Topic: W2k Active Directory Problem

[Cyrus Bharda]

Howdy all, well I fond out today that I can install a thingy called the admin pack for w2k so I can gain access to my domain controllers active directory from my 2k laptop, saves me the 500 mtr walk to it .

Recently we installed a SME 5.5 box do do internet gateway, firewall and email. Every since then i get a

"
Naming information could not be located because the server is not operational.
"
error pop up.

Now All we did was turn the DNS and DHCP off on the 2k server box so that the SME box could do the dhcp and dns. So I searched technet and pulled up the fix for it but I dont understand the fix!! its here:

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q278337

link may wrap.

So we do use the proxy on the SME box, so where do I make those changes?

Thanks,

Cyrus Bharda

[Kelvin]

Cyrus,

What exactly do you mean "turn off DNS on the W2K Server" ?

One very important issue with W2K Server is that Active Directory and DNS are crucial in ensuring the W2K server remains a happy chappy. I've had many occasions where well meaning (but apparently ill informed) techies have disabled (or worse, deleted) the DNS service on a W2K server and then wonder why things either don't work or take an inordinate amount of time to do anything !

Kelvin

[steve]

Cyrus,
Kelvin is right, DNS and active directory and tightly integrated in W2k.
Let your W2k servers do DNS and DHCP.
just point them to the SME as the default gateway.

[Cyrus Bharda]

Yeah but I am wanting to host email on the SME box and when I turn DNS and DHCP to the w2k box then it doesnt resolve any internet names?

[Cyrus Bharda]

See when I turn the DNS to the w2k server box I can browse internet sites but cannot ping/tracert them.

And SquidGuard and Squid Authenticication doesnt work at all, meaning anyone/everyone who points at the w2k server box gets net access where as before only people I setup could get access and they can gain access to every site that SquidGuard blocks, kinda pointless dont you think?

Also after switching DNS's, I get this weird message in outlook express:

"
The host 'xxxxx.xxxxx.com' could not be found. Please verify that you have entered the server name correctly. Account: 'Mail', Server: 'xxxxx.xxxxx.com', Protocol: POP3, Port: 110, Secure(SSL): No, Socket Error: 11001, Error Number: 0x800CCC0D
"

I only get it when trying to connect to an external mail server, whats that all about?

Thanks lots to everyone who is helping out to, really appreciated!

Cyrus Bharda

[Kelvin]

Hi Cyrus,

Make sure the DNS server settings in W2K does not have a "." entry - meaning that the W2K server is the root server of all DNS lookups. There is a MS KB article on this if you want to know more. In most cases, you should delete the "." entry and set the forward lookup zone to the SME server.

Kelvin

[Cyrus Bharda]

Where can I change these settings? Sorry but yes I am a newbie at this and I am trying to learn all this the hard way, by being thrown in the deep end .

Cyrus Bharda

[Cyrus Bharda]

Howdy again, it was the DNS so, I got it all working, but I did get this very interesting email from another list and am to newbiefied to understand exactly what it means:

--Begin Quote--
If it turns out that dns is the problem then either let the domain
controller update the zone or make the domain controller authoritive
over some of the sub-domains that Active Directory uses. That's how I got my linux
name server and active directory working nice. Here is the zone file for
reference.

$ORIGIN .
$TTL 259200 ; 3 days
home.local IN SOA ns.home.local. root.tuxwall.home.local.
(
199803621  ; serial
28800      ; refresh (8 hours)
7200       ; retry (2 hours)
2419200    ; expire (4 weeks)
86400      ; minimum (1 day)
)
NS ns.home.local.
MX 10 mail.home.local.
$ORIGIN home.local.
_msdcs NS pdc
_sites NS pdc
_tcp NS pdc
_udp NS pdc
imap A 192.168.1.1
mail A 192.168.1.1
mushroom A 192.168.1.144
ns A 192.168.1.1
pdc A 192.168.1.2
proxy A 192.168.1.1
tuxwall A 192.168.1.1
www A 192.168.1.1

--End Quote--

So what is this "zone" that is refered to as i would love it to work as above!

A HUGE Thanks to all of you who have helped out too!!!


Cyrus Bharda