group policy and dns question

[ahmtech123]

Hi we applied a default domain policy this week, with no changed to IE what so ever except storing user name and password is not allowed. Our users can get to all websites except for a select few that don’t work. All of these web sites reportedly worked fine up until this week.

http://www.mktalert.net/default.asp

https://services.hdsoftware.net/usbhm-mrbp/

https://netteller.texascatholiccu.com/teller

We’ve exhausted all of our normal network trouble-shooting procedures aside from packet captures. It doesn’t seem to be DNS related and it doesn’t seem to be proxy specific either. When the user attempts to get to the web site I can see the source/destination traffic going in both directions, but the user simply gets “cannot find server / dns error”.

Wondering if these three polocies could effect it:
Network access: Allow anonymous SID/Name translation
Network access: Do not allow anonymous enumeration of SAM accounts
Network access: Do not allow anonymous enumeration of SAM accounts and shares
Network access: Do not allow storage of credentials or .NET Passports for network authentication

all these are enabled. I have removed them from the gpo and they can seem to get to the sites fine. Any ideas any one else have this problem.
Thanks.

 

[Larsdemo]

try ping the site on a pc where it is working and then fill the ip in stead of the site name in the address field in IE if this works then it is dns related.

lars

ps dont think that that policys are causing this, disable the policy and see if yuo still cant access the sites. You can use gpupdate to update the policys from the server and gpresult to see if the default pol applyed.


Network admin for worldwide freight forwarders company.
mcp mcsa\: Messaging mcse -2003