Server 08 domain share folders problem

Discussion in 'Windows Vista General Discussion' started by KenL, Jun 5, 2009.

  1. KenL

    KenL Guest

    Dear all,

    Our Server upgraded from SBS 2003 to Win Server 08 & Exchange 07 last year.
    This email server is domain controller and we have one more file server
    which is windows server 03 joins in the domain.
    After upgraded the server, all of the User PC & email server cannot access
    or see share folders of another PC & email server each other except the
    email server can be able to access some windows vista PC.
    But all of the PC & servers (include email & filer server) can access file
    server share folders.
    Could you tell me which setting in server is wrong that cause this problem?

    Thanks a lot.

    KenL
     
    KenL, Jun 5, 2009
    #1
    1. Advertisements


  2. Perhaps OT....
    You can't "upgrade" from SBS - you can *migrate*.

    I don't find anything wrong at all in your setup. Why do you have data
    shares on your workstations? Doin't do that. Store all data on the server(s)
    and don't allow users admin rights on their workstations so they can't
    create their own shares. I suspect the issue is with firewall rules, but
    it's as it should be - don't treat workstations as servers (and vice versa).
    Things will work much better that way.
     
    Lanwench [MVP - Exchange], Jun 5, 2009
    #2
    1. Advertisements

  3. Hello KenL,

    Shares in a domain should be located on a file server not on workstations,
    you create yourself a mess with having shares on user machines.

    For your problem please describe more detailed how they are connecting.

    You said you upgraded the SBS to normal version, how did you do it, normally
    youhave to migrate from SBS, means you can not insert the "normal" version
    into the SBS machine and choose upgrade?

    Also post an uneidted ipconfig /all from a problem machine, a Vista which
    is working and both servers in use.

    Best regards

    Meinolf Weber
     
    Meinolf Weber [MVP-DS], Jun 6, 2009
    #3
  4. KenL

    KenL Guest

    Dear Lanwench/Meinolf,

    Sorry to have made you misunderstanding in this case.
    I formatted the SBS 2003 server and install a new server 08 & Exchange
    server 07.
    The problem is can see the network domain name and others pc name, but
    cannot open and see the other pc share folders or share printer.
    The error message of my Win Vista is 0x80070035
    http://support.microsoft.com/kb/958285/en-us
    Sometimes, some of the admin pc will copy files each other, I think this
    setting will more convenient.
    I will avoid setting share folders between the user pc.

    Thanks a lot.

    KenL
     
    KenL, Jun 7, 2009
    #4
  5. Hello KenL,

    When you created a complete new domain did you add the machines to the new
    domain and create new users, groups, etc. in AD UC? Or are the workstations
    still on the "old" domain and the users work with cached credentials locally?

    Best regards

    Meinolf Weber
     
    Meinolf Weber [MVP-DS], Jun 7, 2009
    #5
  6. KenL

    KenL Guest

    Dear Meinolf,

    All of the workstations had already re-config to join to the new domain AD.
    Thanks.

    KenL
     
    KenL, Jun 8, 2009
    #6
  7. Hello KenL,

    Ok, please post an unedited ipconfig /all from a problem machine, the server
    and a running one.

    Best regards

    Meinolf Weber
     
    Meinolf Weber [MVP-DS], Jun 9, 2009
    #7
  8. KenL

    KenL Guest

    Dear Meinolf,

    Server 08
    **********************************
    Windows IP Configuration

    Host Name . . . . . . . . . . . . : Islermail
    Primary Dns Suffix . . . . . . . : isler.local
    Node Type . . . . . . . . . . . . : Hybrid
    IP Routing Enabled. . . . . . . . : No
    WINS Proxy Enabled. . . . . . . . : No
    DNS Suffix Search List. . . . . . : isler.local
    isler.com.hk

    Ethernet adapter Local Area Connection:

    Connection-specific DNS Suffix . : isler.com.hk
    Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
    Physical Address. . . . . . . . . : 00-1A-64-49-5E-52
    DHCP Enabled. . . . . . . . . . . : No
    Autoconfiguration Enabled . . . . : Yes
    Link-local IPv6 Address . . . . . :
    fe80::c0c4:84ca:71fc:f092%10(Preferred)
    IPv4 Address. . . . . . . . . . . : 192.168.1.2(Preferred)
    Subnet Mask . . . . . . . . . . . : 255.255.255.0
    IPv4 Address. . . . . . . . . . . : 218.103.89.81(Preferred)
    Subnet Mask . . . . . . . . . . . : 255.255.255.0
    Default Gateway . . . . . . . . . : 192.168.1.254
    DNS Servers . . . . . . . . . . . : ::1
    192.168.1.2
    218.102.32.208
    NetBIOS over Tcpip. . . . . . . . : Enabled

    Tunnel adapter Local Area Connection* 8:

    Media State . . . . . . . . . . . : Media disconnected
    Connection-specific DNS Suffix . : isler.com.hk
    Description . . . . . . . . . . . : isatap.isler.com.hk
    Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
    DHCP Enabled. . . . . . . . . . . : No
    Autoconfiguration Enabled . . . . : Yes

    Tunnel adapter Local Area Connection* 11:

    Connection-specific DNS Suffix . : isler.com.hk
    Description . . . . . . . . . . . : 6TO4 Adapter
    Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
    DHCP Enabled. . . . . . . . . . . : No
    Autoconfiguration Enabled . . . . : Yes
    IPv6 Address. . . . . . . . . . . : 2002:da67:5951::da67:5951(Preferred)
    Default Gateway . . . . . . . . . : 2002:c058:6301::c058:6301
    DNS Servers . . . . . . . . . . . : ::1
    192.168.1.2
    218.102.32.208
    NetBIOS over Tcpip. . . . . . . . : Disabled
    *****************************************

    Windows XP
    *****************************************
    Windows IP Configuration

    Host Name . . . . . . . . . . . . : ericyung
    Primary Dns Suffix . . . . . . . : isler.local
    Node Type . . . . . . . . . . . . : Hybrid
    IP Routing Enabled. . . . . . . . : No
    WINS Proxy Enabled. . . . . . . . : No
    DNS Suffix Search List. . . . . . : isler.local
    ISLER

    Ethernet adapter Local Area Connection:

    Connection-specific DNS Suffix . : ISLER
    Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network
    Connection
    Physical Address. . . . . . . . . : 00-13-20-E1-31-4A
    Dhcp Enabled. . . . . . . . . . . : Yes
    Autoconfiguration Enabled . . . . : Yes
    IP Address. . . . . . . . . . . . : 192.168.1.59
    Subnet Mask . . . . . . . . . . . : 255.255.255.0
    Default Gateway . . . . . . . . . : 192.168.1.254
    DHCP Server . . . . . . . . . . . : 192.168.1.254
    DNS Servers . . . . . . . . . . . : 192.168.1.2
    218.102.32.208
    203.198.23.208
    Primary WINS Server . . . . . . . : 192.168.1.2
    Secondary WINS Server . . . . . . : 192.168.1.1
    Lease Obtained. . . . . . . . . . : Wednesday, June 10, 2009 8:15:27
    AM
    Lease Expires . . . . . . . . . . : Thursday, June 11, 2009 8:15:27
    AM

    *****************************************

    Thank you.

    Best regards,
    KenL
     
    KenL, Jun 10, 2009
    #8
  9. Hello KenL,

    Your server is multihomed, a really bad decision for DCs if not SBS is the
    OS version. So this creates a big conflict with an public ip and the private
    on the NIC. Shares are not working properly, GPOs are not applied correct,
    clients logon can take long times etc.etc.etc.

    Also if not used disable IPv6 on the server, you can use this article from
    Paul:
    http://blogs.dirteam.com/blogs/paulbergson/archive/2009/03/19/disabling-ipv6-on-windows-2008.aspx

    Also remove the public ip address from the server, domain internal use only
    the private ip range 192.168.x.x

    Same applies to the clients, they should only use the domain DNS server 192.168.1.2
    on the NIC.

    For internet access configure the FORWARDERS on the DNS server properties
    in the DNS management console with the ISPs DNS server 218.102.32.208.

    Additional remove DHCP server from the router and use instead the 2008 server
    for it, there you have lot more configuration options and it works together
    with DNS registration/updates of records in the DNS zones.
    http://technet.microsoft.com/en-us/library/cc787034.aspx

    You use multiple DNS domain names on the DNS suffix search list from server
    and client:
    isler.local isler.com.hk ISLER

    So your ISP have to point the external domain name to your public ip address,
    which should have a port forwarding to your internal ip address in your router.
    This prevents the multiple ip addresses and the connection from the Domain
    controller direct to the internet.

    Best regards

    Meinolf Weber
     
    Meinolf Weber [MVP-DS], Jun 10, 2009
    #9
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.