Solved

No Internet access warning after migrating workstations to new domain

Posted on 2014-10-30
10
244 Views
Last Modified: 2014-11-17
Hi everyone,

After doing a domain/server migration from SBS2008 to 2012R2 in an all-Windows 7 Pro environment, the workstations are all showing 'No Internet access' in the system tray and in Network and Sharing center (red X between the domain and the Internet). However all workstations in fact DO have Internet access as well as full access to internal resources.

Some general notes:

- DNS on DC is configured with forwarding to OpenDNS servers
- DHCP running on DC (2012 R2)
- DHCP provides workstations one DNS IP only pointing to DC
- domain name is a .local
- pings to internal and external hosts from the workstation resolve instantly
- Windows Firewall is disabled via GPO on the workstations for the 'Domain network' and 'Home or work (private) network' zones

The staff keep mentioning the warning, which is reason enough to find a cause. I'm also seeing Outlook (2007/2010/2013) freezing issues on about 80% of the workstations and thought maybe this is related.

Thanks for any troubleshooting steps you may be able to provide.
0
Comment
Question by:tspreston
  • 6
  • 4
10 Comments
 
LVL 24

Expert Comment

by:VB ITS
ID: 40415069
Check the permissions on the HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList key in the registry on one affected machine and make sure the NETWORK SERVICE and LOCAL SERVICE accounts have full access to the key.

If you have to add the permissions for these accounts to the above key then remember to go into Advanced and tick the box to Replace all child object permission entries with inheritable permission from this objectOK as permissions are not automatically inherited in the registry.

If everything looks right in the registry then have a read through this article for more troubleshooting steps: http://blogs.technet.com/b/networking/archive/2009/06/19/missing-network-map-under-network-and-sharing-center-in-windows-vista-or-windows-server-2008.aspx (I know the URL refers to Vista and 2008 however some of the fixes also apply to Windows 7/2008 R2)
0
 

Author Comment

by:tspreston
ID: 40415831
Thanks for the reply, VB. The machine I'm troubleshooting did not have the two service accounts listed under the NetworkList key so I added them with full access and was sure to replace the permissions of the child objects. Unfortunately the problem remains after a reboot.

Interestingly, I checked another machine that is not exhibiting the issue. It doesn't have the service accounts listed in the same registry key.

I'm going through the Technet blog post you provided now to see if I can find a commonality.
0
 

Author Comment

by:tspreston
ID: 40416064
Ok so I was going through the steps in the Technet blog you posted and nothing seemed to be working. So I removed Kaspersky (Kaseya Anti-Virus - KAV) and that solved the issue after a reboot.

What I don't understand is why 1/2 of the Win 7 Pro systems running the same version of KAV don't have this issue. And how can I configure KAV to unblock LLTD?
0
Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

 
LVL 24

Expert Comment

by:VB ITS
ID: 40418550
OK, that's strange that an AV product would cause that issue. How did you deploy Kaspersky in your environment? What version of Kaspersky specifically are you using?
0
 

Author Comment

by:tspreston
ID: 40418565
It's Kaspersky through Kaseya 6.5; version 10.2.1.23. Like I said, it's odd as not all workstations are showing the same behavior. However this particular workstation's 'No Internet access' warning disappeared as soon as the AV was uninstalled and the PC rebooted. The warning returned when I reinstalled the AV and rebooted.
0
 
LVL 24

Expert Comment

by:VB ITS
ID: 40418583
Managed to find this thread on the Kaseya forums, which suggests adding http://www.msftncsi.com/* and dns.msftncsi.com to the list of trusted sites to resolve the issue.

Here's the official TechNet article regarding the Network Connectivity Status Indicator (NCSI) http://technet.microsoft.com/en-us/library/cc766017%28v=ws.10%29.aspx

Try the above and let me know if it fixes the issue.
0
 

Author Comment

by:tspreston
ID: 40418599
Thanks for the reply. Unfortunately I have already tried that, it didn't solve this particular PC's issue.
0
 

Author Comment

by:tspreston
ID: 40418602
Oops, hold the phone. I just logged into said test PC and the warning is gone. I have had it locked and logged in since yesterday. I'm restarting now to see what state it comes up in.
0
 

Author Comment

by:tspreston
ID: 40418612
Nope it came up with the warning still. It seems like it eventually sorts itself out. Can't get my head wrapped around it...
0
 
LVL 24

Accepted Solution

by:
VB ITS earned 500 total points
ID: 40418679
Sounds like it's definitely something in the KAV profile that's causing the issue though. Is it hindering your access to any programs? I know Office 365 relies on the NCIS for example.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup" or a blinking cursor with black screen. A loop for Auto repair will start but fix nothing.  You will be panic as there are no back…
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of installing of Data Protection Manager on a server running Windows Server 2012 R2, including the prerequisites. Microsoft .Net 3.5 is required. To install this feature, go to Server Manager…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question