Windows Server 2008 client gets security error in Win 7 Pro
I have a client with a new laptop who logs into a new Windows Server 2008 R2 domain, with redirected Documents folder. When she took her laptop home, she turned it on, and without getting onto LAN or wireless, her documents folder was empty, consisting only of the Public folder.
At her office, I dropped in, and connected her to the office wireless, and without logging off/on, browsed to the server and was prompted for user name and password. In that box was the message:
The system has detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you."
The DNS settings for the LAN and wireless are set to automatic, and while connected to the LAN, she seems to be fine.
I thought that the system should give her connection to her documents even if she is connected to *no* network.
Microsoft says, "To resolve this problem, configure the network firewall so that TCP port 88 and UDP port 88 are not blocked for either domain." I assume this is a change for the laptop's firewall? Or is it the server's?
I need help. Thanks.
Dave
At her office, I dropped in, and connected her to the office wireless, and without logging off/on, browsed to the server and was prompted for user name and password. In that box was the message:
The system has detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you."
The DNS settings for the LAN and wireless are set to automatic, and while connected to the LAN, she seems to be fine.
I thought that the system should give her connection to her documents even if she is connected to *no* network.
Microsoft says, "To resolve this problem, configure the network firewall so that TCP port 88 and UDP port 88 are not blocked for either domain." I assume this is a change for the laptop's firewall? Or is it the server's?
I need help. Thanks.
Dave
ASKER
There are three laptops, all configured the same, seemingly. Only this one has an issue. I have added the ports to the firewall. No difference.
Check the event viewer on the users machine for Event ID 6 as it could very well be related to token size. The below link will provide sets to correct this...
http://technet.microsoft.com/en-us/library/dd348689%28WS.10%29.aspx
Will.
http://technet.microsoft.com/en-us/library/dd348689%28WS.10%29.aspx
Will.
ASKER
The only ID 6 I have relates to the fingerprint sensor. I'm remoted in with the client right now. When I log on, the documents folder has only the public folder. I have Hamachi on this laptop as well. Same result if the Hamachi program is shut off.
I'm at my wits end.
I'm at my wits end.
ASKER
I should mention that the domain controller is not on a static IP. I'm assuming this is irrelevant as I would have assumed that no syncing would take place until the laptop is back on the DC network?
ASKER
I'm now wondering if this is all as simple as the fact that I need to add the Documents folder to the sync set in "Sync Center" in Control Panel?
I would definitly change the DC to static. Think about it that means your DNS server/s IP is changing. If your clients are not flushing the DNS entries it might be looking for DNS query's at the cached IP address. If that changes and the clients to update their cache then this creates a huge issues.
Change that IP to static on the DC's.
Will.
Change that IP to static on the DC's.
Will.
ASKER
Sorry, I meant the router's WAN address is dynamic. The server *definitely* has a static internal IP :-)
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
The sync issues resulted because an initial sync was not completed.
http://support.microsoft.com/kb/938457
I have also seen issues like this when the default gateway is not configured properly.
Will.