• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 158
  • Last Modified:

Cannot connect to Domain Controller

I setup and configured a new dc at one of my companies locations. Between Office1 and Office2 (new dc),  we have a site-to-site vpn tunnel. I can ping devices at Office1 from Office2 just fine but I can't ping the virtual host which is where the new dc lives. From the new dc I can ping other dc's on my network just fine but I can't ping the new dc from the other dc's. There are other servers at Office2 that I can ping and remote into from Office1 but for some reason I can't ping or remote into the virtual host. To get to the virtual host I have to remote into a different server in Office2 then remote into the virtual host.
0
Dawin Daise
Asked:
Dawin Daise
2 Solutions
 
MAS EE MVETechnical Department HeadCommented:
Hi,
Ensure firewall is not enabled in your new DC.
Attached screenshot for your reference click on " Turn Windows Firewall on or off" .


Thanks
MAS
windows-server-2012-enable-disable-f.jpg
0
 
Aaron TomoskyTechnology ConsultantCommented:
Agree, it's probably Windows firewall as some of the default policies only allow local subnet access.
0
 
Steve KnightIT ConsultancyCommented:
Soryy if this sounds too obvious but have seen it too many timed - is IP comms working at all, e.g. default gateway points elsewhere or you have the wrong subnet mask or second nic with an ip from the other site.

Check routing table with route print from cmd and tracer or pathping with ip of other site to see where it stops.

Where does your site vpn come in - from a server or same router as internet. If your default gateway points out to a local Internet connection you might need a static route on there too your other site via the vpn device.

Steve
0
 
Dawin DaiseSr. Windows Systems AdministratorAuthor Commented:
The issue was the Kaspersky firewall. Thanks guys for your help.
0

Featured Post

SMB Security Just Got a Layer Stronger

WatchGuard acquires Percipient Networks to extend protection to the DNS layer, further increasing the value of Total Security Suite.  Learn more about what this means for you and how you can improve your security with WatchGuard today!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now