Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Domain VPN / Map Drive Issue

12 Jan 2010   #1
jastronomy

Windows 7 Professional (OEM)
 
 
Domain VPN / Map Drive Issue

Hello,

I've got a Windows 7 Pro OS (64bit); connected and authenticated on the works domain (ipv4.dnsName = company.local). Inside the network (same physical switches); i can logon and map network drives to every share perfectly (part of the logon script for all users).

I use:
>net use X:\ \\company.local\DFSSHARE\VOLUME
Windows XP Pro uses the same command too and works also on site.

Taking the machines off site; we allocate users (esp laptop users) with a dedicated VPN (host-site virtual connection). again as part of the logon script drives are mapped. Windows XP users can remotely connect the VPN and logon; mapping all drives successfully.
However; windows 7 users; have to logon, connect the VPN, and re-attempt the map drives script (erroring). the VPN is perfect; outlook connects to our mailserver, we can ping every host, and even browse to see a list of machines. (yeah all firewalls turned off including hardware and software ones)

Usign a VPN on Win 7; Once logged in; I use the same VPN setup as XP; forcing the DHCP IP; but Fixing DNS (firewall doesn't announce them, but thats a seperate issue). that's it.
using the following on windows 7 pro and ultimate remotely (logged no as a network user) i get:
>net use X:\ \\company.local\DFSSHARE\VOLUME
System error 2221 has occured:

The user could not be found:
All off our company's mapped drives are inside this DFS structure (for redundency etc etc). And we cannot map to it.
From memory the DNS name "company.local" points to both domain controllers (dc-01 and dc-02); however when browsing the SMB shares; it looks up Active Directory DFS roots for "comapny.local" and displays all content.. again for Win XP Pro this is not a problem; just Windows 7. it's even worked on Windows Vista in the past so it's something new.


Has anyone got any ideas?
I have 4 machines now with this issue (needed in production yesterday); and expected to be getting more laptops sometime soon; so any help people can provide would be greatly appreciated.


My System SpecsSystem Spec
.

13 Jan 2010   #2
jastronomy

Windows 7 Professional (OEM)
 
 

Progress but not a complete fix.

It looks like Windows 7 (excluding the VPN) removes the DNS suffix from it's TCP NetBios name when it's assigned an IP from any other DHCP server (except works). So connecting to a 'home' wifi; allocates it's IP perfectly; and sets the DNS suffix to null.

Right that means that when the VPN is connected; the network adapter is set to have a fixed DNS suffix...
the dns suffic is "domain.local". (it works for Win XP, why should Win 7 be any different).

So... if i specify a set of ping commands locally (on the works LAN).
PING MAIL > successfully resolves mailservername.domain.local as the FQDN... and success,

on the VPN...
PING MAIL > suggessfully resolves (after a bit of a delay)... mailservername.domain.local as the FQDN... and again success.
PING MAIL.DOMAIN.LOCAL > response from mailservername.domain.local... perfect!

so DNS lookups take time and do work...unless you put the DNS suffix in... logical


Right... the penultimate problem still remains though...
The domain controllers share a common name (the domain name = "domain.local").

at work:
PING DOMAIN.LOCAL > resolves the FQDN as DOMAIN.LOCAL > response from the primary DC - success.

on the VPN:
PING DOMAIN.LOCAL > no FQDN resolved... DNS times out... no response...

Windows 7 cannot locate the FQDN for DOMAIN.LOCAL; but only through a VPN interface... looks like it only checks the Primary Network Adapter's DNS servers... because they are definately set.

god this is getting complicated...
My System SpecsSystem Spec
Reply

 Domain VPN / Map Drive Issue




Thread Tools





Similar help and support threads
Thread Forum
Windows 7 Password issue on domain
I have a windows server 2003 with a domain set up and the password security settings for it set up for things like 7 chars, Capital letter, non-capital letter etc, but it seems the Windows 7 users can't sucessfully change a password to meet the requirements. When they change it and the password...
General Discussion
VPN Network Shared Drive Error Domain/Non-Domain Differences
I'm running into a problem with connecting to network drives over a VPN. The common difference is whether or not the computer is part of the domain by default. 1) Computers connecting to VPN using local account on computer: Prompted for a domain login when attempting to use the network drives. ...
Network & Sharing
Domain issue
Our network has a policy for moving PC's not seen on the network for a given amount of time into an OU labelled "Inactive Computers" and the machine account disabled. If the PC remains in this OU for a certain amount of time it is eventually rolled off the network completely (the machine account...
Network & Sharing
Own domain 'junk' issue
hi guys, not really a 7 question, but i have my own domain and i find (mainly with hotmail) that all my emails keep going into junk folders, now ikno how to stop it from the other end, but any tips, or anything i can do to stop them going there in the first place?? i have a signatures...
Browsers & Mail
Domain Join issue
Hey Guys, Im a bit of a noob with Windows 7 and am currently fumbling my way through the OS. We are in the process of deploying Windows 7 to our domain. At the moment we have a Windows Server 2003 native domain but currently have Windows Server 2008 R2 Domain Controllers. We are having...
Network & Sharing
Double login issue on domain
I created an image for brand new computers with Windows 7 Professional/Enterprise 32 bit. These computers are connecting to an existing Windows Server 2003/8 domain. The computers were named the same as the old computers, but I removed the old computers from the domain before adding the new ones. I...
Network & Sharing

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 21:26.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App