Vlans and Computer Management Remote Sessions

[g8orade]

Thanks in advance, I have several computers that I need to use the Computer Management console from another Vlan and cannot. On same Windows domain, but cannot connect from a computer on a different vlan. I have admin rights, can ping the box, but cannot remotely connect. SP 2 is installed, any ideas?
Thanks,
g8orade

 

[WANguy2k]

Do the users on your VLAN have full access to the rest of the network? Are you allowing all ports in/out of the VLAN? Is your VLAN set up in Active Directory Sites and Services? Can you access \\VLAN_PC\c$ from where you are? We have VLANs set up here with no problems. Based on your answers I might be able to help.

 

[g8orade]

I added the subnet to the sites list along with the default vlan1, I cannot access the machine using \\machinename\C$. I can ping the machine by name or number. The vlans at this time have no port restrictions. I will verify again after a reboot of the machines.
Thanks,
g8orade.

 

[WANguy2k]

OK. If you can ping by name and number it's not a routing or DNS issue. Several things can enable/disable remote management, including a group policy, RPC service, etc. What error do you get when you try to connect to the VLAN machine using the MMC? Is it "the network path cannot be found" or something else?

Also, you have a domain server and DNS server on the vlan?

 

[WANguy2k]

One more thing -- If you look at your domain in network places, do you see all the PCS in the VLAN listed? If so, try creating a new share on a VLAN PC and give domain admins full access to it. Can you access the new share from a machine outside the VLAN?

 

[g8orade]

Thanks WANguy2k,
I can connect to existing shares thats on the domain. But when I try to browse the domain I get "Domain-name is not accessible. You might not have permission to use this network resource. Contact the administrator of the server to find out if you have access permissions. The list of servers for this workgroup is not currently available. The message on the C$ to the machine is "no provider accepted the given network path." However the shares that are already on the domain I can access.
G8orade

 

[WANguy2k]

Sorry to keep answering your questions with more questions, but I'm trying to get a handle on your setup and eliminate possibilities.

1. When you browse the domain you see the PCs on your subnet, but not the other VLAN, correct? Or you can't browse the domain at all?

2. This is a Windows domain, not a workgroup, correct? All PCs are in the same domain?

3. The PCs in your VLAN gave the same default gateway, DNS, and WINS server as the other PCS? (I'm assuming you're using a layer 3 switch with routing capabilities, or you wouldn't be able to ping them).

4. File and printer sharing is on?

5. You see entries for the VLAN PCs in your WINS and DNS databases?

6. Can you access an admin share on a VLAN PC by using the IP address? (\\192.168.1.1\c$)