Solved

Flaky Web Access - Internet Explorer 11 - Server 2012 R2 - Trend Services

Posted on 2014-09-03
13
437 Views
Last Modified: 2014-09-04
We need Internet access to wfbs-svc.trendmicro.com to setup Trend Micro Worry-Free Business Security Services.

Internet Explorer works for some sites like Google & Bing but not others like msn.com. I usually have to add the site to Trusted and turn on compatibility. Protected mode is turned off.

Firefox is fickle too working only on some sites.

This is a single server domain and DNS is running on the Server 2012.

I noticed that domain PCs are using the gateway rather than the DC for DNS. Maybe it realizes that the server has issues? Router is running DHCP but set to hand out the DC's ip for DNS.

I can ping sites like msn.com & cisco.com without issues
0
Comment
Question by:Randy Downs
  • 8
  • 5
13 Comments
 
LVL 56

Assisted Solution

by:Cliff Galiher
Cliff Galiher earned 500 total points
ID: 40302651
Windows (nor mac nor Linux) "figure out" that a DC has issues and just choose a different DNS server. If you have PCs with different DNS settings, they are getting those settings from somewhere specific. Either someone is manually configuring them or you have a misconfigured/rogue DHCP server somewhere. And yes, if you can't trust your DHCP and DNS config then you definitely will have browser issues, since they all (Chrome, Firefox, IE, opera) rely on a healthy basic TCP/IP configuration.

So I doubt your DC has issues. I suspect this is far more basic to your network setup.
0
 
LVL 29

Author Comment

by:Randy Downs
ID: 40302678
The PCs get the DNS settings from the router since it is handling DHCP and these are not static ips. The router is set to use the DC for DNS but that apparently is not getting through.

I suppose I should move DHCP to the DC but I am a little wary of making that move remotely. I suspect the network would work much better if I made that change.

Evidently the router thinks DNS should be pointed at itself so the DC setup doesn't work even though it's proper.
0
 
LVL 29

Author Comment

by:Randy Downs
ID: 40302681
I suppose I could switch the server to use dynamic ips like the PCs and it might work. That’s not ideal for a server but might fit better with the current network.
0
 
LVL 56

Accepted Solution

by:
Cliff Galiher earned 500 total points
ID: 40302683
That's not a good sign. Even outside of businesses, it is pretty common and popular to set up a router to hand out Google DNS or OpenDNS for home filtering. I haven't seen a home router screw up DHCP in *years.* any router who's software is that bad is seriously unreliable. If they can't get DHCP right, they probably botched NAT table mapping too. Your issue may be the router itself.
0
 
LVL 56

Assisted Solution

by:Cliff Galiher
Cliff Galiher earned 500 total points
ID: 40302684
Switching the server definitely will NOT help. You'll only be compounding the problem. AD *needs* DNS to work properly and needs to use internal DNS servers.
0
 
LVL 29

Author Comment

by:Randy Downs
ID: 40302703
This is what I see on the server & client. I uploaded the router screen shot. DHCP - DNS Router
Ethernet adapter NIC1:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
   Physical Address. . . . . . . . . : 74-86-7A-EA-C0-02
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::f8e0:cee7:f5fa:ceb8%12(Preferre
   IPv4 Address. . . . . . . . . . . : 192.168.1.2(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.1.1
   DHCPv6 IAID . . . . . . . . . . . : 309626490
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1A-44-CD-67-74-86-7A-EA-C

   DNS Servers . . . . . . . . . . . : ::1
                                       192.168.1.2
   NetBIOS over Tcpip. . . . . . . . : Enabled

This is a client PC on the domain

Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller
   Physical Address. . . . . . . . . : A4-1F-72-6B-EB-9E
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::fd77:44fc:9248:d6a6%11(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.1.134(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : Wednesday, September 03, 2014 6:27:39 PM
   Lease Expires . . . . . . . . . . : Thursday, September 04, 2014 6:27:37 PM
   Default Gateway . . . . . . . . . : 192.168.1.1
   DHCP Server . . . . . . . . . . . : 192.168.1.1
   DHCPv6 IAID . . . . . . . . . . . : 245636978
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-10-F4-24-DF-A4-1F-72-6B-EB-9E

   DNS Servers . . . . . . . . . . . : 192.168.1.1
   NetBIOS over Tcpip. . . . . . . . : Enabled
0
Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

 
LVL 29

Author Comment

by:Randy Downs
ID: 40302705
Notes:
server is 192.168.1.2
router is 192.168.1.1
0
 
LVL 56

Assisted Solution

by:Cliff Galiher
Cliff Galiher earned 500 total points
ID: 40302710
Which, again, shows the router is not using the settings it has been configured for. ...and that goes back to just bad software on the router. Making it very untrustworthy. I haven't seen a router mishandle DHCP in years. Which makes me suspect the router is of a particularly low quality.
0
 
LVL 29

Author Comment

by:Randy Downs
ID: 40302714
It's not a very expensive router. It's just a small shop that doesn't do much wit their domain. My thinking is that the server should probably handle DHCP making life easier for the somewhat confused router.
0
 
LVL 56

Assisted Solution

by:Cliff Galiher
Cliff Galiher earned 500 total points
ID: 40302717
Perhaps. But even inexpensive Linksys and netgear routers have done DHCP right for years. So again, if the router is getting that wrong, what else is it getting wrong? Ultimately it is your choice, of course, but switching DHCP just to find the problems didn't go away completely for browsing websites would be unfortunate. When a replacement router is such an inexpensive investment.
0
 
LVL 29

Author Comment

by:Randy Downs
ID: 40302721
This is a Linksys router and I had a similar problem with a Netgear router not that long ago. Maybe a power cycle would help.

The strange thing is that only the server seems to be effected. The client PCs are constantly used for the Internet.

I probably wouldn't have even noticed the server not browsing but the previous version of Trend complained that it couldn't update.
0
 
LVL 29

Author Comment

by:Randy Downs
ID: 40303387
Actually the Netgear router turned out to be OK now that I think about it. That problem was related to static ips.

I am going to see if cycling power helps. If not then router replacement may be on the horizon. Router was bought in May so should be under warranty.
0
 
LVL 29

Author Closing Comment

by:Randy Downs
ID: 40304012
The customer is going to be out of the country next week so we will postpone router replacement. Thanks for your advice
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

The reason that corporations and businesses use Windows servers is because it supports custom modifications to adapt to the business and what it needs. Most individual users won’t need such powerful options. Here I’ll explain how you can enable Wind…
Resolve DNS query failed errors for Exchange
In this Micro Tutorial viewers will learn how they can get their files copied out from their unbootable system without need to use recovery services. As an example non-bootable Windows 2012R2 installation is used which has boot problems.
This Micro Tutorial will demonstrate how nuggets on the Web are formatted by using Chrome Developer Tools. These tools would not only view the site's CSS but it can also modify it and save the CSS to use on your own site.

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now