Users unable to connect to outside wireless networks after installing Windows Small Business Server 2011 connector
OK weird issue. This has happened to multiple users within the environment under multiple versions of Windows (7 pro, 7 home, 8 home). The environment is a small office with essentially a BYOD. We installed Windows 2011 SBS and I install the Essential Connector tool to attach their computers to their Domain to connect to mapped network drives and network printers. They have a Linksys wireless router acting as their firewall and gateway. Pretty simple and straight forward.
After I install the Essentials connector tool on their computer they can attach to their work wireless network no problem. But when they go anywhere and try to connect to a wireless network besides their work wireless network they get a limited no connection. So they can connect to the external wireless connection but no internet access.
Are their wireless policies built into Windows 2011 SBS that are doing this? Is it a DNS, DHCP, proxy issue? This has happened on multiple devices so I don't think it's a device driver issue.
When it first propped up I assumed it was an issue with the users home router. But now its on like 4-5 other devices so it has to be something going on after the connector is installed.
After I install the Essentials connector tool on their computer they can attach to their work wireless network no problem. But when they go anywhere and try to connect to a wireless network besides their work wireless network they get a limited no connection. So they can connect to the external wireless connection but no internet access.
Are their wireless policies built into Windows 2011 SBS that are doing this? Is it a DNS, DHCP, proxy issue? This has happened on multiple devices so I don't think it's a device driver issue.
When it first propped up I assumed it was an issue with the users home router. But now its on like 4-5 other devices so it has to be something going on after the connector is installed.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Try setting a gpo as secondary dns policy as google 8.8.8.8 with ip address dhcp
CT
CT
ASKER
I've read that article. But I've already set the server to act as DHCP and DNS. I've disabled DHCP on the router when I initial configured the server. So the SBS 2011 server is handling both DHCP and DNS. I did notice that the cisco router is listed as a forwarder in DNS. Should that be removed. I'm using google DNS servers as 2 other forwarders.
I don't see how this would effect the client though. If they reboot, connect to a different wirelsss network DHCP should and does assign them a whole new set of IP, Subnet, GW addresses.
I don't see how this would effect the client though. If they reboot, connect to a different wirelsss network DHCP should and does assign them a whole new set of IP, Subnet, GW addresses.
I think we need to be clear...Are you running SBS 2011 Standard or Essentials? In your original post you said
Can you run an ipconfig /all on one of the problem computers when connected to the business network and post results here.
I install the Essential Connector. So if you are running SBS 2011 Standard then DHCP should be on the server but there is no Essential Connector in the Standard version of SBS 2011. If you're running Essentials as is implied, then DHCP should be from the router as the article describes.
Can you run an ipconfig /all on one of the problem computers when connected to the business network and post results here.
ASKER
The Windows edition is Small Business Server 2011 Essentials.
I have the server setup "the old way" per the article....
Can I set things up the old way?
Of course you can. SBS 2011 Essentials is still a full blow copy of server, and all the power that you’re familiar with is there. You can just jump into the NIC settings on the server and give it a static IP address of your choice. No problems there.
Additionally, if you absolutely wanted to run DHCP on the SBS Essentials server, no problems there either, simply open up the Server Manager, install the roll and configure DHCP. Don’t forget to turn off DHCP on your router, and away you go. If you’re not familiar with DHCP settings though, I suggest you leave it the way it was.
I'm not onsite right now so cannot post an ipconfig. I will be shortly though and will when I can.
I have the server setup "the old way" per the article....
Can I set things up the old way?
Of course you can. SBS 2011 Essentials is still a full blow copy of server, and all the power that you’re familiar with is there. You can just jump into the NIC settings on the server and give it a static IP address of your choice. No problems there.
Additionally, if you absolutely wanted to run DHCP on the SBS Essentials server, no problems there either, simply open up the Server Manager, install the roll and configure DHCP. Don’t forget to turn off DHCP on your router, and away you go. If you’re not familiar with DHCP settings though, I suggest you leave it the way it was.
I'm not onsite right now so cannot post an ipconfig. I will be shortly though and will when I can.
ASKER
Local wireless connection
ASKER
I doubt this will help. I connected to my iphone as a wireless hotspot and I and I can get out to the internet on this connection.
well that doesn't make any sense then
If they can successfully connect via your "hot spot" it's no different than connecting to a public hotspot.
Have you ever physically gone out with them to a public hotspot and watched what happened when they try to connect?
If they can successfully connect via your "hot spot" it's no different than connecting to a public hotspot.
Have you ever physically gone out with them to a public hotspot and watched what happened when they try to connect?
ASKER
a user having the wireless issue just sent me a screenshot of their ipconfig. It looks like its pulling an address from 192.168.10.### subnet. I'm going to be checking for a rogue dhcp server. Any good tools besides rogue dhcp?
So they address they're pulling is from the internal LAN wifi or a public Wifi?
If that's a public wifi...are they saying they can't connect?
Wireshark can be used, Symantec has a tool as well called dhcpfind
If that's a public wifi...are they saying they can't connect?
Wireshark can be used, Symantec has a tool as well called dhcpfind
ASKER
That ip they are getting is when they connect to the internal wireless. Ive had them do a release/renew and it pulls the same subnet.
Is there more than one WAP in the office?
ASKER
Im going to check that too. Wouldn't surprise me that someone snuck one in.
ASKER
I ran dhcp find...but its giving out 192.168.17.### addresses not 192.168.33.###. Now I'm really confused. They did get a new hosted IP based phone system installed. their telcomm provider installed a cisco router...I'm going to contact the vendor to make sure that cisco device isn't shelling out ip's.
Are phones and computers sharing a common switch?
ASKER
So the user was connecting to the guest wireless network which is dishing out the .33.### address. But there is still a dhcp server using .17.###. And it still doesn't explain not being able to connect at a wireless network outside of this wireless. I'll have the user do the ipconfigs at his home wireless and send over screenshots.
any chance there is a USB wireless card lying around you could configure on this laptop? Does wireless behavior change?
And is it just this one user? Or all wireless users?
And is it just this one user? Or all wireless users?
ASKER
Ok so the user went to a wireless network outside of their office. It looks like it's holding onto the office DNS server info and not releasing it. Just to verify this is happening to more than one user not just this individual user.
have you looked at their wireless card properties...I suspect that IP address is set to DHCP and the DNS is hard coded.
when it should be set to automatic.
when it should be set to automatic.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
In the first article I pointed you to, Sean points out further down in the Q&A that the LAN service "should" detect that one is no longer in the office. I would verify that the service is actually running and not disabled or not started on the client.
It also kind of makes the point why you'd want to leave things on the router as the designed the default, then this shouldn't have been an issue.
It also kind of makes the point why you'd want to leave things on the router as the designed the default, then this shouldn't have been an issue.
ASKER
I could revert them back by just disabling DHCP on the server and turning on DHCP on the router but that doesn't really seem to solve the problem as it seems that even after disabling the Windows Server LAN Configuration service on the client machine it is still statically assigning the DNS IP once connected to the LAN. Which is what that service does.
I set it up this way because thats how I've setup all the other 2008/2012 servers I've ever setup. Install the OS, install standard services like DNS DHCP. I know MS tried to make the config easy for small biz with small to zero IT staff but this is just frustrating. Also the article states that you can set it up to handle DHCP the old way if you want. So it really shouldn't matter who is handling the DHCP roll.
I set it up this way because thats how I've setup all the other 2008/2012 servers I've ever setup. Install the OS, install standard services like DNS DHCP. I know MS tried to make the config easy for small biz with small to zero IT staff but this is just frustrating. Also the article states that you can set it up to handle DHCP the old way if you want. So it really shouldn't matter who is handling the DHCP roll.
then you have to disable the LAN services service on the workstation/laptop
ASKER
It is stopped and disabled.
and it still won't connect outside?? and you've verified on the client that both IP and DNS are set to "automatically obtain"?
ASKER
I'm selecting my solution as best because it has a direct link to an article that explains what service needs to be disabled on the client if you set the 2011 server as DHCP and dns.
ipconfig /all
and post the results, both for when they are on their work network and when away. My guess is that their DNS is not dynamic and that is why they get a connection but no internet.