Vista - Solved Joining Vista to Domain Problem

10-12-2007

I was having a terrible time getting a new Vista workstation to join the
domain at work. The solution for me was to go into the TCP/IP settings on
the Vista machine and make sure the DNS address listed first was that of our
local DC (which is also our file server). The secondary address is that of
our ISP's servers. XP didn't have a problem when only our ISP's DNS address
was listed but Vista needs the DNS address of our server explicitly.
Since our server is also a DHCP server, I could also add our server's DNS
address there and let the workstations stay set to "Obtain DNS server
address automatically".

Hope this will help someone!

Tom Lake

10-12-2007

Thank you for the update. For the security and performance, you should use
the internal DNS only.

--
Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.HowToNetworking.com

<toml_12953@xxxxxx> wrote in message
news:8BBD26E2-71A6-4552-9DC5-B191F1804D44@xxxxxx

Quote:

>I was having a terrible time getting a new Vista workstation to join the
>domain at work. The solution for me was to go into the TCP/IP settings on
>the Vista machine and make sure the DNS address listed first was that of
>our local DC (which is also our file server). The secondary address is
>that of our ISP's servers. XP didn't have a problem when only our ISP's
>DNS address was listed but Vista needs the DNS address of our server
>explicitly.
> Since our server is also a DHCP server, I could also add our server's DNS
> address there and let the workstations stay set to "Obtain DNS server
> address automatically".
>
> Hope this will help someone!
>
> Tom Lake

10-13-2007

"Robert L (MS-MVP)" <noreply@xxxxxx> wrote in message
news:OvgyLxUDIHA.4584@xxxxxx

Quote:

> Thank you for the update. For the security and performance, you should use
> the internal DNS only.

When I tried that, I could no longer access the Internet from the
workstation.

Tom Lake

10-13-2007

toml_12953@xxxxxx wrote:

Quote:

>
>
> "Robert L (MS-MVP)" <noreply@xxxxxx> wrote in message
> news:OvgyLxUDIHA.4584@xxxxxx

Quote:

>> Thank you for the update. For the security and performance, you should
>> use the internal DNS only.

>
> When I tried that, I could no longer access the Internet from the
> workstation.

Then you probably forgot to set forward/reverse lookup zones on the
server. Briefly, correct DNS set up needs the server to only look to
itself for DNS with the lookup zones set for Internet access. All
workstations should only look to the server for DNS.

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

10-13-2007

"Malke" <notreally@xxxxxx> wrote in message
news:O4IooZZDIHA.5228@xxxxxx

Quote:

> toml_12953@xxxxxx wrote:

Quote:

>>
>>
>> "Robert L (MS-MVP)" <noreply@xxxxxx> wrote in message
>> news:OvgyLxUDIHA.4584@xxxxxx

Quote:

>>> Thank you for the update. For the security and performance, you should
>>> use the internal DNS only.

>>
>> When I tried that, I could no longer access the Internet from the
>> workstation.

>
> Then you probably forgot to set forward/reverse lookup zones on the
> server. Briefly, correct DNS set up needs the server to only look to
> itself for DNS with the lookup zones set for Internet access. All
> workstations should only look to the server for DNS.

Thanks! I'll check it on Monday when I'm back at work. I do know I have
forward and reverse lookup zones but I don't know if they're set for
Internet access.

Tom Lake

10-13-2007

<toml_12953@xxxxxx> wrote in message
news:1D1DD465-F8E4-4A59-AA4A-57F94C805517@xxxxxx

Quote:

>
>
> "Robert L (MS-MVP)" <noreply@xxxxxx> wrote in message
> news:OvgyLxUDIHA.4584@xxxxxx

Quote:

>> Thank you for the update. For the security and performance, you should
>> use the internal DNS only.

>
> When I tried that, I could no longer access the Internet from the
> workstation.
>

You need to setup root hints or forwarders on your internal DNS server then
have all clients use only the internal DNS server. Removing the ISPs DNS
will probably speed up the XP clients for some network operations as well as
make Vista work properly.

I recommend you use forwarders. If your server is SBS 2003 then running the
IECW wizard will setup DNS and DHCP for you.

http://technet2.microsoft.com/window....mspx?mfr=true

http://technet2.microsoft.com/window....mspx?mfr=true

http://support.microsoft.com/kb/323380

--
Kerry Brown
Microsoft MVP - Shell/User
http://www.vistahelp.ca

10-15-2007

"Kerry Brown" <kerry@xxxxxx-tems.c*a*m> wrote in message
news:06EA933F-1AE7-4807-BE08-A6F4CF3FE4DD@xxxxxx

Quote:

> <toml_12953@xxxxxx> wrote in message
> news:1D1DD465-F8E4-4A59-AA4A-57F94C805517@xxxxxx

Quote:

>>
>>
>> "Robert L (MS-MVP)" <noreply@xxxxxx> wrote in message
>> news:OvgyLxUDIHA.4584@xxxxxx

Quote:

>>> Thank you for the update. For the security and performance, you should
>>> use the internal DNS only.

I have it all working now with the DHCP server handing out our server's DNS
address (rather than our ISP's DNS address) along with an IP address.
You're right; The remaining XP machines log on faster and we can still
access the Internet.

Thank you so much to all who responded!

Tom Lake

10-15-2007

"Tom Lake" <tlake@xxxxxx> wrote in message
news:Opo0m6yDIHA.5980@xxxxxx

Quote:

>
> I have it all working now with the DHCP server handing out our server's
> DNS address (rather than our ISP's DNS address) along with an IP address.
> You're right; The remaining XP machines log on faster and we can still
> access the Internet.
>
> Thank you so much to all who responded!
>

You're welcome.

--
Kerry Brown
Microsoft MVP - Shell/User
http://www.vistahelp.ca

10-12-2007	#1 (permalink)
n/a posts	Solved Joining Vista to Domain Problem I was having a terrible time getting a new Vista workstation to join the domain at work. The solution for me was to go into the TCP/IP settings on the Vista machine and make sure the DNS address listed first was that of our local DC (which is also our file server). The secondary address is that of our ISP's servers. XP didn't have a problem when only our ISP's DNS address was listed but Vista needs the DNS address of our server explicitly. Since our server is also a DHCP server, I could also add our server's DNS address there and let the workstations stay set to "Obtain DNS server address automatically". Hope this will help someone! Tom Lake
My System Specs

10-12-2007	#2 (permalink)
Robert L \(MS-MVP\) n/a posts	Re: Solved Joining Vista to Domain Problem Thank you for the update. For the security and performance, you should use the internal DNS only. -- Bob Lin, MS-MVP, MCSE & CNE Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com <toml_12953@xxxxxx> wrote in message news:8BBD26E2-71A6-4552-9DC5-B191F1804D44@xxxxxx Quote: >I was having a terrible time getting a new Vista workstation to join the >domain at work. The solution for me was to go into the TCP/IP settings on >the Vista machine and make sure the DNS address listed first was that of >our local DC (which is also our file server). The secondary address is >that of our ISP's servers. XP didn't have a problem when only our ISP's >DNS address was listed but Vista needs the DNS address of our server >explicitly. > Since our server is also a DHCP server, I could also add our server's DNS > address there and let the workstations stay set to "Obtain DNS server > address automatically". > > Hope this will help someone! > > Tom Lake
My System Specs

10-13-2007	#3 (permalink)
n/a posts	Re: Solved Joining Vista to Domain Problem "Robert L (MS-MVP)" <noreply@xxxxxx> wrote in message news:OvgyLxUDIHA.4584@xxxxxx Quote: > Thank you for the update. For the security and performance, you should use > the internal DNS only. When I tried that, I could no longer access the Internet from the workstation. Tom Lake
My System Specs

10-13-2007	#4 (permalink)
Malke n/a posts	Re: Solved Joining Vista to Domain Problem toml_12953@xxxxxx wrote: Quote: > > > "Robert L (MS-MVP)" <noreply@xxxxxx> wrote in message > news:OvgyLxUDIHA.4584@xxxxxx Quote: >> Thank you for the update. For the security and performance, you should >> use the internal DNS only. > > When I tried that, I could no longer access the Internet from the > workstation. Then you probably forgot to set forward/reverse lookup zones on the server. Briefly, correct DNS set up needs the server to only look to itself for DNS with the lookup zones set for Internet access. All workstations should only look to the server for DNS. Malke -- Elephant Boy Computers www.elephantboycomputers.com "Don't Panic!" MS-MVP Windows - Shell/User
My System Specs

10-13-2007	#5 (permalink)
n/a posts	Re: Solved Joining Vista to Domain Problem "Malke" <notreally@xxxxxx> wrote in message news:O4IooZZDIHA.5228@xxxxxx Quote: > toml_12953@xxxxxx wrote: Quote: >> >> >> "Robert L (MS-MVP)" <noreply@xxxxxx> wrote in message >> news:OvgyLxUDIHA.4584@xxxxxx Quote: >>> Thank you for the update. For the security and performance, you should >>> use the internal DNS only. >> >> When I tried that, I could no longer access the Internet from the >> workstation. > > Then you probably forgot to set forward/reverse lookup zones on the > server. Briefly, correct DNS set up needs the server to only look to > itself for DNS with the lookup zones set for Internet access. All > workstations should only look to the server for DNS. Thanks! I'll check it on Monday when I'm back at work. I do know I have forward and reverse lookup zones but I don't know if they're set for Internet access. Tom Lake
My System Specs

10-13-2007	#6 (permalink)
Kerry Brown n/a posts	Re: Solved Joining Vista to Domain Problem <toml_12953@xxxxxx> wrote in message news:1D1DD465-F8E4-4A59-AA4A-57F94C805517@xxxxxx Quote: > > > "Robert L (MS-MVP)" <noreply@xxxxxx> wrote in message > news:OvgyLxUDIHA.4584@xxxxxx Quote: >> Thank you for the update. For the security and performance, you should >> use the internal DNS only. > > When I tried that, I could no longer access the Internet from the > workstation. > You need to setup root hints or forwarders on your internal DNS server then have all clients use only the internal DNS server. Removing the ISPs DNS will probably speed up the XP clients for some network operations as well as make Vista work properly. I recommend you use forwarders. If your server is SBS 2003 then running the IECW wizard will setup DNS and DHCP for you. http://technet2.microsoft.com/window....mspx?mfr=true http://technet2.microsoft.com/window....mspx?mfr=true http://support.microsoft.com/kb/323380 -- Kerry Brown Microsoft MVP - Shell/User http://www.vistahelp.ca
My System Specs

10-15-2007	#7 (permalink)
Tom Lake n/a posts	Re: Solved Joining Vista to Domain Problem "Kerry Brown" <kerry@xxxxxx-tems.cam> wrote in message news:06EA933F-1AE7-4807-BE08-A6F4CF3FE4DD@xxxxxx Quote: > <toml_12953@xxxxxx> wrote in message > news:1D1DD465-F8E4-4A59-AA4A-57F94C805517@xxxxxx Quote: >> >> >> "Robert L (MS-MVP)" <noreply@xxxxxx> wrote in message >> news:OvgyLxUDIHA.4584@xxxxxx Quote: >>> Thank you for the update. For the security and performance, you should >>> use the internal DNS only. I have it all working now with the DHCP server handing out our server's DNS address (rather than our ISP's DNS address) along with an IP address. You're right; The remaining XP machines log on faster and we can still access the Internet. Thank you so much to all who responded! Tom Lake
My System Specs

10-15-2007	#8 (permalink)
Kerry Brown n/a posts	Re: Solved Joining Vista to Domain Problem "Tom Lake" <tlake@xxxxxx> wrote in message news:Opo0m6yDIHA.5980@xxxxxx Quote: > > I have it all working now with the DHCP server handing out our server's > DNS address (rather than our ISP's DNS address) along with an IP address. > You're right; The remaining XP machines log on faster and we can still > access the Internet. > > Thank you so much to all who responded! > You're welcome. -- Kerry Brown Microsoft MVP - Shell/User http://www.vistahelp.ca
My System Specs

Similar Threads
Thread	Forum
Problem after joining domain	Network & Sharing
Problem joining AD domain	Network & Sharing
Problem in joining Domain	Vista account administration
Vista Beta 2 and joining Win2k3 domain problem	Vista networking & sharing
Vista Beta 2 and joining Win2k3 domain problem	Vista networking & sharing