Trouble adding domain user and pinging

I've got a Tablet WinXP Pro laptop that I'm trying to add as a user to a domain controller running 03 Server. I've set up the DC as a DHCP and DNS server as well. Here's the ipconfig /all for the WinXP Pro Tablet:
And here's the ipconfig /all for the 03 Server:
I get the following error message when attempting to add my Tablet to my domain, which is named EAD.local:
Also, if anyone is curious, my Tablet is able to ping the 03 Server box, but my 03 Server box is not able to ping my Tablet. My tablet is wirelessly connected to a 2WIRE router via WPA, while my 03 Server is simply connected via Cat5e to the router itself.
C:\Documents and Settings\Administrator>ipconfig /all Windows IP Configuration Host Name . . . . . . . . . . . . : E-TABLET Primary Dns Suffix . . . . . . . : Node Type . . . . . . . . . . . . : Broadcast IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No Ethernet adapter Local Area Connection: Media State . . . . . . . . . . . : Media disconnected Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network Connecti on Physical Address. . . . . . . . . : *edited* Ethernet adapter Wireless Network Connection: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Intel(R) PRO/Wireless 2200BG Network Connection Physical Address. . . . . . . . . : *edited* Dhcp Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 192.168.1.52 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.1.254 DNS Servers . . . . . . . . . . . : 192.168.1.254
And here's the ipconfig /all for the 03 Server:
Windows IP Configuration Host Name . . . . . . . . . . . . : enterpri-twm2d5 Primary Dns Suffix . . . . . . . : EAD.local Node Type . . . . . . . . . . . . : Unknown IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : EAD.local Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Realtek RTL8168/8111 PCI-E Gigabit Ethern et NIC Physical Address. . . . . . . . . : *edited* DHCP Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 192.168.1.1 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.1.254 DNS Servers . . . . . . . . . . . : 192.168.1.254
I get the following error message when attempting to add my Tablet to my domain, which is named EAD.local:
Note: This information is intended for a network administrator. If you are not your network's administrator, notify the administrator that you received this information, which has been recorded in the file C:\WINDOWS\debug\dcdiag.txt. The following error occurred when DNS was queried for the service location (SRV) resource record used to locate a domain controller for domain EAD.local: The error was: "DNS name does not exist." (error code 0x0000232B RCODE_NAME_ERROR) The query was for the SRV record for _ldap._tcp.dc._msdcs.EAD.local Common causes of this error include the following: - The DNS SRV record is not registered in DNS. - One or more of the following zones do not include delegation to its child zone: EAD.local local . (the root zone) For information about correcting this problem, click Help.
Also, if anyone is curious, my Tablet is able to ping the 03 Server box, but my 03 Server box is not able to ping my Tablet. My tablet is wirelessly connected to a 2WIRE router via WPA, while my 03 Server is simply connected via Cat5e to the router itself.
Comments
All your client machines should point to your internal DNS server. You can then configure your internal DNS server to forward DNS requests to your gateway (if you prefer) or just let it resolve external queries on its own. I typically forward requests to my ISP's DNS servers.
Wow... and you have your mcse and ccent...
It's completely arbitrary. Most people either use the first or last address in a subnet, but you could put it anywhere in between as well. As long as you put in the IP for the correct device, nothing else matters (though it may make things a bit more difficult to keep track of).
Only if your DC is also running DNS; you can have them on separate servers
You clarification was correct though. I was just stressing that he should configure DHCP to hand out the internal server for his other machines as well. I assume his servers are static.
Somehow, when setting up DC's in the past, I never encountered this problem. DNS set itself up just fine and I guess I never really thought DNS requests weren't already automatically forwarded to default gateway.
That sounds like a basic connectivity problem. Can you access file shares, web pages, or anything else on the server? You said it's responding to pings, correct?
Regarding your original ping question, I would assume that your Tablet has the firewall on, which is why it will not respond to pings.
I think it has to be a connectivity issue, but aside from replacing all the Cat5 cables, I'm not sure what else to do. However, I have been getting dropped packets; at one point last week I would consistently get dropped packets when pinging my server from my tablet, but worst case it was 25% lost packets. It would always be the first packet too, which was weird. I had the same problem with dropped packets when I was pinging the server from my Vista laptop. Loss rate was about 25%.
Since the servers packets don't come back, it leads me to believe the laptop doesn't know where to send them back to and thus you're using a router. Router interfaces should each be on different subnets though, as it's one of their main jobs to segment broadcast domains. If they are on a switch, you shouldn't be having these problems. Different subnets = different Gateway's so either the client or the server has the wrong gateway.
Can you show us a 'route print' for both the client & server if they're connected to a router?
An 'arp -a' if connected to a switch built in to the Router?
The only thing confusing me is how the server could be getting online if the gateway is wrong...unless there is a static default route in place on the router or the Server?
Can you show us the config of the router?
I don't think this is a DNS issue but to prove it, can you try 'ping -a enterpri-twm2d5'? Also, what comes up when you type 'ipconfig /displaydns'?
Oh and your packet loss in my estimation is probably due to something interfering with your wireless channel. If B/G try using Ch 1, 6 or 11. If I remember right, those are the non-overlapping channels. Otherwise, try A (5Ghz) instead.
It may certainly be a wireless problem. I'd plug it in to eliminate that possibility. While 1, 6, and 11 don't overlap, another device (i.e. a neighbor) transmitting on the same channel will cause interference, as will things like microwaves, 2.4ghz phones, etc.
Do you have another machine (or virtual machine) that you can use to try to connect to the domain? That will help determine whether the problem lies with your DC or the specific configuration on that machine.
You really only need to point the DNS to your internal DNS server and provide the correct credentials, and you should be set. There's not a lot involved with this process.
Also, I wouldn't worry a great deal about the first packet being lost. Sometimes it takes a bit to find the proper path, and it may time out before that happens. If subsequent ones are returned, there shouldn't be a problem. It's still odd that that's happening on your LAN (which should respond very quickly), so you may indeed be looking at some sort of wireless problem.
I think it could be a local security database issue, because I have a password set up on my laptop (local, independent of my server), maybe somehow that does not allow me to add my laptop to the domain? It's an SP3 WinXP laptop. Firewalls disable on both the WinXP Pro SP3 laptop and WinXP Pro SP3 desktop.
Also, I used channel 11 when I set up my WPA network, so that shouldn't be a problem, and I don't have cordless phones anywhere here so interference from that would be impossible (though I have no clue about my neighbors). Also, my router is a 2Wire 2700HG-B, essentially acting as the switch as dynamik said.
The problem here is this entry:
192.168.1.0 255.255.255.0 192.168.1.1 192.168.1.1
Your server thinks that anything in the 192.168.1.0 subnet needs to be directed to its own interface, which doesn't have routes so the packets are discarded.
Take the Gateway out of your server NIC cards TCP/IP settings and leave it blank. Since your using a switch on the same segment(subnet), you don't need it. After this you should be able to ping the client from the server and if you can do that, you'll be able to join the tablet to the domain.
Append primary and connection specific DNS suffixes (radially checked)
Append parent suffixes of the primary DNS suffix (box checked)
Append these DNS suffixes (unchecked)
Register this connection's addresses in DNS (box checked)
Use this connection's DNS suffix in DNS registration (unchecked)
I appreciate the help dynamik.
Obviously you'll need to put the gateway back in since w/o it, the Default Route disappeared. You'll need that for Internet Access.
I noticed though that on the Server, your only arp entry was:
Interface: 192.168.1.1 --- 0x10003
Internet Address Physical Address Type
192.168.1.254 *edited* dynamic
Can you try manually entering in an ARP entry for the laptops 192.168.1.3 IP Address onto the server {arp -s 192.168.1.3 XX-XX-XX-XX-XX-XX}? What does a ping result in then?
Is the 2wire switch configurable? If so, can you verify that there isn't a configuration in it that could be preventing normal switch behavior?
When did this happen? Is the job really going that poorly? heh
I have no reason to believe my 2wire router is isolating anything, but I'll do a test with a hub or switch as soon as I can. My 2Wire 2700HG-B (version 4.25.19) has the following hardware firewall settings:
Well color me embarassed. I'm about as useful as an ashtray on a Harley.
Seriously though, Dynamik is right about the Subnet Mask. Because they match the traffic would never involve the gateway. My thinking was that multiple gateways would cause a problem. Also, I'm not super familiar with Route print results but it looks like it's normal to have an entry with the subnet your computer is on with a gateway/interface of the PCs IP address. Since this points to the loopback address I'm not sure what it's for but oh well.
I think there's something going on with the switch though. Have you ever used this switch before w/o problems?
Plus, you clearly have much better analogies!
As far as the actual problem is concerned, I'd definitely go with dcdiag and netdiag as the next steps for troubleshooting.
If the ipconfig /all from your domain controller shows a router as it's only DNS entry then something is very very wrong and a lot of things won't work. Like SRV records perhaps.
Exactly. I was just speaking generally.