[26858] in resnet
Re: Windows 7/2008 not connecting to network...
daemon@ATHENA.MIT.EDU (Mike King)
Thu Oct 13 16:47:03 2011
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=20cf3002566452e14304af34115e
Message-ID: <CANtPpk4Z9+h5DnE6J_9O4BBxEWpJbWusVOXa7MARGS0cAh6ncw@mail.gmail.com>
Date: Thu, 13 Oct 2011 16:34:30 -0400
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: Mike King <me@mpking.com>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <CANtPpk5psMzJKJtbB1TucDiRMVAPh8CiTpwi82YXzJdUwMypWw@mail.gmail.com>
--20cf3002566452e14304af34115e
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable
For posterity, here's a description and workaround on what I was describing=
.
(This is not related to Adeel's problem)
http://social.technet.microsoft.com/Forums/en/windowsserver2008r2networking=
/thread/2cedb9b7-8385-47ed-88b7-dffb37423d68
On Wed, Oct 12, 2011 at 5:56 PM, Mike King <me@mpking.com> wrote:
> I've also had "Issues" with Cisco ASA's and Server 2008 being in the same
> subnet.
>
> Short answer,
> Cisco ASA's have a "feature" called proxy arp, where if a device is
> misconfigured with the wrong gateway, the ASA will still respond, and mim=
ic
> the wrong address, so your clients can connect to the network.
>
> Server 2008/Windows 7 use proxy arp to detect ip address conflicts. This
> causes them to completely freak out.
>
> On a sad note, when you have an address conflict, it does not show a popu=
p
> like XP used to. It will just show a different (usually APIPA address) a=
s
> "Preferred" in the ipconfig /all
>
> Mike
>
>
> On Wed, Oct 12, 2011 at 3:49 PM, Adeel Siddiqui <asiddiqui@usao.edu>wrote=
:
>
>> We have a strange issue going on our campus that=92s causing our Windows=
7
>> computers and Windows 2008 servers to completely lose network connectivi=
ty.
>> ****
>>
>> ** **
>>
>> This is only happening to computers that are connected to the domain. **=
*
>> *
>>
>> ** **
>>
>> The issue seems to have started a few weeks ago after the last round of
>> Windows Updates were installed on those computers. As a result, the Wind=
ows
>> Firewall services and its dependency services all got turned off on thos=
e
>> computers and can=92t be re-enabled either. Also, RDP access to those
>> computers won=92t work either. I suspected a group policy of some sort m=
ight
>> be the cause but we use little to no group policy administration on our
>> campus at all. Upon further investigation, we found that there seems to =
be
>> some cause to this due to some registry permissions that seemed to have
>> changed after the aforementioned Windows Updates were installed. I have =
a
>> feeling that the problem lies with how the computers are authenticating =
to
>> the domain, but can=92t confirm that prognosis.****
>>
>> ** **
>>
>> I=92ve tried everything to fix this issue from changing group policy
>> settings, to removing/re-adding the computers to the domain. Nothing see=
ms
>> to have worked permanently or at least completely. We have managed to do
>> some on the spot *MacGyvering* to fix the issue (i.e. manually applying
>> administrative permissions to certain keys in the registry on those
>> computers as suggested by a few online articles) but they are temporary
>> band-aids at best. ****
>>
>> ** **
>>
>> Has anyone else run into this? Any permanent fixes/solutions that you ca=
n
>> suggest?****
>>
>> ** **
>>
>>
>> regards,
>> *Adeel Siddiqui**
>> *
>> *Network Administrator <http://www.usao.edu/staff/adeel-siddiqui>**
>> *Information, Research and Network Services
>> *University of Science and Arts of Oklahoma <http://www.usao.edu/>*
>> Chickasha, OK 73018
>> (405) 574-1319
>> *asiddiqui@usao.edu* ****
>>
>> ** **
>>
>> ** **
>> ___________________________________________________ You are subscribed t=
o
>> the ResNet-L mailing list.
>>
>> To subscribe, unsubscribe or search the archives, go to
>> http://LISTSERV.ND.EDU/archives/resnet-l.html___________________________=
________________________
>>
>
>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--20cf3002566452e14304af34115e
Content-Type: text/html; charset=windows-1252
Content-Transfer-Encoding: quoted-printable
For=A0posterity, here's a description and workaround on what I was desc=
ribing. =A0(This is not related to Adeel's problem)<div><a href=3D"http=
://social.technet.microsoft.com/Forums/en/windowsserver2008r2networking/thr=
ead/2cedb9b7-8385-47ed-88b7-dffb37423d68">http://social.technet.microsoft.c=
om/Forums/en/windowsserver2008r2networking/thread/2cedb9b7-8385-47ed-88b7-d=
ffb37423d68</a><br>
<br><div class=3D"gmail_quote">On Wed, Oct 12, 2011 at 5:56 PM, Mike King <=
span dir=3D"ltr"><<a href=3D"mailto:me@mpking.com">me@mpking.com</a>>=
</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .=
8ex;border-left:1px #ccc solid;padding-left:1ex;">
I've also had "Issues" with Cisco ASA's and Server 2008 b=
eing in the same subnet.<div><br></div><div>Short answer,</div><div>Cisco A=
SA's have a "feature" called proxy arp, where if a device is =
misconfigured with the wrong gateway, the ASA will still respond, and mimic=
the wrong address, so your clients can connect to the network.</div>
<div><br></div><div>Server 2008/Windows 7 use proxy arp to detect ip addres=
s=A0conflicts. =A0This causes them to completely freak out.</div><div><br><=
/div><div>On a sad note, when you have an address conflict, it does not sho=
w a popup like XP used to. =A0It will just show a different (usually APIPA =
address) as "Preferred" in the ipconfig /all</div>
<div><br></div><div><font color=3D"#888888">Mike</font><div><div></div><div=
class=3D"h5"><br><br><div class=3D"gmail_quote">On Wed, Oct 12, 2011 at 3:=
49 PM, Adeel Siddiqui <span dir=3D"ltr"><<a href=3D"mailto:asiddiqui@usa=
o.edu" target=3D"_blank">asiddiqui@usao.edu</a>></span> wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">
<div lang=3D"EN-US" link=3D"blue" vlink=3D"purple"><div><p class=3D"MsoNorm=
al">We have a strange issue going on our campus that=92s causing our Window=
s 7 computers and Windows 2008 servers to completely lose network connectiv=
ity. <u></u><u></u></p>
<p class=3D"MsoNormal"><u></u>=A0<u></u></p><p class=3D"MsoNormal">This is =
only happening to computers that are connected to the domain. <u></u><u></u=
></p><p class=3D"MsoNormal"><u></u>=A0<u></u></p><p class=3D"MsoNormal">The=
issue seems to have started a few weeks ago after the last round of Window=
s Updates were installed on those computers. As a result, the Windows Firew=
all services and its dependency services all got turned off on those comput=
ers and can=92t be re-enabled either. Also, RDP access to those computers w=
on=92t work either. I suspected a group policy of some sort might be the ca=
use but we use little to no group policy administration on our campus at al=
l. Upon further investigation, we found that there seems to be some cause t=
o this due to some registry permissions that seemed to have changed after t=
he aforementioned Windows Updates were installed. I have a feeling that the=
problem lies with how the computers are authenticating to the domain, but =
can=92t confirm that prognosis.<u></u><u></u></p>
<p class=3D"MsoNormal"><u></u>=A0<u></u></p><p class=3D"MsoNormal">I=92ve t=
ried everything to fix this issue from changing group policy settings, to r=
emoving/re-adding the computers to the domain. Nothing seems to have worked=
permanently or at least completely. We have managed to do some on the spot=
<i>MacGyvering</i> to fix the issue (i.e. manually applying administrative=
permissions to certain keys in the registry on those computers as suggeste=
d by a few online articles) but they are temporary band-aids at best. <u></=
u><u></u></p>
<p class=3D"MsoNormal"><u></u>=A0<u></u></p><p class=3D"MsoNormal">Has anyo=
ne else run into this? Any permanent fixes/solutions that you can suggest?<=
u></u><u></u></p><p class=3D"MsoNormal"><u></u>=A0<u></u></p><p class=3D"Ms=
oNormal">
<span style=3D"font-size:10.0pt"><br></span>regards,<span style=3D"font-siz=
e:10.0pt"><br></span><i><span style=3D"font-size:12.0pt;color:black">Adeel =
Siddiqui</span></i><b><i><span style=3D"font-size:14.0pt;color:black"><br><=
/span></i></b><span style=3D"font-size:10.0pt"><br>
</span><i><span style=3D"font-size:8.0pt"><a href=3D"http://www.usao.edu/st=
aff/adeel-siddiqui" target=3D"_blank"><span style=3D"color:blue">Network Ad=
ministrator</span></a></span></i><i><span style=3D"font-size:8.0pt"><br></s=
pan></i><span style=3D"font-size:8.0pt">Information, Research and Network S=
ervices<br>
<b><a href=3D"http://www.usao.edu/" target=3D"_blank"><span style=3D"color:=
blue">University=A0of Science and Arts of Oklahoma</span></a></b><br>Chicka=
sha, OK 73018</span><span style=3D"font-size:8.0pt"> <span style=3D"color:#=
1F497D"><br>
</span></span><span style=3D"font-size:8.0pt"><a href=3D"tel:%28405%29%2057=
4-1319" value=3D"+14055741319" target=3D"_blank">(405) 574-1319</a><br><u><=
span style=3D"color:black"><a href=3D"mailto:asiddiqui@usao.edu" target=3D"=
_blank"><span style=3D"color:blue">asiddiqui@usao.edu</span></a></span></u>=
</span><span style=3D"font-size:10.0pt"> <u></u><u></u></span></p>
<p class=3D"MsoNormal"><u></u>=A0<u></u></p><p class=3D"MsoNormal"><u></u>=
=A0<u></u></p></div></div>_________________________________________________=
__
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to <a href=3D"http://LISTSERV.ND.EDU/archives/resnet-l.html" target=3D"_=
blank">http://LISTSERV.ND.EDU/archives/resnet-l.html</a>
___________________________________________________
</p></blockquote></div><br></div></div></div>
</blockquote></div><br></div>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--20cf3002566452e14304af34115e--
