" to resolve.  

That's what I suggested.
0
 

Author Closing Comment

by:Defianse
ID: 36818464
I'm really sorry!  that's so blatant I don't even know what to say.  I completely misread that (selective I guess) and completely missed the part about dns forwarders.  My apologies and you're so right!  I'd add more point just as a penalty if I could!
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question