Why does DNS give a default website?

[atdawgie]

Hi,

I have my DNS server at 192.168.0.2
my public website is

http://www.mycompany.com

my internal active directory is at ad.mycompany.com which my workstations are members of. My network configuration for the workstations is setup like this:

IP: 192.168.0.100
Mask: 255.255.255.0
Gateway 192.168.0.1
DNS: 192.168.0.2

When I type in a non existent url in the browser, eg.

http://www.blah-one.com

the browser always defaults to

http://www.mycompany.com

instead of giving me an error saying that the address does not exist. Why is this? Someone said it might be roothints in my DNS? If so what do roothints do?

Thanks,
Aaron

 

[fregeama]

Are you using proxies in your company?

I doubt very much that DNS would be doing this. I figure your browser is configured to go to your default website if it cannot find the correct website.

No idea what root hints could be, never heard of that before.

 

[FaiTHLeSS]

Do you have a forward lookup zone as just a ".", this is a root zone if so then delete it.

Root hints servers are the main backbone DNS servers for the internet. But this is most likely not your problem.

Just a few things to try, what happens if you try and ping

http://www.blah-one.com

assuming this site doesnt exisit at all, if it fails to respond then it most likely isnt a DNS problem.

It more likely that something has been configured on your network to redirect the broswer if it cant find the site.

 

[FaiTHLeSS]

Another thing to try if your running a windows domain is to try and create a new user but dont include that user in any sort of policy that the other users are using. Then see what happens when they try going to a site that doesnt exist this will let you check if some sort of user policy in AD is causing this problem.

This is assuming you arent running any sort of proxy server, if you are running a proxy server i would start by trouble shooting the proxy server frist.

 

[atdawgie]

There is forward lookup zone "."

I found that if the computer is not a member of the active directory domain ad.mycompany.com and it just a member of a workgroup, if I type in

http://www.blah-one.com

if fails with a "page not found" error which is correct. I ping

http://www.blah-one.com

and it can't find the host.

But if I add the computer to the active directory ad.mycompany.com then it defaults to our company website. Even if I block all inheritance in group policy and the computer is in a separate OU I still get this problem. I ping

http://www.blah-one.com

and it results in:

pinging

http://www.blah-one.com.ad.mycompany.com

[public IP address]with 32 bytes of data
request timed out
request timed out..

Would it have anything to do with our public domain being

http://www.mycompany.com

and our internal active directory being ad.mycompany.com? Is it somehow getting wires crossed?

 

[FaiTHLeSS]

--There is forward lookup zone "."

Assuming you have forwarders setup pointing to your ISP or some other public DNS servers for external resolution then there is no need to have the "." zone there.

To me it looks like it may be some policy causing it, even if you disable the policy it could still be keeping some of the settings it had before you have blocked permissions to it for that acc. Have you tried recreating the user profile after blocking the permissions for that user to access the policy.

Also try going through your policy(s) and just checking.

Try using GPMC it might be clearer about showing what things you have changed.

http://www.microsoft.com/downloads/...24-8CBD-4B35-9272-DD3CBFC81887&displaylang=en

 

[atdawgie]

Hi, I followed your instructions but it still results in the same problem. I can't use GPMC because I have windows 2000. Is there another tool I can use to see what policies are set or what area in group policy might be causing this? We are not running a proxy server.

 

[FaiTHLeSS]

Not that i know of, there might be some 3rd party products but unsure on that.

You might just have to go through your policy and check each of the settings to see if any of them are affecting it.

I cant think of anything else which would be causing this problem of it default to your website.