Validation problem?

[Frank]

I have asked twice, to no avail. Perhaps my question is too broad. So ., I
will change it. If a W98se client (1 of 3) can access resources, email,
router to cable, internet, ping by name or IP address, server can ping
client both ways also, etc, etc but not be validated, is there a way to
force w2000 server DC to validate? (The hour glass and denial at stattup(no
domain controller was available to validtae your password) does not look too
good on my bosses desktop every morning.) All settings are identical to the
2 other w98se clients, one of the PC's is a clone also. I have tried, I
looked up creating an lmhost file,dns caches, you name it. There must be
something or somewhere else to look. Is there? Please can I get some help
here?
Thanks,
Frank

 

[Marina Roos]

Have you joined the W98 to the domain and are you using a valid username?
Check the networksettings on the W98 and make sure that the box loggin into
domain is checked and that the domainname is filled in.
Do you see the domainfield when the loginbox is showing after boot?

Marina

 

[Frank]

A response, great. The answer to all your questions is Yes. I forgot to
mention that this was a w98 client. I deleted partitions, reformatted(it
needed it badly, it had been updated from w95 to w98 years ago, and
incorrectly) After clean install of w98se , I checked all appropriate boxes
you mentioned, used same password and user name as before. After about 1
minute , the message appears(no domain controller was available to validate
your password, etc) and I click ok , another 30-45 seconds and all is
connected and works fine as stated. I did this to 2 other w98 clients a few
days before(exact same procedure and they are fine , validation is perfect,
etc?) I am new(taken and passed 210 &215 , working on 218, then exchange to
mcsa). we had a (outside tech) install a SMC cable router. I cannot remember
if it was before or after my problem. But, the client in question , gets to
the router and the internet no problem. There are 3 dns entries on all pcs,
because of the router. The order is router,router, dc. I have done my
homework , I have serched and searched. I have flushed, cleared, renewed,
etc, all of it. I am at my wits end here. I am thinking of paying the big
fee to M$ server support myself, but I hope it does not come to that, I am
not rich. thank you for your reply, it is the first and only reply in 10
days.
Frank L

 

[Nayden]

Who installed the DC? Do you see logon/logoff entries in
the security event log of that server? You mentioned it is
a W2000 DC - do you have DS Client installed on the 98
machine? Can you run an ipconfig on the DC, one of the
working 98 machines and the non-working 98 machine andpost
it here?

N

 

[Frank]

ClubSystems Group_A Company the club bought their accounting software from
installed the w2k DC on a new Dell1600sc and shipped it to us in florida. I
(with my instructors help, he is a cert trainer MS &novell&cisco, is an
mcse, cisco cert, novell cert, etc, etc,etc, he is not available to help me
at this time)setup MS Mail (yes, I know) & users on 5 winxp pro machines & 3
w98se& 1 me. All worked fine for 3 months now (until the reinstall of w98se
on the machine in question). DNS is installed. MS DS clients softwareis
installed on w98 machines. I did run Ipconfig /all on the w98se in question
& one of the working ones(the hardware clone) DNS, DHCP, default gateway
were identical, ip addresses were normal 192.168.1.104 &105. What did I
miss? I will check event viewer sunday. I will run ipconfig as asked and
post it here tomorrow(sunday) from work.
Thanks for the response,
Frank

 

[Marina Roos]

WINS installed on the server?
DNS should point to your server-IP.
In the DNS-server you should add the ISP-DNS-numbers on the tab Forwarders.
Got DHCP-options 003, 006, 044 and 046?

Marina

 

[Frank]

I have not re-installed DS client, I will on sunday.
DHCP is enabled, but a certified ? tech came out(before or after, I do not
recall) and installed our SMC cable router, He added 2 DNS ips for the ISP.
The dns order on clients is router/router/server. I need to check that also
I guess. But since the other 98 machines are validating, I assumed this was
correct? I really appreciate yours and Marinas efforts to help this
beginner. I am going in to work sunday to check out all that was mentioned
to me here and return here with my findings.
Thanks again,
Frank L

 

[Frank]

Well, I looked at a many of things everyone mentioned. These are the ones I
think might be related to my problem.

Windows 2000 IP configuration:

Server: xxxxxxxx (is correct)

Prim DNS Suf: domaine name (is correct)

Node type: broadcast

IP routing enabled: no

Wins proxy enabled: no

DNS Suffix searchlist: domaine.name (is correct)



Ethernet Adapter Intel Pro 1000 MT Gigabit, etc

Physical address OK

( I believe the guy who installed the router changed everything from here
on except the IP address of the server , which is 192.168.1.1

DHCP enabled: no ?

IP Address: 192.168.1.1

Subnet mask: 255.255.255.0

Default gateway: 192.168.1.2 (this is correct IP of the router)

DNS servers: 68.168.1.42

68.168.1.46

General tab of TCP/IP properties (server)

IP address, def Gateway, subnet mask are correct.

Preferred DNS server: 68.168.1.42

Alternate DNS server: 68.168.1.46



DHCP Scope Options 6 DNS servers set to (in this order)

68.168.1.42

68.168.1.46

192.168.1.1

PC in question is listed in Forward lookup zone "A" record



There are no WINS servers specified and it seems DHCP is coming from the ISP
(router)

3 other W98SE machines have no problem logging on. No forwarders are
desiganated.

I will check more tomorrow. I am trying and will keep trying. I do not have
the whole day to do this. I also have other work I must do.

Thanks

Frank

 

[Nayden]

As I mentioned earlier, your 98 desktop with DS Client
installed, is trying to find a DC to authenticate against,
and is having a REALLY hard time doing so with the DNS
servers of your ISP (68.168.1.42 and 68.168.1.46) since
they have no clue who your DC is to point your client to
it - hence the timeout messages you get, when the external
DNS servers reply with "I have no idea where to point you
to".
You need to make your DC/DNS server's IP the primary DNS
server in the client's properties, so that your client
knows to go to your DC first for anything DNS related, and
more importantly in this case, logon.
As Doug mentioned below, you will need to enable
forwarders on your DNS to so that your DNS/DC machine can
forward external name resolution requests to the DNS
servers of your ISP when your clients want to go out
surfing the Net. But one step at a time...

Nayden

 

[Frank]

Nayden,
The server DNS prefered and alternate are the 2 ISP DNS IPS. Also the server
ipconfig shows DHCP disabled, yet the clients (all ) ipconfig shows the
server IP as the DHCP? I think the guy chaged the DHCP tp the router/ISP? Is
that possible? Also, should the DNS of the Server point to itself? It isn't,
it is pointed to the ISP addresses. In the DHCP "scope options" 006 DNS
servers are the ISPS 68.168.1.42 &46. No mention of server IP. Option 15 DNS
Domaine name lists our domain as the value. Seems a bit screwy?
And thanks so much
Frank

 

[Marina Roos]

Let the server do the DHCP. Take out the ISP-DNS-numbers in your nic and put
in your server-IP. In option 015 just put in your server-IP.
In the tab Forwarder of your DNS-server you should put the ISP-DNS-numbers.

Marina

 

[Nayden]

Also, what you see in the ipconfig /all screen as DHCP -
disabled is for the server itself - it means that the
server is configured with a static IP and not getting its
IP from a DHCP server (and that is the way servers should
be). That has nothing to do with the DHCP service running
on the DC - you can check that by going to Control Panel -
Administrative Tools and opening the DHCP console. (you
may have to add the server's own name/IP to the console to
be able to see that) Alternatively, you can open the
Services applet and look for the DHCP Server service - if
it is running, then all is good and your DC is a DHCP also.

And don't forget to make the changes that Marina
recommended - put the DC's own IP as its DNS server (point
to itself) and enable forwarders (point to ISP's DNS
servers)

Nayden

 

[Frank]

Correction to my post of 11:30 am today. He "insists it's NOT dns. Also, I
must add he implied that I shouldn't believe every response I receive here,
not that you all know nothing. Sorry for the confusion.
Frank

 

[Marina Roos]

Frank,

Where are you now, meaning what have you changed?
If you get the properties of your DNS-server, does it point to your
server-IP on the first tab? Does the tab Forwarders have the enable option
and did you put the ISP-DNS-numbers in there?
Do you have DHCP-options 003, 006, 015, 044 and 046 and what's in there?
How many nics in the server and does the DNS-field in those nics point to
your server-IP?
What does the ipconfig/all from the client show? Is everything pointing to
your server-IP?

Marina

 

[Frank]

Hello Marina, Hello Nayden,
Today, (sunday 2:00pm) I went into work and nobody was there on any pcs. I
did as you and Nayden suggested. Forwarder options were grayed out, so I
deleted the root (.) reference in the forward lookup zone as mentioned on
an internet search . I pointed the server dns to itself and then was able to
enable forwarders as you and Nayden suggested. I put the 2 dns addresses of
the isp in the forwarders and no where else and it works fine now. The
internet connection thru the router is still there and works great., no more
error messages. Everyone here is so helpful, always, but Marina, you and
Nayden consistently replied and made suggestions, stuck by an inexperienced
IT person telling me what to look for. I learned so much, I thank you for
your perseverance. Today was the first day I was able to go in to the club
with nobody around to bother me or complain if I shut something down or
restarted. I am sure I will be back for advice, but I do not intend to
become a pest. This was such a bad deal for me , I am so happy to have it be
over. Thank you so much again. I learned a great deal here in the last week.
Sincerely
Frank L

 

[Frank]

Marina,
I did a lot of homework but You guys and gals solved it and thanks. My
70-218 (test #3 to MCSA) is October 9th. wish I could take you people with
me
Frank