Solved

No Internet access warning after migrating workstations to new domain

Posted on 2014-10-30
10
215 Views
Last Modified: 2014-11-17
Hi everyone,

After doing a domain/server migration from SBS2008 to 2012R2 in an all-Windows 7 Pro environment, the workstations are all showing 'No Internet access' in the system tray and in Network and Sharing center (red X between the domain and the Internet). However all workstations in fact DO have Internet access as well as full access to internal resources.

Some general notes:

- DNS on DC is configured with forwarding to OpenDNS servers
- DHCP running on DC (2012 R2)
- DHCP provides workstations one DNS IP only pointing to DC
- domain name is a .local
- pings to internal and external hosts from the workstation resolve instantly
- Windows Firewall is disabled via GPO on the workstations for the 'Domain network' and 'Home or work (private) network' zones

The staff keep mentioning the warning, which is reason enough to find a cause. I'm also seeing Outlook (2007/2010/2013) freezing issues on about 80% of the workstations and thought maybe this is related.

Thanks for any troubleshooting steps you may be able to provide.
0
Comment
Question by:tspreston
  • 6
  • 4
10 Comments
 
LVL 24

Expert Comment

by:VB ITS
Comment Utility
Check the permissions on the HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList key in the registry on one affected machine and make sure the NETWORK SERVICE and LOCAL SERVICE accounts have full access to the key.

If you have to add the permissions for these accounts to the above key then remember to go into Advanced and tick the box to Replace all child object permission entries with inheritable permission from this object > OK as permissions are not automatically inherited in the registry.

If everything looks right in the registry then have a read through this article for more troubleshooting steps: http://blogs.technet.com/b/networking/archive/2009/06/19/missing-network-map-under-network-and-sharing-center-in-windows-vista-or-windows-server-2008.aspx (I know the URL refers to Vista and 2008 however some of the fixes also apply to Windows 7/2008 R2)
0
 

Author Comment

by:tspreston
Comment Utility
Thanks for the reply, VB. The machine I'm troubleshooting did not have the two service accounts listed under the NetworkList key so I added them with full access and was sure to replace the permissions of the child objects. Unfortunately the problem remains after a reboot.

Interestingly, I checked another machine that is not exhibiting the issue. It doesn't have the service accounts listed in the same registry key.

I'm going through the Technet blog post you provided now to see if I can find a commonality.
0
 

Author Comment

by:tspreston
Comment Utility
Ok so I was going through the steps in the Technet blog you posted and nothing seemed to be working. So I removed Kaspersky (Kaseya Anti-Virus - KAV) and that solved the issue after a reboot.

What I don't understand is why 1/2 of the Win 7 Pro systems running the same version of KAV don't have this issue. And how can I configure KAV to unblock LLTD?
0
 
LVL 24

Expert Comment

by:VB ITS
Comment Utility
OK, that's strange that an AV product would cause that issue. How did you deploy Kaspersky in your environment? What version of Kaspersky specifically are you using?
0
 

Author Comment

by:tspreston
Comment Utility
It's Kaspersky through Kaseya 6.5; version 10.2.1.23. Like I said, it's odd as not all workstations are showing the same behavior. However this particular workstation's 'No Internet access' warning disappeared as soon as the AV was uninstalled and the PC rebooted. The warning returned when I reinstalled the AV and rebooted.
0
What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

 
LVL 24

Expert Comment

by:VB ITS
Comment Utility
Managed to find this thread on the Kaseya forums, which suggests adding http://www.msftncsi.com/* and dns.msftncsi.com to the list of trusted sites to resolve the issue.

Here's the official TechNet article regarding the Network Connectivity Status Indicator (NCSI) http://technet.microsoft.com/en-us/library/cc766017%28v=ws.10%29.aspx

Try the above and let me know if it fixes the issue.
0
 

Author Comment

by:tspreston
Comment Utility
Thanks for the reply. Unfortunately I have already tried that, it didn't solve this particular PC's issue.
0
 

Author Comment

by:tspreston
Comment Utility
Oops, hold the phone. I just logged into said test PC and the warning is gone. I have had it locked and logged in since yesterday. I'm restarting now to see what state it comes up in.
0
 

Author Comment

by:tspreston
Comment Utility
Nope it came up with the warning still. It seems like it eventually sorts itself out. Can't get my head wrapped around it...
0
 
LVL 24

Accepted Solution

by:
VB ITS earned 500 total points
Comment Utility
Sounds like it's definitely something in the KAV profile that's causing the issue though. Is it hindering your access to any programs? I know Office 365 relies on the NCIS for example.
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

Recently, I was assigned the task of performing a hardware refresh in the datacenter. The previous Windows 2008 systems were connected to the SAN via fiber channel HBA’s and among other thing, had PowerPath installed in order to provide sufficient f…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This Micro Tutorial will teach you how to change your appearance and customize your Windows 7 interface to your unique preference. This will be demonstrated using Windows 7 operating system.
The viewer will learn how to successfully download and install the SARDU utility on Windows 7, without downloading adware.

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now