Hi
The following solution may help.
SYMPTOMS
============
A Windows 2000 domain controller may exhibit connectivity issues if the
domain controller is configured in the following manner:
- Routing and Remote Access Service (RRAS) is configured to permit incoming
connections.
- Domain Name System (DNS) is installed and configured locally.
After a remote client establishes a connection by using Dial-Up Networking,
one or more of the following symptoms may occur:
1. Internal clients may no longer be able to browse the Web through
Internet Security and Acceleration (ISA) Server, regardless of whether or
not Web Proxy or the Firewall Client is being used for Web browsing.
2. A "The page cannot be displayed" error message is generated when you use
a Web browser.
3. A "cannot find server or DNS" error occurs.
4. From an internal client, if you use PING to ping the name of the server,
PING returns any other address other than the IP address that is bound to
the server's internal adapter.
5. You cannot browse through the list of computers in Network Neighborhood
or My Network Places.
6. You cannot connect to the following Web page:
http://server_name/myconsole
7. You may receive the following event message:
Event ID: 4319
Source: Netbt
Description: A duplicate name has been detected on the tcp network. The IP
address of the machine that sent the message is in the data. Use NBTSTAT
with a switch of N in a command window to see which name is in a conflict
state.
8. When a client clicks Update Now from the Firewall Client applet in
Control Panel, the client may receive the following error message:
The server is not responding when client requests an update.
Possible causes:
-The server is not an ISA Server.
-The server is down.
9. Windows 2000 LAN clients cannot map a network drive to the server. The
client may receive the following error message:
No Logon Servers Available to Service your Logon Request
CAUSE
=======
This issue can occur if the client computer receives a response from DNS
that includes the wrong Internet Protocol (IP) address. This address is
only returned in a query after a remote client has connected by using
Dial-Up Networking. This IP address is registered with DNS if network basic
input/output system (NetBIOS) is bound to the RRAS server's dial-in
interfaces or if DNS is configured to listen on all interfaces.
RESOLUTION
============
WARNING: If you use Registry Editor incorrectly, you may cause serious
problems that may require you to reinstall your operating system. Microsoft
cannot guarantee that you can solve problems that result from using
Registry Editor incorrectly. Use Registry Editor at your own risk.
To resolve this problem, obtain the latest service pack for Windows 2000.
For additional information, click the following article number to view the
article in the Microsoft Knowledge Base:
260910 How to Obtain the Latest Windows 2000 Service Pack
NOTE: You must implement the registry changes that are described in this
section before you install the service pack.
To resolve this issue, disable NetBIOS for all RRAS connections (dial-in
interfaces, server-side only). To do so, follow these steps:
1. Edit the registry:
a. Start Registry Editor (Regedt32.exe).
b. Locate and click the following key in the registry:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters
c. On the Edit menu, click Add Value, and then add the
following registry value:
Value name: PublishAddresses
Data type: REG_SZ
Value data: IP address of the internal interface.
If more than one IP address needs to be specified, separate the addresses
with spaces.
For additional information, click the article number
below to view the article in the Microsoft Knowledge Base:
289735 - Routing and Remote Access IP Addresses Register
in DNS
d. Locate and click the following key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
e. On the Edit menu, click Add Value, and then add the
following registry value:
Value name: RegisterDnsARecords
Data type: REG_DWORD
Range: 0 through 1, default value: 1. Change this
value to 0.
NOTE: The preceding key disables the registration
of Netlogon A records for the domain name. After you set this value to 0
(zero), you need to create two A records in DNS: one in the root of the
domain for the domain name (for example, a blank host record in your
company.local zone), and an A record for your Global Catalog (for example,
your SBS server) in gc._msdcs.domain name.com. To do so, follow these
steps:
- Click Start, point to Programs, point to
Administrative Tools, and then click DNS.
- In the console tree, expand the Your Server branch
(where Your Server is the name of your server), expand the Forward Lookup
Zones branch, and then click Your Domain Name, where Your Domain Name is
the name of your domain.
- On the Action menu, click New Host.
- In the IP address text box, type the internal IP
address of your server.
- Leave the Name box empty, click Create Associated
PTR Record, and then click Add Host.
- When you receive the "(same as parent folder) is
not a valid host name. Are you sure you want to add this record?" message,
click Yes.
- Under Forward Lookup Zones in the console tree,
expand the Your Domain Name branch, expand the MSDCS branch, and then click
the GC folder.
- On the Action menu, click New Host.
- In the Name box, type the name of your server as
the DNS computer name for the new host.
- In the IP address box, type the internal IP address
of your server.
- As an option, select the Create associated pointer
(PTR) record check box to create an additional pointer record in a reverse
zone for this host, based on the information that you entered in the Name
box and the IP address box.
- Click Add Host to add the new host record to the
zone.
f. Locate and click the following key:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RemoteAccess\Parameters
\IP
g. On the Edit menu, click Add Value, and then add the
following registry value:
Value name: DisableNetbiosOverTcpip
Data type: REG_DWORD
Radix: Hexadecimal
Value data: 1 or 0. 1 = DisableNetbios.
h. Quit Registry Editor.
2. Check registrations in the WINS database.
a. Go to Start/Programs/Administrative Tools/WINS.
b. Click on the plus sign to the left of the server's name to
expand the list.
c. Right-click on Active Registrations and select Find by
Owner.
d. In the This owner box, select your server's IP
address/name (by default, would be the only on listed) and click the Find
Now button.
e. Double-click on the entries for the servername[00h], and
servername[20h] to verify that there is only 1 IP address on them.
If the IP address for the dial-in interface is listed (or other IP
addresses from the internal LAN subnet), delete these entries from the WINS
database. To do so, follow these steps:
a. Right click on Active Registrations and select Delete
Owner.
b. Select your server's name/IP address in the Delete this
owner box.
c. Select the option to Delete from this server only (since by
default it would be the only WINS server in your SBS network).
NOTE: RAS/VPN/Remote clients may not be able to connect to
machines on the internal LAN since netBIOS names that were registered in
WINS were removed and will be re-registered in the WINS database until they
are either rebooted or their next refresh interval occurs.
3. Obtain and apply the following fix:
To resolve this problem, obtain the latest service pack for
Windows 2000. For additional information, click the following article
number to view the article in the Microsoft Knowledge Base:
260910 - How to Obtain the Latest Windows 2000 Service Pack
The English version of this fix should have the following
file attributes or later:
Date Time Version
Size File name
----------------------------------------------------------------------------
---------------
4/17/2001 7:23:40PM 5.0.2195.3516 197,392 Rasppp.dll
4. Restart the computer to apply the changes.
Reference Link:
http://support.microsoft.com/default.aspx?scid=kb;en-us;292822&Product=win20
00
Shilpa Sinha
This posting is provided "AS IS" with no warranties, and confers no rights.
