Solved

Users unable to connect to outside wireless networks after installing Windows Small Business Server 2011 connector

Posted on 2014-10-13
27
177 Views
Last Modified: 2014-11-23
OK weird issue.  This has happened to multiple users within the environment under multiple versions of Windows (7 pro, 7 home, 8 home).  The environment is a small office with essentially a BYOD.  We installed Windows 2011 SBS and I install the Essential Connector tool to attach their computers to their Domain to connect to mapped network drives and network printers.  They have a Linksys wireless router acting as their firewall and gateway.  Pretty simple and straight forward.
After I install the Essentials connector tool on their computer they can attach to their work wireless network no problem.  But when they go anywhere and try to connect to a wireless network besides their work wireless network they get a limited no connection.  So they can connect to the external wireless connection but no internet access.
Are their wireless policies built into Windows 2011 SBS that are doing this?  Is it a DNS, DHCP, proxy issue?  This has happened on multiple devices so I don't think it's a device driver issue.  
When it first propped up I assumed it was an issue with the users home router.  But now its on like 4-5 other devices so it has to be something going on after the connector is installed.
0
Comment
Question by:Fveng
  • 14
  • 11
  • +1
27 Comments
 
LVL 24

Expert Comment

by:lionelmm
ID: 40379113
When they are connected can you get to a command prompt and type
 ipconfig /all
and post the results, both for when they are on their work network and when away. My guess is that their DNS is not dynamic and that is why they get a connection but no internet.
0
 
LVL 35

Assisted Solution

by:Cris Hanna
Cris Hanna earned 500 total points
ID: 40379117
There are no wireless policies in any version of SBS.  Because you mentioned the connector, this appears to be SBS 2011 Essentials?

I'd start by checking out this article by one of the product team members and make sure your configuration matches.
http://sbs.seandaniel.com/2011/06/basics-of-local-dns-for-small-business.html
0
 
LVL 23

Expert Comment

by:ComputerTechie
ID: 40379714
Try setting a gpo  as secondary dns policy as google 8.8.8.8 with ip address dhcp  

CT
0
 

Author Comment

by:Fveng
ID: 40392473
I've read that article.  But I've already set the server to act as DHCP and DNS.  I've disabled DHCP on the router when I initial configured the server.  So the SBS 2011 server is handling both DHCP and DNS.  I did notice that the cisco router is listed as a forwarder in DNS.  Should that be removed.  I'm using google DNS servers as 2 other forwarders.

I don't see how this would effect the client though.  If they reboot, connect to a different wirelsss network DHCP should and does assign them a whole new set of IP, Subnet, GW addresses.
0
 
LVL 35

Expert Comment

by:Cris Hanna
ID: 40392503
I think we need to be clear...Are you running SBS 2011 Standard or Essentials?  In your original post you said
I install the Essential Connector
.   So if you are running SBS 2011 Standard then DHCP should be on the server but there is no Essential Connector in the Standard version of SBS 2011.  If you're running Essentials as is implied, then DHCP should be from the router as the article describes.

Can you run an ipconfig /all on one of the problem computers when connected to the business network and post results here.
0
 

Author Comment

by:Fveng
ID: 40392543
The Windows edition is Small Business Server 2011 Essentials.

I have the server setup "the old way" per the article....

Can I set things up the old way?

Of course you can. SBS 2011 Essentials is still a full blow copy of server, and all the power that you’re familiar with is there. You can just jump into the NIC settings on the server and give it a static IP address of your choice. No problems there.

Additionally, if you absolutely wanted to run DHCP on the SBS Essentials server, no problems there either, simply open up the Server Manager, install the roll and configure DHCP. Don’t forget to turn off DHCP on your router, and away you go. If you’re not familiar with DHCP settings though, I suggest you leave it the way it was.


I'm not onsite right now so cannot post an ipconfig.  I will be shortly though and will when I can.
0
 

Author Comment

by:Fveng
ID: 40393246
Local wireless connection
Local wireless ipconfig all
0
 

Author Comment

by:Fveng
ID: 40393256
I doubt this will help.  I connected to my iphone as a wireless hotspot and I and I can get out to the internet on this connection.

remote wireless - iphone hotspot
0
 
LVL 35

Expert Comment

by:Cris Hanna
ID: 40393559
well that doesn't make any sense then
If they can successfully connect via your "hot spot" it's no different than connecting to a public hotspot.
Have you ever physically gone out with them to a public hotspot and watched what happened when they try to connect?
0
 

Author Comment

by:Fveng
ID: 40395730
a user having the wireless issue just sent me a screenshot of their ipconfig.  It looks like its pulling an address from 192.168.10.### subnet.  I'm going to be checking for a rogue dhcp server.  Any good tools besides rogue dhcp?

ipconfig of user with issue
0
 
LVL 35

Expert Comment

by:Cris Hanna
ID: 40395741
So they address they're pulling is from the internal LAN wifi or a public Wifi?
If that's a public wifi...are they saying they can't connect?

Wireshark can be used, Symantec has a tool as well called dhcpfind
0
 

Author Comment

by:Fveng
ID: 40395865
That ip they are getting is when they connect to the internal wireless. Ive had them do a release/renew and it pulls the same subnet.
0
 
LVL 35

Expert Comment

by:Cris Hanna
ID: 40396104
Is there more than one WAP in the office?
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 

Author Comment

by:Fveng
ID: 40396117
Im going to check that too. Wouldn't surprise me that someone snuck one in.
0
 

Author Comment

by:Fveng
ID: 40396816
I ran dhcp find...but its giving out 192.168.17.### addresses not 192.168.33.###.  Now I'm really confused.  They did get a new hosted IP based phone system installed.  their telcomm provider installed a cisco router...I'm going to contact the vendor to make sure that cisco device isn't shelling out ip's.
0
 
LVL 35

Expert Comment

by:Cris Hanna
ID: 40396826
Are phones and computers sharing a common switch?
0
 

Author Comment

by:Fveng
ID: 40396912
So the user was connecting to the guest wireless network which is dishing out the .33.### address.  But there is still a dhcp server using .17.###.  And it still doesn't explain not being able to connect at a wireless network outside of this wireless.  I'll have the user do the ipconfigs at his home wireless and send over screenshots.
0
 
LVL 35

Expert Comment

by:Cris Hanna
ID: 40396951
any chance there is a USB wireless card lying around you could configure on this laptop?  Does wireless behavior change?
And is it just this one user?   Or all wireless users?
0
 

Author Comment

by:Fveng
ID: 40402838
Ok so the user went to a wireless network outside of their office.  It looks like it's holding onto the office DNS server info and not releasing it.  Just to verify this is happening to more than one user not just this individual user.
DNS issue
0
 
LVL 35

Expert Comment

by:Cris Hanna
ID: 40402851
have you looked at their wireless card properties...I suspect that IP address is set to DHCP and the DNS is hard coded.
when it should be set to automatic.
0
 

Accepted Solution

by:
Fveng earned 0 total points
ID: 40402859
I think I may have just found it.  
http://blogs.technet.com/b/sbs/archive/2011/09/22/running-dhcp-server-on-sbs-2011-essentials-with-a-static-ip.aspx

looks like on 2011 essentials if you setup the server to handle DHCP you need to disable a service on the client machine that is installed when you run the connector install.

I'm going to give this a try.
0
 
LVL 35

Expert Comment

by:Cris Hanna
ID: 40402931
In the first article I pointed you to, Sean points out further down in the Q&A that the LAN service "should" detect that one is no longer in the office.  I would verify that the service is actually running and not disabled or not started on the client.

It also kind of makes the point why you'd want to leave things on the router as the designed the default, then this shouldn't have been an issue.
0
 

Author Comment

by:Fveng
ID: 40420381
I could revert them back by just disabling DHCP on the server and turning on DHCP on the router but that doesn't really seem to solve the problem as it seems that even after disabling the Windows Server LAN Configuration service on the client machine it is still statically assigning the DNS IP once connected to the LAN.  Which is what that service does.

I set it up this way because thats how I've setup all the other 2008/2012 servers I've ever setup.  Install the OS, install standard services like DNS DHCP.  I know MS tried to make the config easy for small biz with small to zero IT staff but this is just frustrating.  Also the article states that you can set it up to handle DHCP the old way if you want.  So it really shouldn't matter who is handling the DHCP roll.
0
 
LVL 35

Expert Comment

by:Cris Hanna
ID: 40420499
then you have to disable the LAN services service on the workstation/laptop
0
 

Author Comment

by:Fveng
ID: 40420503
It is stopped and disabled.
0
 
LVL 35

Expert Comment

by:Cris Hanna
ID: 40420531
and it still won't connect outside??   and you've verified on the client that both IP and DNS are set to "automatically obtain"?
0
 

Author Closing Comment

by:Fveng
ID: 40460463
I'm selecting my solution as best because it has a direct link to an article that explains what service needs to be disabled on the client if you set the 2011 server as DHCP and dns.
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

A quick step-by-step overview of installing and configuring Carbonite Server Backup.
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
As developers, we are not limited to the functions provided by the VBA language. In addition, we can call the functions that are part of the Windows operating system. These functions are part of the Windows API (Application Programming Interface). U…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now