Default gateway problem 1

[bpinter]

I'am not sure if this is a Watchguard issue or a Windows issue, so I am posting it in both forums.

I have a Watchguard X500 with a LAN and a DMZ network. The Watchguard has a public IP and there is a webserver on the DMZ and a MS SBS 2K3 server on the LAN. The servers are:

SBS:
IP: 192.168.1.1/24
Gateway: 192.168.1.100 (the LAN port of the Watchguard)

Web Server:
IP: 192.168.2.1/24
Gateway: 192.168.2.100 (the DMZ port of the Watchguard)

Now the issue is that when a remote desktop connection is used to connect from the LAN to the webserver from an XP machine on the LAN the following happens: The connection is made, the logon screen is presented, but after logging in successfully, the connection drops out. Checking the server from the console then shows that the default gateway setting on the Webserver's NIC has changed to 192.168.1.100 (the LAN default gateway.) What the...? Changing this back to 192.168.2.100 then restores the connection and it can be used without any problems. The connection is not used every day but next time same problem.

It's driving me nuts! Any ideas anyone?

 

[llevon]

What user are you using to logon to the web server and does it run the SBS logon script. This logon script configures a cient the first time it logs on. This might be reconfiguring the network card of the webserver as you logon.

Regards,

llevon

 

[bpinter]

llevon,

Hmmm. Usually it's the administrator account, although I am not 100% sure whether it's the domain or local admin. I am pretty sure I've tried both with the same result, but I will confirm it. To the best of your knowledge, if indeed the logon script changes the nic config, would it only be changing the default gateway?

In fact, do you know what the sbs login script setup.exe actually does? A cursory search I did didn't find any suitable explanation except it does "more than just install client software"

Thanks for your help so far.

 

[bpinter]

llevon,

it was indeed the domain admin running the SBS logon script which it looks like changes the default gateway every time it runs. Thanks for pointing me in the right direction.