Server 08 domain share folders problem

[KenL]

Dear all,

Our Server upgraded from SBS 2003 to Win Server 08 & Exchange 07 last year.
This email server is domain controller and we have one more file server
which is windows server 03 joins in the domain.
After upgraded the server, all of the User PC & email server cannot access
or see share folders of another PC & email server each other except the
email server can be able to access some windows vista PC.
But all of the PC & servers (include email & filer server) can access file
server share folders.
Could you tell me which setting in server is wrong that cause this problem?

Thanks a lot.

KenL

 

[Lanwench [MVP - Exchange]]

Dear all,

Our Server upgraded from SBS 2003 to Win Server 08 & Exchange 07 last
year. This email server is domain controller and we have one more
file server which is windows server 03 joins in the domain.
After upgraded the server, all of the User PC & email server cannot
access or see share folders of another PC & email server each other
except the email server can be able to access some windows vista PC.
But all of the PC & servers (include email & filer server) can access
file server share folders.
Could you tell me which setting in server is wrong that cause this
problem?
Thanks a lot.

KenL

Perhaps OT....
You can't "upgrade" from SBS - you can *migrate*.

I don't find anything wrong at all in your setup. Why do you have data
shares on your workstations? Doin't do that. Store all data on the server(s)
and don't allow users admin rights on their workstations so they can't
create their own shares. I suspect the issue is with firewall rules, but
it's as it should be - don't treat workstations as servers (and vice versa).
Things will work much better that way.

 

[Meinolf Weber [MVP-DS]]

Hello KenL,

Shares in a domain should be located on a file server not on workstations,
you create yourself a mess with having shares on user machines.

For your problem please describe more detailed how they are connecting.

You said you upgraded the SBS to normal version, how did you do it, normally
youhave to migrate from SBS, means you can not insert the "normal" version
into the SBS machine and choose upgrade?

Also post an uneidted ipconfig /all from a problem machine, a Vista which
is working and both servers in use.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

 

[KenL]

Dear Lanwench/Meinolf,

Sorry to have made you misunderstanding in this case.
I formatted the SBS 2003 server and install a new server 08 & Exchange
server 07.
The problem is can see the network domain name and others pc name, but
cannot open and see the other pc share folders or share printer.
The error message of my Win Vista is 0x80070035
http://support.microsoft.com/kb/958285/en-us
Sometimes, some of the admin pc will copy files each other, I think this
setting will more convenient.
I will avoid setting share folders between the user pc.

Thanks a lot.

KenL

 

[Meinolf Weber [MVP-DS]]

Hello KenL,

When you created a complete new domain did you add the machines to the new
domain and create new users, groups, etc. in AD UC? Or are the workstations
still on the "old" domain and the users work with cached credentials locally?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

 

[KenL]

Dear Meinolf,

All of the workstations had already re-config to join to the new domain AD.
Thanks.

KenL

 

[Meinolf Weber [MVP-DS]]

Hello KenL,

Ok, please post an unedited ipconfig /all from a problem machine, the server
and a running one.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

 

[KenL]

Dear Meinolf,

Server 08
**********************************
Windows IP Configuration

Host Name . . . . . . . . . . . . : Islermail
Primary Dns Suffix . . . . . . . : isler.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : isler.local
isler.com.hk

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : isler.com.hk
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
Physical Address. . . . . . . . . : 00-1A-64-49-5E-52
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . :
fe80::c0c4:84ca:71fc:f092%10(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.1.2(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
IPv4 Address. . . . . . . . . . . : 218.103.89.81(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.254
DNS Servers . . . . . . . . . . . : ::1
192.168.1.2
218.102.32.208
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter Local Area Connection* 8:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : isler.com.hk
Description . . . . . . . . . . . : isatap.isler.com.hk
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 11:

Connection-specific DNS Suffix . : isler.com.hk
Description . . . . . . . . . . . : 6TO4 Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2002:da67:5951::da67:5951(Preferred)
Default Gateway . . . . . . . . . : 2002:c058:6301::c058:6301
DNS Servers . . . . . . . . . . . : ::1
192.168.1.2
218.102.32.208
NetBIOS over Tcpip. . . . . . . . : Disabled
*****************************************

Windows XP
*****************************************
Windows IP Configuration

Host Name . . . . . . . . . . . . : ericyung
Primary Dns Suffix . . . . . . . : isler.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : isler.local
ISLER

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : ISLER
Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network
Connection
Physical Address. . . . . . . . . : 00-13-20-E1-31-4A
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.1.59
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.254
DHCP Server . . . . . . . . . . . : 192.168.1.254
DNS Servers . . . . . . . . . . . : 192.168.1.2
218.102.32.208
203.198.23.208
Primary WINS Server . . . . . . . : 192.168.1.2
Secondary WINS Server . . . . . . : 192.168.1.1
Lease Obtained. . . . . . . . . . : Wednesday, June 10, 2009 8:15:27
AM
Lease Expires . . . . . . . . . . : Thursday, June 11, 2009 8:15:27
AM

*****************************************

Thank you.

Best regards,
KenL

 

[Meinolf Weber [MVP-DS]]

Hello KenL,

Your server is multihomed, a really bad decision for DCs if not SBS is the
OS version. So this creates a big conflict with an public ip and the private
on the NIC. Shares are not working properly, GPOs are not applied correct,
clients logon can take long times etc.etc.etc.

Also if not used disable IPv6 on the server, you can use this article from
Paul:
http://blogs.dirteam.com/blogs/paulbergson/archive/2009/03/19/disabling-ipv6-on-windows-2008.aspx

Also remove the public ip address from the server, domain internal use only
the private ip range 192.168.x.x

Same applies to the clients, they should only use the domain DNS server 192.168.1.2
on the NIC.

For internet access configure the FORWARDERS on the DNS server properties
in the DNS management console with the ISPs DNS server 218.102.32.208.

Additional remove DHCP server from the router and use instead the 2008 server
for it, there you have lot more configuration options and it works together
with DNS registration/updates of records in the DNS zones.
http://technet.microsoft.com/en-us/library/cc787034.aspx

You use multiple DNS domain names on the DNS suffix search list from server
and client:
isler.local isler.com.hk ISLER

So your ISP have to point the external domain name to your public ip address,
which should have a port forwarding to your internal ip address in your router.
This prevents the multiple ip addresses and the connection from the Domain
controller direct to the internet.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm