?
Solved

Unable to Join Domain over VPN

Posted on 2011-10-14
15
Medium Priority
?
688 Views
Last Modified: 2012-06-22
I have cisco ASA's in 2 locations. I setup VPN access so they can talk to eachother. I am able to ping across both networks using IP and FQDN without issue.

When I try and join a PC to the domain on the remote network, I get the password box asking me to authenticate, I put in my credentials and hit ok.

After about 3 minutes I get this error.

Unable to joing specified domain, the network name is no longer available.

Any ideas?
0
Comment
Question by:TJacoberger1
  • 8
  • 6
15 Comments
 
LVL 2

Expert Comment

by:lords1979
ID: 36968432
ensure on the group policy on the asa for the vpn you have inherit dns checked.  This should allow for named server access, which it sounds is missing.
0
 
LVL 2

Expert Comment

by:lords1979
ID: 36968452
If you do not have a netbios server listed in the tunnel group, this could be the problem as well.
0
 
LVL 10

Expert Comment

by:ddiazp
ID: 36968453
When you type in your credentials, are you putting <domain>\<username>?

On the PC you're trying to add, open the command line and enter:

nslookup
set type=srv
<domain>
(make sure the results match your domain settings)
set type=ns
<domain>
(make sure the nameservers for your domain appear)
set type=a
<enter each one of the results for the ns query>
(make sure you can ping these guys)
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 

Author Comment

by:TJacoberger1
ID: 36970791
I get the password box that prompts me to authenticate, and I use domain\username but I get the same error.

Do you think something is missing from the confiig?
0
 
LVL 2

Expert Comment

by:lords1979
ID: 36970807
Please check the two things I named above using ASDM on the ASA.
0
 

Author Comment

by:TJacoberger1
ID: 36970821
The remote ASA or the on where my domain controler is located?
0
 
LVL 2

Expert Comment

by:lords1979
ID: 36970906
The one where the domain controler is located that you are connecting to.
0
 

Author Comment

by:TJacoberger1
ID: 36973541
I don t see where either of those are listed in ASDM on the DC. I checked remote access vpn and site to site vpn.
0
 
LVL 2

Expert Comment

by:lords1979
ID: 36973856
What type of vpn do you have setup?  SSL, ipsec, etc.
0
 

Author Comment

by:TJacoberger1
ID: 36980178
IPSEC
0
 
LVL 2

Expert Comment

by:lords1979
ID: 36980578
if you go to the configuration tab, click remote access vpn in the left pane.  Under network client access, there is an option for group policies.  Select the group policy that pertains to your vpn and click edit.  On the left pane there is a server option.  Ensure your dns server is listed.
0
 

Author Comment

by:TJacoberger1
ID: 36980608
Yes I already had it listed by IP.
0
 

Author Comment

by:TJacoberger1
ID: 36985488
Any other ideas?

DNS is already pointing correctly, when I ping the FQDN from the remote machine I get a reply back from the IP of my DC.

It just wont join.
0
 

Accepted Solution

by:
TJacoberger1 earned 0 total points
ID: 36987375
I figured it out. For some reason it was looking for the NetBios name within the credentials when I was joining the domain.
0
 

Author Closing Comment

by:TJacoberger1
ID: 37013561
Figured it out myself.
0

Featured Post

 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you use NetMotion Mobility on your PC and plan to upgrade to Windows 10, it may not work unless you take these steps.
Let’s list some of the technologies that enable smooth teleworking. 
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Suggested Courses

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question