DNS issue 1

[andyds]

I have my MS Windows 2003 Server (Enterprise) R2 running as a DNS server.

I have a slight problem that when I ping clients by IP address or their DNS name, the result returned is always “Request timed out”. Even when the client is on and I know the IP address is correct.
Interestingly when I ping by DNS name then it will return “Pinging dnsname.domain.com [IP address]the IP address of the machine next to it but still “request timed out” will appear with 100% loss.

Can anyone shed any light on this?

There are no error logs in the event viewer for DNS.

 

[nicksheppard]

It doesn't sound like there's anything wrong with DNS. When you PING by a computer DNS name it IS being resolved to an IP address but it is then the PING that is failing.

Sounds like it could be a firewall issue. If your clients are running XP sp2 for example they will have a personal firewall running that blocks PING (icmp) traffic. To check bring up the network properties on a machine you are trying to ping and see if the Local area connection has a padlock icon.

Is this is the case you'll need to either switch off the firewall completely or edit it to allow ICMP echo requests.

 

[andyds]

You where right. I have a GPO that restricts network connections for standard users. When an Administrator logs in you can ping the machine fine. How can I edit the GPO to allow ICMP echo requests whilst keeping my restrictions?

 

[nicksheppard]

It depends how you're deploying policy as to where you set things up. I'd recommend including this in your default domain policy assuming you want to allow ping through the domain.

In the policy access:

Computer configuration
Administrative templates
Network
Network connections
Windows firewall
Domain profile

Then there is a setting marked 'windows firewall:allow ICMP exceptions'

You will need to activate the feature and allow inbound echo requests.

Note this will only affect your XP sp2 systems.....

 

[pakki]

I have home based router provided by verizon. I disabled DHCP on the router and have my MS Windows 2003 Server (Enterprise) R2 running as a DNS server. I have windows xp clients which are working fine. but I am unable to go to internet through none of the either server or client. My forwarder is set to 192.168.1.1 and everyhing seems to be OK. Pl. guide. The intersting thing if I use two network cards then I don't see any problem