[26840] in resnet
Re: Windows 7/2008 not connecting to network...
daemon@ATHENA.MIT.EDU (Mike King)
Wed Oct 12 18:10:16 2011
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=00248c0eec8e15fb3004af211812
Message-ID: <CANtPpk5psMzJKJtbB1TucDiRMVAPh8CiTpwi82YXzJdUwMypWw@mail.gmail.com>
Date: Wed, 12 Oct 2011 17:56:19 -0400
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: Mike King <me@mpking.com>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <04c201cc8918$1cdd0910$56971b30$@edu>
--00248c0eec8e15fb3004af211812
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable
I've also had "Issues" with Cisco ASA's and Server 2008 being in the same
subnet.
Short answer,
Cisco ASA's have a "feature" called proxy arp, where if a device is
misconfigured with the wrong gateway, the ASA will still respond, and mimic
the wrong address, so your clients can connect to the network.
Server 2008/Windows 7 use proxy arp to detect ip address conflicts. This
causes them to completely freak out.
On a sad note, when you have an address conflict, it does not show a popup
like XP used to. It will just show a different (usually APIPA address) as
"Preferred" in the ipconfig /all
Mike
On Wed, Oct 12, 2011 at 3:49 PM, Adeel Siddiqui <asiddiqui@usao.edu> wrote:
> We have a strange issue going on our campus that=92s causing our Windows =
7
> computers and Windows 2008 servers to completely lose network connectivit=
y.
> ****
>
> ** **
>
> This is only happening to computers that are connected to the domain. ***=
*
>
> ** **
>
> The issue seems to have started a few weeks ago after the last round of
> Windows Updates were installed on those computers. As a result, the Windo=
ws
> Firewall services and its dependency services all got turned off on those
> computers and can=92t be re-enabled either. Also, RDP access to those
> computers won=92t work either. I suspected a group policy of some sort mi=
ght
> be the cause but we use little to no group policy administration on our
> campus at all. Upon further investigation, we found that there seems to b=
e
> some cause to this due to some registry permissions that seemed to have
> changed after the aforementioned Windows Updates were installed. I have a
> feeling that the problem lies with how the computers are authenticating t=
o
> the domain, but can=92t confirm that prognosis.****
>
> ** **
>
> I=92ve tried everything to fix this issue from changing group policy
> settings, to removing/re-adding the computers to the domain. Nothing seem=
s
> to have worked permanently or at least completely. We have managed to do
> some on the spot *MacGyvering* to fix the issue (i.e. manually applying
> administrative permissions to certain keys in the registry on those
> computers as suggested by a few online articles) but they are temporary
> band-aids at best. ****
>
> ** **
>
> Has anyone else run into this? Any permanent fixes/solutions that you can
> suggest?****
>
> ** **
>
>
> regards,
> *Adeel Siddiqui**
> *
> *Network Administrator <http://www.usao.edu/staff/adeel-siddiqui>**
> *Information, Research and Network Services
> *University of Science and Arts of Oklahoma <http://www.usao.edu/>*
> Chickasha, OK 73018
> (405) 574-1319
> *asiddiqui@usao.edu* ****
>
> ** **
>
> ** **
> ___________________________________________________ You are subscribed to
> the ResNet-L mailing list.
>
> To subscribe, unsubscribe or search the archives, go to
> http://LISTSERV.ND.EDU/archives/resnet-l.html____________________________=
_______________________
>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--00248c0eec8e15fb3004af211812
Content-Type: text/html; charset=windows-1252
Content-Transfer-Encoding: quoted-printable
I've also had "Issues" with Cisco ASA's and Server 2008 b=
eing in the same subnet.<div><br></div><div>Short answer,</div><div>Cisco A=
SA's have a "feature" called proxy arp, where if a device is =
misconfigured with the wrong gateway, the ASA will still respond, and mimic=
the wrong address, so your clients can connect to the network.</div>
<div><br></div><div>Server 2008/Windows 7 use proxy arp to detect ip addres=
s=A0conflicts. =A0This causes them to completely freak out.</div><div><br><=
/div><div>On a sad note, when you have an address conflict, it does not sho=
w a popup like XP used to. =A0It will just show a different (usually APIPA =
address) as "Preferred" in the ipconfig /all</div>
<div><br></div><div>Mike<br><br><div class=3D"gmail_quote">On Wed, Oct 12, =
2011 at 3:49 PM, Adeel Siddiqui <span dir=3D"ltr"><<a href=3D"mailto:asi=
ddiqui@usao.edu">asiddiqui@usao.edu</a>></span> wrote:<br><blockquote cl=
ass=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;p=
adding-left:1ex;">
<div lang=3D"EN-US" link=3D"blue" vlink=3D"purple"><div><p class=3D"MsoNorm=
al">We have a strange issue going on our campus that=92s causing our Window=
s 7 computers and Windows 2008 servers to completely lose network connectiv=
ity. <u></u><u></u></p>
<p class=3D"MsoNormal"><u></u>=A0<u></u></p><p class=3D"MsoNormal">This is =
only happening to computers that are connected to the domain. <u></u><u></u=
></p><p class=3D"MsoNormal"><u></u>=A0<u></u></p><p class=3D"MsoNormal">The=
issue seems to have started a few weeks ago after the last round of Window=
s Updates were installed on those computers. As a result, the Windows Firew=
all services and its dependency services all got turned off on those comput=
ers and can=92t be re-enabled either. Also, RDP access to those computers w=
on=92t work either. I suspected a group policy of some sort might be the ca=
use but we use little to no group policy administration on our campus at al=
l. Upon further investigation, we found that there seems to be some cause t=
o this due to some registry permissions that seemed to have changed after t=
he aforementioned Windows Updates were installed. I have a feeling that the=
problem lies with how the computers are authenticating to the domain, but =
can=92t confirm that prognosis.<u></u><u></u></p>
<p class=3D"MsoNormal"><u></u>=A0<u></u></p><p class=3D"MsoNormal">I=92ve t=
ried everything to fix this issue from changing group policy settings, to r=
emoving/re-adding the computers to the domain. Nothing seems to have worked=
permanently or at least completely. We have managed to do some on the spot=
<i>MacGyvering</i> to fix the issue (i.e. manually applying administrative=
permissions to certain keys in the registry on those computers as suggeste=
d by a few online articles) but they are temporary band-aids at best. <u></=
u><u></u></p>
<p class=3D"MsoNormal"><u></u>=A0<u></u></p><p class=3D"MsoNormal">Has anyo=
ne else run into this? Any permanent fixes/solutions that you can suggest?<=
u></u><u></u></p><p class=3D"MsoNormal"><u></u>=A0<u></u></p><p class=3D"Ms=
oNormal">
<span style=3D"font-size:10.0pt"><br></span>regards,<span style=3D"font-siz=
e:10.0pt"><br></span><i><span style=3D"font-size:12.0pt;color:black">Adeel =
Siddiqui</span></i><b><i><span style=3D"font-size:14.0pt;color:black"><br><=
/span></i></b><span style=3D"font-size:10.0pt"><br>
</span><i><span style=3D"font-size:8.0pt"><a href=3D"http://www.usao.edu/st=
aff/adeel-siddiqui" target=3D"_blank"><span style=3D"color:blue">Network Ad=
ministrator</span></a></span></i><i><span style=3D"font-size:8.0pt"><br></s=
pan></i><span style=3D"font-size:8.0pt">Information, Research and Network S=
ervices<br>
<b><a href=3D"http://www.usao.edu/" target=3D"_blank"><span style=3D"color:=
blue">University=A0of Science and Arts of Oklahoma</span></a></b><br>Chicka=
sha, OK 73018</span><span style=3D"font-size:8.0pt"> <span style=3D"color:#=
1F497D"><br>
</span></span><span style=3D"font-size:8.0pt"><a href=3D"tel:%28405%29%2057=
4-1319" value=3D"+14055741319" target=3D"_blank">(405) 574-1319</a><br><u><=
span style=3D"color:black"><a href=3D"mailto:asiddiqui@usao.edu" target=3D"=
_blank"><span style=3D"color:blue">asiddiqui@usao.edu</span></a></span></u>=
</span><span style=3D"font-size:10.0pt"> <u></u><u></u></span></p>
<p class=3D"MsoNormal"><u></u>=A0<u></u></p><p class=3D"MsoNormal"><u></u>=
=A0<u></u></p></div></div>_________________________________________________=
__
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to <a href=3D"http://LISTSERV.ND.EDU/archives/resnet-l.html" target=3D"_=
blank">http://LISTSERV.ND.EDU/archives/resnet-l.html</a>
___________________________________________________
</p></blockquote></div><br></div>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--00248c0eec8e15fb3004af211812--
