Users unable to connect to outside wireless networks after installing Windows Small Business Server 2011 connector

OK weird issue.  This has happened to multiple users within the environment under multiple versions of Windows (7 pro, 7 home, 8 home).  The environment is a small office with essentially a BYOD.  We installed Windows 2011 SBS and I install the Essential Connector tool to attach their computers to their Domain to connect to mapped network drives and network printers.  They have a Linksys wireless router acting as their firewall and gateway.  Pretty simple and straight forward.
After I install the Essentials connector tool on their computer they can attach to their work wireless network no problem.  But when they go anywhere and try to connect to a wireless network besides their work wireless network they get a limited no connection.  So they can connect to the external wireless connection but no internet access.
Are their wireless policies built into Windows 2011 SBS that are doing this?  Is it a DNS, DHCP, proxy issue?  This has happened on multiple devices so I don't think it's a device driver issue.  
When it first propped up I assumed it was an issue with the users home router.  But now its on like 4-5 other devices so it has to be something going on after the connector is installed.
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Lionel MMSmall Business IT ConsultantCommented:
When they are connected can you get to a command prompt and type
 ipconfig /all
and post the results, both for when they are on their work network and when away. My guess is that their DNS is not dynamic and that is why they get a connection but no internet.
Cris HannaSr IT Support EngineerCommented:
There are no wireless policies in any version of SBS.  Because you mentioned the connector, this appears to be SBS 2011 Essentials?

I'd start by checking out this article by one of the product team members and make sure your configuration matches.
Try setting a gpo  as secondary dns policy as google with ip address dhcp  

Bootstrap 4: Exploring New Features

Learn how to use and navigate the new features included in Bootstrap 4, the most popular HTML, CSS, and JavaScript framework for developing responsive, mobile-first websites.

FvengAuthor Commented:
I've read that article.  But I've already set the server to act as DHCP and DNS.  I've disabled DHCP on the router when I initial configured the server.  So the SBS 2011 server is handling both DHCP and DNS.  I did notice that the cisco router is listed as a forwarder in DNS.  Should that be removed.  I'm using google DNS servers as 2 other forwarders.

I don't see how this would effect the client though.  If they reboot, connect to a different wirelsss network DHCP should and does assign them a whole new set of IP, Subnet, GW addresses.
Cris HannaSr IT Support EngineerCommented:
I think we need to be clear...Are you running SBS 2011 Standard or Essentials?  In your original post you said
I install the Essential Connector
.   So if you are running SBS 2011 Standard then DHCP should be on the server but there is no Essential Connector in the Standard version of SBS 2011.  If you're running Essentials as is implied, then DHCP should be from the router as the article describes.

Can you run an ipconfig /all on one of the problem computers when connected to the business network and post results here.
FvengAuthor Commented:
The Windows edition is Small Business Server 2011 Essentials.

I have the server setup "the old way" per the article....

Can I set things up the old way?

Of course you can. SBS 2011 Essentials is still a full blow copy of server, and all the power that you’re familiar with is there. You can just jump into the NIC settings on the server and give it a static IP address of your choice. No problems there.

Additionally, if you absolutely wanted to run DHCP on the SBS Essentials server, no problems there either, simply open up the Server Manager, install the roll and configure DHCP. Don’t forget to turn off DHCP on your router, and away you go. If you’re not familiar with DHCP settings though, I suggest you leave it the way it was.

I'm not onsite right now so cannot post an ipconfig.  I will be shortly though and will when I can.
FvengAuthor Commented:
Local wireless connection
Local wireless ipconfig all
FvengAuthor Commented:
I doubt this will help.  I connected to my iphone as a wireless hotspot and I and I can get out to the internet on this connection.

remote wireless - iphone hotspot
Cris HannaSr IT Support EngineerCommented:
well that doesn't make any sense then
If they can successfully connect via your "hot spot" it's no different than connecting to a public hotspot.
Have you ever physically gone out with them to a public hotspot and watched what happened when they try to connect?
FvengAuthor Commented:
a user having the wireless issue just sent me a screenshot of their ipconfig.  It looks like its pulling an address from 192.168.10.### subnet.  I'm going to be checking for a rogue dhcp server.  Any good tools besides rogue dhcp?

ipconfig of user with issue
Cris HannaSr IT Support EngineerCommented:
So they address they're pulling is from the internal LAN wifi or a public Wifi?
If that's a public wifi...are they saying they can't connect?

Wireshark can be used, Symantec has a tool as well called dhcpfind
FvengAuthor Commented:
That ip they are getting is when they connect to the internal wireless. Ive had them do a release/renew and it pulls the same subnet.
Cris HannaSr IT Support EngineerCommented:
Is there more than one WAP in the office?
FvengAuthor Commented:
Im going to check that too. Wouldn't surprise me that someone snuck one in.
FvengAuthor Commented:
I ran dhcp find...but its giving out 192.168.17.### addresses not 192.168.33.###.  Now I'm really confused.  They did get a new hosted IP based phone system installed.  their telcomm provider installed a cisco router...I'm going to contact the vendor to make sure that cisco device isn't shelling out ip's.
Cris HannaSr IT Support EngineerCommented:
Are phones and computers sharing a common switch?
FvengAuthor Commented:
So the user was connecting to the guest wireless network which is dishing out the .33.### address.  But there is still a dhcp server using .17.###.  And it still doesn't explain not being able to connect at a wireless network outside of this wireless.  I'll have the user do the ipconfigs at his home wireless and send over screenshots.
Cris HannaSr IT Support EngineerCommented:
any chance there is a USB wireless card lying around you could configure on this laptop?  Does wireless behavior change?
And is it just this one user?   Or all wireless users?
FvengAuthor Commented:
Ok so the user went to a wireless network outside of their office.  It looks like it's holding onto the office DNS server info and not releasing it.  Just to verify this is happening to more than one user not just this individual user.
DNS issue
Cris HannaSr IT Support EngineerCommented:
have you looked at their wireless card properties...I suspect that IP address is set to DHCP and the DNS is hard coded.
when it should be set to automatic.
FvengAuthor Commented:
I think I may have just found it.

looks like on 2011 essentials if you setup the server to handle DHCP you need to disable a service on the client machine that is installed when you run the connector install.

I'm going to give this a try.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Cris HannaSr IT Support EngineerCommented:
In the first article I pointed you to, Sean points out further down in the Q&A that the LAN service "should" detect that one is no longer in the office.  I would verify that the service is actually running and not disabled or not started on the client.

It also kind of makes the point why you'd want to leave things on the router as the designed the default, then this shouldn't have been an issue.
FvengAuthor Commented:
I could revert them back by just disabling DHCP on the server and turning on DHCP on the router but that doesn't really seem to solve the problem as it seems that even after disabling the Windows Server LAN Configuration service on the client machine it is still statically assigning the DNS IP once connected to the LAN.  Which is what that service does.

I set it up this way because thats how I've setup all the other 2008/2012 servers I've ever setup.  Install the OS, install standard services like DNS DHCP.  I know MS tried to make the config easy for small biz with small to zero IT staff but this is just frustrating.  Also the article states that you can set it up to handle DHCP the old way if you want.  So it really shouldn't matter who is handling the DHCP roll.
Cris HannaSr IT Support EngineerCommented:
then you have to disable the LAN services service on the workstation/laptop
FvengAuthor Commented:
It is stopped and disabled.
Cris HannaSr IT Support EngineerCommented:
and it still won't connect outside??   and you've verified on the client that both IP and DNS are set to "automatically obtain"?
FvengAuthor Commented:
I'm selecting my solution as best because it has a direct link to an article that explains what service needs to be disabled on the client if you set the 2011 server as DHCP and dns.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.