Can't access a windows share from different sub net? - 400pnts

Posted on 2014-03-06
Medium Priority
Last Modified: 2014-03-10
Ok so I have

Windows 2008 server running inside a 2012 server as a VM, folder setup as "share" on the 2008 box can be seen fine on the local sublet - but computers on and cant see this particular machine on the network but ths can see all the others.

I can ping the FQDN on the computer from the other subnets but I can't telnet to it on port 23 (Not sure if that helps)

I looking for a push in the right direction - a tool that might help me figure out why its falining any ideas
Question by:ise438
  • 3

Expert Comment

ID: 39910069
Check the subnet mask in TCP/IP properties for the 2008 server.
LVL 27

Accepted Solution

Fred Marshall earned 1500 total points
ID: 39910382
Most likely the Windows firewall settings on the server side.
Since Windows 7, the firewall has to be set up to allow other subnet's access for File and Printer sharing.
See the attached for instructions.  The firewalls are all either very similar or identical.

Expert Comment

ID: 39911244
Because computers can get to the share if on the same subnet, but can't get to the share if on a different subnet, it is most likely the subnet mask.  Sharing and permissions are validated because computers on the same subnet can get to the share.  This scenario also holds true for a ping.  Computers from another subnet can ping the server with the wrong subnet mask, but to telnet, they need a return connection.  The computer with the wrong subnet mask cannot find it's way back to make a complete round-trip connection.  The same is true with file sharing.  Your symptom is a classic example of wrong subnet mask, so please check that.   Here is a web link.


Expert Comment

ID: 39911266
I can't remember if SP1 needs another forestprep and right now I can't find that on the web.   My suggestion is to run the prep and see if it does anything.  It doesn't hurt to run adprep many times.   Microsoft adpreps are intelligent enough to determine if the requirements are already met.   When you launch SP1 install it may go through a prerequisite check anyway and tell you if you need to run the prep.

Here's an article:  http://technet.microsoft.com/en-us/library/bb125224(v=exchg.150).aspx

If you don't have your own test lab, it would be worth your while to build one.  You can even use a fairly new desktop and install 2008 R2 or 2012 R2 hyper-v on it.  Most newer desktops will support 8 gb RAM which is enough for testing.  You can have a DC, an exchange server, a file server etc.  For testing  purposes 1 or 1.5 GB of RAM for each vm is enough.  I even know consultants who use a virtual environment on a laptop.  30 GB virtual hard disks are adequate for testing the OS and even installing Exchange.  Just spin up a virtual DC, dcpromo it to a new test domain, and start adding other vms to your test domain.

Author Comment

ID: 39917036
Turn out to be a firewall setting in the AV

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

I’m willing to make a bet that your organization stores sensitive data in your Windows File Servers; files and folders that you really don’t want making it into the wrong hands.
In this article, we will discuss how you can secure Active Directory using free tools, and how you can choose a safe and secure Active Directory security auditing tool.
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

597 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question