|
|
This is my configuration Windows Vista Ultimate installed named VISTA1 and belongs to a workgroup named WORKGROUP. Vmware 6.5 is installed and Windows Server 2008 Enterprise (named WIN2008) is installed as a guest operating system. I want WS2008 to have several roles as: Web server, File Server, AD (Certificate Services, Domain Services, Federation Services, LDS) Application Server, File Services and DNS. I installed all of this and ran dcpromo.exe to promote WIN2008 to a domain controller and created a new forest. This created appropriate entries in DNS. Now this server is a part of MYDOMAIN.COM.
Now I want the host VISTA1 to join this domain and to be able to query DNS on WIN2008 server to resolve all external DNS lookup on the Internet. I have a DSL router that connects my internal network to the Internet.
Questions: 1. Is it possible to join a domain that is managed on the guest operating system from the host operating system? That would probably require me to have WIN2008 already started before I am prompted to login to the domain. I would prefer not to always run the guest OS. I would only like to start it when I am playing with the latest technologies. I mainly need it because of SQL Server 2008 functionality, AD Domain Services and as a IIS7
2. What would happen if WIN2008 is not started before getting a login prompt? Will I still be able to login (using cashed credientials).
3. The most important question is how to setup DNS to resolve external Internet lookups. I tried adding addresses of my ISP provider in Forwarders section and Server FQDN column reported <Unable to resolve> for both of these addresses. Primary DNS Secondary DNS 205.260.192.253 208.276.136.8 I tried both checking and uncheckng “ Use root hints if no forwarders are available†Currently I cannot go out to the Internet from WIN2008, while I could go before converting it to a domain controller. I believe the request end up in DNS and DNS cannot communicate to external DNS servers. Please advise
Thank you very much, Rad
This is my DSL Connection Information: -----------------------------------------------
IP Network Address PPP Primary DNS Secondary DNS 205.158.237.247 205.260.192.253 208.276.136.8
=====================================================
VISTA1: Windows IP Configuration ----------------------------------------------- Host Name . . . . . . . . . . . . : VISTA1: Primary Dns Suffix . . . . . . . : Node Type . . . . . . . . . . . . : Mixed IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : myhome.westell.com
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . : myhome.westell.com Description . . . . . . . . . . . : Intel(R) 82566DC-2 Gigabit Network Connection Physical Address. . . . . . . . . : 00-1D-C0-57-60-3B DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes IPv4 Address. . . . . . . . . . . : 192.168.1.47(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.255.0 Lease Obtained. . . . . . . . . . : Sunday, October 19, 2008 8:54:59 AM Lease Expires . . . . . . . . . . : Wednesday, October 22, 2008 11:56:25 AM Default Gateway . . . . . . . . . : 192.168.1.1 DHCP Server . . . . . . . . . . . : 192.168.1.1 DNS Servers . . . . . . . . . . . : 192.168.1.1 192.168.1.1 NetBIOS over Tcpip. . . . . . . . : Enabled
Ethernet adapter Local Area Connection 4:
Connection-specific DNS Suffix . : Description . . . . . . . . . . . : VMware Virtual Ethernet Adapter for VMnet1 Physical Address. . . . . . . . . : 00-50-16-C0-45-31 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes IPv4 Address. . . . . . . . . . . : 192.168.81.1(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : DNS Servers . . . . . . . . . . . : fec0:5:0:afff::1%1 fec0:5:0:afff::2%1 fec0:5:0:afff::3%1 NetBIOS over Tcpip. . . . . . . . : Enabled
|
|
To questions 1 and 2 - yes to everything you said. Question 3: Don't configure the DC to use your ISP's DNS servers in TCP/IP. The DC should only use its own IP (or 127.0.0.1) for DNS in TCP/IP. When you are configuring forwarding, you simply use the IP address of the server you are forwarding to. I hope you are not mistaken in saying "forwarding" because in forwarding, there is no concept "Primary" or "Secondary" server. Are you able to ping the ip addresses of the servers you are forwarding to? And are you sure that your ISP allows forwarding to those severs? Just for clarification, you DON'T have to forward to your ISP DNS servers. Windows DNS is able to use root hints to find information without any assistance from ISP's DNS servers.
Deji
"Rad" <Rad[ at ]discussions.microsoft.com> wrote in message news:79B0139F-62B2-474A-AE5E-4CE1DFF33945[ at ]microsoft.com...
[Quoted Text] > This is my configuration > Windows Vista Ultimate installed named VISTA1 and belongs to a workgroup > named WORKGROUP. > Vmware 6.5 is installed and Windows Server 2008 Enterprise (named WIN2008) > is installed as a guest operating system. > I want WS2008 to have several roles as: > Web server, File Server, AD (Certificate Services, Domain Services, > Federation Services, LDS) > Application Server, File Services and DNS. > I installed all of this and ran dcpromo.exe to promote WIN2008 to a domain > controller and created a new forest. > This created appropriate entries in DNS. Now this server is a part of > MYDOMAIN.COM. > > Now I want the host VISTA1 to join this domain and to be able to query DNS > on WIN2008 server to resolve all external DNS lookup on the Internet. > I have a DSL router that connects my internal network to the Internet. > > Questions: > 1. Is it possible to join a domain that is managed on the guest operating > system from the host operating system? > That would probably require me to have WIN2008 already started before I am > prompted to login to the domain. > I would prefer not to always run the guest OS. I would only like to start > it > when I am playing with the latest technologies. > I mainly need it because of SQL Server 2008 functionality, AD Domain > Services and as a IIS7 > > 2. What would happen if WIN2008 is not started before getting a login > prompt? Will I still be able to login (using cashed credientials). > > 3. The most important question is how to setup DNS to resolve external > Internet lookups. > I tried adding addresses of my ISP provider in Forwarders section and > Server > FQDN column reported <Unable to resolve> for both of these addresses. > Primary DNS > Secondary DNS > 205.260.192.253 > 208.276.136.8 > I tried both checking and uncheckng “ Use root hints if no forwarders are > available†> Currently I cannot go out to the Internet from WIN2008, while I could go > before converting it to a domain controller. > I believe the request end up in DNS and DNS cannot communicate to external > DNS servers. > Please advise > > > Thank you very much, > Rad > > > > This is my DSL Connection Information: > ----------------------------------------------- > > IP Network Address PPP > Primary DNS > Secondary DNS 205.158.237.247 > 205.260.192.253 > 208.276.136.8 > > ===================================================== > > VISTA1: Windows IP Configuration > ----------------------------------------------- > Host Name . . . . . . . . . . . . : VISTA1: > Primary Dns Suffix . . . . . . . : > Node Type . . . . . . . . . . . . : Mixed > IP Routing Enabled. . . . . . . . : No > WINS Proxy Enabled. . . . . . . . : No > DNS Suffix Search List. . . . . . : myhome.westell.com > > Ethernet adapter Local Area Connection: > > Connection-specific DNS Suffix . : myhome.westell.com > Description . . . . . . . . . . . : Intel(R) 82566DC-2 Gigabit Network > Connection > Physical Address. . . . . . . . . : 00-1D-C0-57-60-3B > DHCP Enabled. . . . . . . . . . . : Yes > Autoconfiguration Enabled . . . . : Yes > IPv4 Address. . . . . . . . . . . : 192.168.1.47(Preferred) > Subnet Mask . . . . . . . . . . . : 255.255.255.0 > Lease Obtained. . . . . . . . . . : Sunday, October 19, 2008 8:54:59 AM > Lease Expires . . . . . . . . . . : Wednesday, October 22, 2008 11:56:25 > AM > Default Gateway . . . . . . . . . : 192.168.1.1 > DHCP Server . . . . . . . . . . . : 192.168.1.1 > DNS Servers . . . . . . . . . . . : 192.168.1.1 > 192.168.1.1 > NetBIOS over Tcpip. . . . . . . . : Enabled > > Ethernet adapter Local Area Connection 4: > > Connection-specific DNS Suffix . : > Description . . . . . . . . . . . : VMware Virtual Ethernet Adapter for > VMnet1 > Physical Address. . . . . . . . . : 00-50-16-C0-45-31 > DHCP Enabled. . . . . . . . . . . : No > Autoconfiguration Enabled . . . . : Yes > IPv4 Address. . . . . . . . . . . : 192.168.81.1(Preferred) > Subnet Mask . . . . . . . . . . . : 255.255.255.0 > Default Gateway . . . . . . . . . : > DNS Servers . . . . . . . . . . . : fec0:5:0:afff::1%1 > fec0:5:0:afff::2%1 > fec0:5:0:afff::3%1 > NetBIOS over Tcpip. . . . . . . . : Enabled >
|
|
Thanks Deji. I guess there is no danger in joining a domain that resides in guest OS from the host OS. Let’s say I will do that. 4. Would you advise (is it possible) that I start guest OS (Windows 2008) in the host OS (Windows Vista) before I get the login prompt so I will have AD running and be ready to authenticate a user who wants to login into VISTA1 with a domain user name? I am reluctant to join domain until I resolve external DNS problem.
Regarding 3 question. I only use 127.0.0.1 address in TCP/IP for guest OS. I just copied and pasted Primary DNS and Secondary DNS IP addresses from "ipconfig/all" output and that is why you thought I did it in IP section. I added these 2 addresses in DNS Forwarders section when I figured I cannot go outside. I erased my ISP DNS server IP addresses from Forwarders tab and I only have “use root hints if no forwarder are available†grayed out and checked which should tell WIN2008 DNS server to resolve external IP addresses using root hints.
Bellow is ipconfig/all output for my notebook machine VES (33. bellow) and guest OS WIN2008 (22. Bellow) You will notice that pinging VISTA1 (33.bellow) works ok from VES but not from WIN2008 (11. Bellow)
Just as a note I selected NAT: Used to share the host’s IP address when I created VMWare VM. 5. Should not I have selected Bridged: Connected directly to the physical network? I am eager to make it working because I don’t have a spare dedicated machine for Windows server 2008.
Thanks, Rad
11. Pinging from WIN2008 guest OS doesn’t work==================================== C:\Users\admin>ping www.yahoo.com Ping request could not find host www.yahoo.com. Please check the name and try again.
C:\Users\admin>ping vesna
Pinging vesna [192.168.1.44] with 32 bytes of data: Reply from 192.168.1.25: Destination host unreachable. Reply from 192.168.1.25: Destination host unreachable. Reply from 192.168.1.25: Destination host unreachable. Reply from 192.168.1.25: Destination host unreachable.
Ping statistics for 192.168.1.44: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
22. Guest OS output for ipconfing/all======================================= WIN2008 Windows IP Configuration
Host Name . . . . . . . . . . . . : WIN2008 Primary Dns Suffix . . . . . . . : MYDOMAIN.COM Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : MYDOMAIN.COM
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network Connection Physical Address. . . . . . . . . : 01-0C-29-45-3C-AB DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes IPv4 Address. . . . . . . . . . . : 192.168.1.25(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.1.1 DNS Servers . . . . . . . . . . . : 127.0.0.1 NetBIOS over Tcpip. . . . . . . . : Enabled
Tunnel adapter Local Area Connection* 8:
Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : isatap.{0D7F2BC0-1CD3-4C71-A394-415E77C6125E} Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Local Area Connection* 9:
Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface Physical Address. . . . . . . . . : 02-00-54-55-4E-01 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes
33. Another machine VES (that uses wireless connection of westell DSL router) ipconfing/all output======================================= VES Windows IP Configuration
Host Name . . . . . . . . . . . . : VES Primary Dns Suffix . . . . . . . : Node Type . . . . . . . . . . . . : Mixed IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : myhome.westell.com
Ethernet adapter Local Area Connection:
Media State . . . . . . . . . . . : Media disconnected Description . . . . . . . . . . . : Realtek RTL8139/810x Family Fast Ethernet NIC Physical Address. . . . . . . . . : 04-C1-9F-6D-89-11
Ethernet adapter Network Bridge:
Connection-specific DNS Suffix . : myhome.westell.com Description . . . . . . . . . . . : MAC Bridge Miniport Physical Address. . . . . . . . . : 01-3E-37-C1-97-9C Dhcp Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes IP Address. . . . . . . . . . . . : 192.168.1.44 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.1.1 DHCP Server . . . . . . . . . . . : 192.168.1.1 DNS Servers . . . . . . . . . . . : 192.168.1.1 192.168.1.1 Lease Obtained. . . . . . . . . . : Wednesday, October 22, 2008 12:24:17 AM Lease Expires . . . . . . . . . . : Thursday, October 23, 2008 12:24:17 AM
C:\> ping VISTA1
Pinging wizard.myhome.westell.com [192.168.1.47] with 32 bytes of data:
Reply from 192.168.1.47: bytes=32 time=9ms TTL=64 Reply from 192.168.1.47: bytes=32 time=2ms TTL=64 Reply from 192.168.1.47: bytes=32 time=2ms TTL=64 Reply from 192.168.1.47: bytes=32 time=2ms TTL=64
Ping statistics for 192.168.1.47: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
"A, Deji" wrote:
[Quoted Text] > To questions 1 and 2 - yes to everything you said. > Question 3: > Don't configure the DC to use your ISP's DNS servers in TCP/IP. The DC > should only use its own IP (or 127.0.0.1) for DNS in TCP/IP. > When you are configuring forwarding, you simply use the IP address of the > server you are forwarding to. I hope you are not mistaken in saying > "forwarding" because in forwarding, there is no concept "Primary" or > "Secondary" server. Are you able to ping the ip addresses of the servers you > are forwarding to? And are you sure that your ISP allows forwarding to those > severs? Just for clarification, you DON'T have to forward to your ISP DNS > servers. Windows DNS is able to use root hints to find information without > any assistance from ISP's DNS servers. > > Deji > > "Rad" <Rad[ at ]discussions.microsoft.com> wrote in message > news:79B0139F-62B2-474A-AE5E-4CE1DFF33945[ at ]microsoft.com... > > This is my configuration > > Windows Vista Ultimate installed named VISTA1 and belongs to a workgroup > > named WORKGROUP. > > Vmware 6.5 is installed and Windows Server 2008 Enterprise (named WIN2008) > > is installed as a guest operating system. > > I want WS2008 to have several roles as: > > Web server, File Server, AD (Certificate Services, Domain Services, > > Federation Services, LDS) > > Application Server, File Services and DNS. > > I installed all of this and ran dcpromo.exe to promote WIN2008 to a domain > > controller and created a new forest. > > This created appropriate entries in DNS. Now this server is a part of > > MYDOMAIN.COM. > > > > Now I want the host VISTA1 to join this domain and to be able to query DNS > > on WIN2008 server to resolve all external DNS lookup on the Internet. > > I have a DSL router that connects my internal network to the Internet. > > > > Questions: > > 1. Is it possible to join a domain that is managed on the guest operating > > system from the host operating system? > > That would probably require me to have WIN2008 already started before I am > > prompted to login to the domain. > > I would prefer not to always run the guest OS. I would only like to start > > it > > when I am playing with the latest technologies. > > I mainly need it because of SQL Server 2008 functionality, AD Domain > > Services and as a IIS7 > > > > 2. What would happen if WIN2008 is not started before getting a login > > prompt? Will I still be able to login (using cashed credientials). > > > > 3. The most important question is how to setup DNS to resolve external > > Internet lookups. > > I tried adding addresses of my ISP provider in Forwarders section and > > Server > > FQDN column reported <Unable to resolve> for both of these addresses. > > Primary DNS > > Secondary DNS > > 205.260.192.253 > > 208.276.136.8 > > I tried both checking and uncheckng “ Use root hints if no forwarders are > > available†> > Currently I cannot go out to the Internet from WIN2008, while I could go > > before converting it to a domain controller. > > I believe the request end up in DNS and DNS cannot communicate to external > > DNS servers. > > Please advise > > > > > > Thank you very much, > > Rad > > > > > > > > This is my DSL Connection Information: > > ----------------------------------------------- > > > > IP Network Address PPP > > Primary DNS > > Secondary DNS 205.158.237.247 > > 205.260.192.253 > > 208.276.136.8 > > > > ===================================================== > > > > VISTA1: Windows IP Configuration > > ----------------------------------------------- > > Host Name . . . . . . . . . . . . : VISTA1: > > Primary Dns Suffix . . . . . . . : > > Node Type . . . . . . . . . . . . : Mixed > > IP Routing Enabled. . . . . . . . : No > > WINS Proxy Enabled. . . . . . . . : No > > DNS Suffix Search List. . . . . . : myhome.westell.com > > > > Ethernet adapter Local Area Connection: > > > > Connection-specific DNS Suffix . : myhome.westell.com > > Description . . . . . . . . . . . : Intel(R) 82566DC-2 Gigabit Network > > Connection > > Physical Address. . . . . . . . . : 00-1D-C0-57-60-3B > > DHCP Enabled. . . . . . . . . . . : Yes > > Autoconfiguration Enabled . . . . : Yes > > IPv4 Address. . . . . . . . . . . : 192.168.1.47(Preferred) > > Subnet Mask . . . . . . . . . . . : 255.255.255.0 > > Lease Obtained. . . . . . . . . . : Sunday, October 19, 2008 8:54:59 AM > > Lease Expires . . . . . . . . . . : Wednesday, October 22, 2008 11:56:25 > > AM > > Default Gateway . . . . . . . . . : 192.168.1.1 > > DHCP Server . . . . . . . . . . . : 192.168.1.1 > > DNS Servers . . . . . . . . . . . : 192.168.1.1 > > 192.168.1.1 > > NetBIOS over Tcpip. . . . . . . . : Enabled > > > > Ethernet adapter Local Area Connection 4: > > > > Connection-specific DNS Suffix . : > > Description . . . . . . . . . . . : VMware Virtual Ethernet Adapter for > > VMnet1 > > Physical Address. . . . . . . . . : 00-50-16-C0-45-31 > > DHCP Enabled. . . . . . . . . . . : No > > Autoconfiguration Enabled . . . . : Yes > > IPv4 Address. . . . . . . . . . . : 192.168.81.1(Preferred) > > Subnet Mask . . . . . . . . . . . : 255.255.255.0 > > Default Gateway . . . . . . . . . : > > DNS Servers . . . . . . . . . . . : fec0:5:0:afff::1%1 > > fec0:5:0:afff::2%1 > > fec0:5:0:afff::3%1 > > NetBIOS over Tcpip. . . . . . . . : Enabled > > > >
|
|
Read inline please.
In news:90F18580-F829-484B-A0D0-CF8B96B353FF[ at ]microsoft.com, Rad <Rad[ at ]discussions.microsoft.com> wrote:
[Quoted Text] > 11. Pinging from WIN2008 guest OS doesn't > work==================================== > C:\Users\admin>ping www.yahoo.com > Ping request could not find host www.yahoo.com. Please check the name > and try again. > > C:\Users\admin>ping vesna > > Pinging vesna [192.168.1.44] with 32 bytes of data: > Reply from 192.168.1.25: Destination host unreachable. > Reply from 192.168.1.25: Destination host unreachable. > Reply from 192.168.1.25: Destination host unreachable. > Reply from 192.168.1.25: Destination host unreachable. > > Ping statistics for 192.168.1.44: > Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Destination host unreachable usually means you have a routing table problem or an IPSec error. Notice that the packets are rejected by the server's own IP?
Lately I've seen serveral servers IPSec errors on Win2k3, in that case Win2k3 logs a 4292 event from IPSec.
You can run route print command to see the route table.
> > > 22. Guest OS output for > ipconfing/all======================================= WIN2008 Windows > IP Configuration > > Host Name . . . . . . . . . . . . : WIN2008 > Primary Dns Suffix . . . . . . . : MYDOMAIN.COM > Node Type . . . . . . . . . . . . : Hybrid > IP Routing Enabled. . . . . . . . : No > WINS Proxy Enabled. . . . . . . . : No > DNS Suffix Search List. . . . . . : MYDOMAIN.COM > > Ethernet adapter Local Area Connection: > > Connection-specific DNS Suffix . : > Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network > Connection Physical Address. . . . . . . . . : 01-0C-29-45-3C-AB > DHCP Enabled. . . . . . . . . . . : No > Autoconfiguration Enabled . . . . : Yes > IPv4 Address. . . . . . . . . . . : 192.168.1.25(Preferred) > Subnet Mask . . . . . . . . . . . : 255.255.255.0 > Default Gateway . . . . . . . . . : 192.168.1.1 > DNS Servers . . . . . . . . . . . : 127.0.0.1 > NetBIOS over Tcpip. . . . . . . . : Enabled
-- Best regards, Kevin D. Goodknecht Sr. [MVP] Hope This Helps
=================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue, to respond directly to me remove the nospam. from my email address. =================================== http://www.lonestaramerica.com/ http://support.wftx.us/ http://message.wftx.us/ =================================== Use Outlook Express?... Get OE_Quotefix: It will strip signature out and more http://home.in.tum.de/~jain/software/oe-quotefix/ =================================== Keep a back up of your OE settings and folders with OEBackup: http://www.oehelp.com/OEBackup/Default.aspx ===================================
|
|
|