Sporadic Win98 Permission Denied on 2000 domain

  • Thread starter Thread starter Eric
  • Start date Start date
E

Eric

Help! We have just deployed Windows 2000 server to replace the old NT4
domain (clean install on new server) and everything works fine for a few
hours. Then some (not all) users will get an access denied message when
trying to access their directory on the server - this also happens with the
'public' directory. Rebooting will fix this for a while, but people are
having to reboot 3+ times per day. If anyone has any idea what to do to fix
this, PLEASE let me know - I'm at my wits end here!!!

Thanks In Advance!
Eric Harrelson
 
Have you stopped and disabled the license logging service? It's buggy...and
not mandatory, as long as you keep track of your licenses manually.
 
Got WINS installed on the server? W98 needs it. Also options 003, 006, 015,
044 and 046 (0x8) in DHCP-server, Scope options.
How many nics in the server?
Does the winipcfg on the W98 show that everything is pointing to the
server-IP?
 
I installed WINS today, and the problem is still there. We run a static-ip
network, and there are 4 NICs is the server - 3 disabled Intel PRO 100+'s
and 1 enabled Intel PRO 1000+

WINIPCFG info:
dns server 192.168.0.1
ip address 192.168.0.36
subnet 255.255.255.0
gateway 192.168.0.1
primary wins 192.168.0.123 (domain controller)
ip routing isn't checked
wins proxy isnt checked
netbios resolution uses dns is checked

note that .1 is the managed firewall we have

Thanks!
Eric Harrelson
 
DNS server should be your DC, not the router address. You do have DNS-server
installed on your server, right?
 
We do have dns set up on the server, but all of our dns is handled by an
outside company on the firewall. How can i set up the server to work in
conjunction with the firewall's dns?

Eric
Marina Roos said:
DNS server should be your DC, not the router address. You do have DNS-server
installed on your server, right?

--
Regards,

Marina
[SBS-MVP]


Eric said:
I installed WINS today, and the problem is still there. We run a static-ip
network, and there are 4 NICs is the server - 3 disabled Intel PRO 100+'s
and 1 enabled Intel PRO 1000+

WINIPCFG info:
dns server 192.168.0.1
ip address 192.168.0.36
subnet 255.255.255.0
gateway 192.168.0.1
primary wins 192.168.0.123 (domain controller)
ip routing isn't checked
wins proxy isnt checked
netbios resolution uses dns is checked

note that .1 is the managed firewall we have

Thanks!
Eric Harrelson
Click to expand...
Click to expand...
 
Can you post the ipconfig/all from the server?
Have you setup forwarders in DNS-server, tab Forwarders? There you put in
the ISP-DNS-numbers.

--
Regards,

Marina
[SBS-MVP]


Eric said:
We do have dns set up on the server, but all of our dns is handled by an
outside company on the firewall. How can i set up the server to work in
conjunction with the firewall's dns?

Eric
DNS server should be your DC, not the router address. You do have DNS-server
installed on your server, right?

--
Regards,

Marina
[SBS-MVP]


Eric said:
I installed WINS today, and the problem is still there. We run a static-ip
network, and there are 4 NICs is the server - 3 disabled Intel PRO 100+'s
and 1 enabled Intel PRO 1000+

WINIPCFG info:
dns server 192.168.0.1
ip address 192.168.0.36
subnet 255.255.255.0
gateway 192.168.0.1
primary wins 192.168.0.123 (domain controller)
ip routing isn't checked
wins proxy isnt checked
netbios resolution uses dns is checked

note that .1 is the managed firewall we have

Thanks!
Eric Harrelson

Got WINS installed on the server? W98 needs it. Also options 003, 006,
015,
044 and 046 (0x8) in DHCP-server, Scope options.
How many nics in the server?
Does the winipcfg on the W98 show that everything is pointing to the
server-IP?

--
Regards,

Marina
Microsoft SBS-MVP

"Eric" <eharrelson(shift+2)equitytechnologies.com> schreef in bericht
Help! We have just deployed Windows 2000 server to replace the old NT4
domain (clean install on new server) and everything works fine for
Click to expand...
a
few
hours. Then some (not all) users will get an access denied message when
trying to access their directory on the server - this also happens with
the
'public' directory. Rebooting will fix this for a while, but
Click to expand...
people
are
having to reboot 3+ times per day. If anyone has any idea what to
Click to expand...
do
to
fix
this, PLEASE let me know - I'm at my wits end here!!!

Thanks In Advance!
Eric Harrelson
Click to expand...
Click to expand...
Click to expand...
 
All servers and workstations should specify the internal AD-integrated DNS
server's IP address in their network settings. The AD-integrated DNS server
should be set up with forwarders to your ISP's DNS servers for external
resolution.

See http://support.microsoft.com/default.aspx?scid=kb;en-us;300202 for more
info.
We do have dns set up on the server, but all of our dns is handled by
an outside company on the firewall. How can i set up the server to
work in conjunction with the firewall's dns?

Eric
Marina Roos said:
DNS server should be your DC, not the router address. You do have
DNS-server installed on your server, right?

--
Regards,

Marina
[SBS-MVP]


Eric said:
I installed WINS today, and the problem is still there. We run a
static-ip network, and there are 4 NICs is the server - 3 disabled
Intel PRO 100+'s and 1 enabled Intel PRO 1000+

WINIPCFG info:
dns server 192.168.0.1
ip address 192.168.0.36
subnet 255.255.255.0
gateway 192.168.0.1
primary wins 192.168.0.123 (domain controller)
ip routing isn't checked
wins proxy isnt checked
netbios resolution uses dns is checked

note that .1 is the managed firewall we have

Thanks!
Eric Harrelson

in message Got WINS installed on the server? W98 needs it. Also options 003,
006, 015, 044 and 046 (0x8) in DHCP-server, Scope options.
How many nics in the server?
Does the winipcfg on the W98 show that everything is pointing to
the server-IP?

--
Regards,

Marina
Microsoft SBS-MVP

"Eric" <eharrelson(shift+2)equitytechnologies.com> schreef in
bericht Help! We have just deployed Windows 2000 server to replace the
old NT4 domain (clean install on new server) and everything works
fine for a few hours. Then some (not all) users will get an
access denied message when trying to access their directory on
the server - this also happens with
the
'public' directory. Rebooting will fix this for a while, but
people are having to reboot 3+ times per day. If anyone has any
idea what to do to
fix
this, PLEASE let me know - I'm at my wits end here!!!

Thanks In Advance!
Eric Harrelson
Click to expand...
Click to expand...
Click to expand...
 
Here you go...

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : fs2k
Primary DNS Suffix . . . . . . . : etc.equitytechnologies.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : etc.equitytechnologies.com
equitytechnologies.com

Ethernet adapter Local Area Connection 4:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 XT Server Adapter
Physical Address. . . . . . . . . : 00-02-B3-EC-9D-46
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.123
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 192.168.0.123
192.168.0.1

Marina Roos said:
Can you post the ipconfig/all from the server?
Have you setup forwarders in DNS-server, tab Forwarders? There you put in
the ISP-DNS-numbers.

--
Regards,

Marina
[SBS-MVP]


Eric said:
We do have dns set up on the server, but all of our dns is handled by an
outside company on the firewall. How can i set up the server to work in
conjunction with the firewall's dns?

Eric
DNS server should be your DC, not the router address. You do have DNS-server
installed on your server, right?

--
Regards,

Marina
[SBS-MVP]


"Eric" <eharrelson(shift+2)equitytechnologies.com> schreef in bericht
I installed WINS today, and the problem is still there. We run a static-ip
network, and there are 4 NICs is the server - 3 disabled Intel PRO 100+'s
and 1 enabled Intel PRO 1000+

WINIPCFG info:
dns server 192.168.0.1
ip address 192.168.0.36
subnet 255.255.255.0
gateway 192.168.0.1
primary wins 192.168.0.123 (domain controller)
ip routing isn't checked
wins proxy isnt checked
netbios resolution uses dns is checked

note that .1 is the managed firewall we have

Thanks!
Eric Harrelson

message
Got WINS installed on the server? W98 needs it. Also options 003, 006,
015,
044 and 046 (0x8) in DHCP-server, Scope options.
How many nics in the server?
Does the winipcfg on the W98 show that everything is pointing to the
server-IP?

--
Regards,

Marina
Microsoft SBS-MVP

"Eric" <eharrelson(shift+2)equitytechnologies.com> schreef in bericht
Help! We have just deployed Windows 2000 server to replace the
Click to expand...
old
NT4
domain (clean install on new server) and everything works fine
Click to expand...
Click to expand...
for
a
Click to expand...
to
do
Click to expand...
Click to expand...
 
You have your router's IP address configured as a DNS server on your
server....remove it. Leave only your AD-integrated DNS server's IP in there.
Do you have the forwarders set up to your ISP's DNS server as described in
the article for which I posted the link?

Also - Windows 9x/ME/NT will require WINS, as Marina posted. You need to
install it if you don't have it - she posted the correct entries you'll need
to put in your DHCP scope. You can also set up DNS to lookup to WINS in the
DNS server itself.

Here you go...

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : fs2k
Primary DNS Suffix . . . . . . . : etc.equitytechnologies.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : etc.equitytechnologies.com
equitytechnologies.com

Ethernet adapter Local Area Connection 4:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 XT Server
Adapter Physical Address. . . . . . . . . : 00-02-B3-EC-9D-46
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.123
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 192.168.0.123
192.168.0.1

Marina Roos said:
Can you post the ipconfig/all from the server?
Have you setup forwarders in DNS-server, tab Forwarders? There you
put in the ISP-DNS-numbers.

--
Regards,

Marina
[SBS-MVP]


Eric said:
We do have dns set up on the server, but all of our dns is handled
by an outside company on the firewall. How can i set up the server
to work in conjunction with the firewall's dns?

Eric
in message DNS server should be your DC, not the router address. You do have
DNS-server installed on your server, right?

--
Regards,

Marina
[SBS-MVP]


"Eric" <eharrelson(shift+2)equitytechnologies.com> schreef in
bericht I installed WINS today, and the problem is still there. We run a
static-ip network, and there are 4 NICs is the server - 3
disabled Intel PRO 100+'s and 1 enabled Intel PRO 1000+

WINIPCFG info:
dns server 192.168.0.1
ip address 192.168.0.36
subnet 255.255.255.0
gateway 192.168.0.1
primary wins 192.168.0.123 (domain controller)
ip routing isn't checked
wins proxy isnt checked
netbios resolution uses dns is checked

note that .1 is the managed firewall we have

Thanks!
Eric Harrelson

in message Got WINS installed on the server? W98 needs it. Also options 003, 006,
015,
044 and 046 (0x8) in DHCP-server, Scope options.
How many nics in the server?
Does the winipcfg on the W98 show that everything is pointing to
the server-IP?

--
Regards,

Marina
Microsoft SBS-MVP

"Eric" <eharrelson(shift+2)equitytechnologies.com> schreef in
bericht Help! We have just deployed Windows 2000 server to replace the old
NT4
domain (clean install on new server) and everything works fine
Click to expand...
for
a
few
hours. Then some (not all) users will get an access denied message
when
trying to access their directory on the server - this also happens
with
the
'public' directory. Rebooting will fix this for a while, but people
are
having to reboot 3+ times per day. If anyone has any idea what
Click to expand...
to
do
to
fix
this, PLEASE let me know - I'm at my wits end here!!!

Thanks In Advance!
Eric Harrelson
Click to expand...
Click to expand...
Click to expand...
 
Ok, I removed the 192.168.0.1 from the DNS server list. WINS was installed a
couple of days ago, and I do have the server set up to forward requests to
192.168.0.1.

Thank you!
Eric Harrelson

You have your router's IP address configured as a DNS server on your
server....remove it. Leave only your AD-integrated DNS server's IP in there.
Do you have the forwarders set up to your ISP's DNS server as described in
the article for which I posted the link?

Also - Windows 9x/ME/NT will require WINS, as Marina posted. You need to
install it if you don't have it - she posted the correct entries you'll need
to put in your DHCP scope. You can also set up DNS to lookup to WINS in the
DNS server itself.

Here you go...

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : fs2k
Primary DNS Suffix . . . . . . . : etc.equitytechnologies.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : etc.equitytechnologies.com
equitytechnologies.com

Ethernet adapter Local Area Connection 4:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 XT Server
Adapter Physical Address. . . . . . . . . : 00-02-B3-EC-9D-46
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.123
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 192.168.0.123
192.168.0.1

Marina Roos said:
Can you post the ipconfig/all from the server?
Have you setup forwarders in DNS-server, tab Forwarders? There you
put in the ISP-DNS-numbers.

--
Regards,

Marina
[SBS-MVP]


"Eric" <eharrelson(shift+2)equitytechnologies.com> schreef in bericht
We do have dns set up on the server, but all of our dns is handled
by an outside company on the firewall. How can i set up the server
to work in conjunction with the firewall's dns?

Eric
in message DNS server should be your DC, not the router address. You do have
DNS-server installed on your server, right?

--
Regards,

Marina
[SBS-MVP]


"Eric" <eharrelson(shift+2)equitytechnologies.com> schreef in
bericht I installed WINS today, and the problem is still there. We run a
static-ip network, and there are 4 NICs is the server - 3
disabled Intel PRO 100+'s and 1 enabled Intel PRO 1000+

WINIPCFG info:
dns server 192.168.0.1
ip address 192.168.0.36
subnet 255.255.255.0
gateway 192.168.0.1
primary wins 192.168.0.123 (domain controller)
ip routing isn't checked
wins proxy isnt checked
netbios resolution uses dns is checked

note that .1 is the managed firewall we have

Thanks!
Eric Harrelson

in message Got WINS installed on the server? W98 needs it. Also options 003,
006,
015,
044 and 046 (0x8) in DHCP-server, Scope options.
How many nics in the server?
Does the winipcfg on the W98 show that everything is pointing to
the server-IP?

--
Regards,

Marina
Microsoft SBS-MVP

"Eric" <eharrelson(shift+2)equitytechnologies.com> schreef in
bericht Help! We have just deployed Windows 2000 server to replace the old
NT4
domain (clean install on new server) and everything works fine for
a
few
hours. Then some (not all) users will get an access denied message
when
trying to access their directory on the server - this also happens
with
the
'public' directory. Rebooting will fix this for a while, but
people
are
having to reboot 3+ times per day. If anyone has any idea what to
do
to
fix
this, PLEASE let me know - I'm at my wits end here!!!

Thanks In Advance!
Eric Harrelson
Click to expand...
Click to expand...
Click to expand...
 
Ok, I have the DNS forwarders set up, and the clients are pointing to the
new server for both their DNS and WINS. They are still having the "Access is
Denied" message. This problem almost seems like a timeout - they log in in
the morning and it works fine until later in the day, when a reboot fixes it
for a while. We also do have users that use the server all the time that
never have had a problem.

HTH,
Eric

"Lanwench [MVP - Exchange]"
All servers and workstations should specify the internal AD-integrated DNS
server's IP address in their network settings. The AD-integrated DNS server
should be set up with forwarders to your ISP's DNS servers for external
resolution.

See http://support.microsoft.com/default.aspx?scid=kb;en-us;300202 for more
info.
We do have dns set up on the server, but all of our dns is handled by
an outside company on the firewall. How can i set up the server to
work in conjunction with the firewall's dns?

Eric
Marina Roos said:
DNS server should be your DC, not the router address. You do have
DNS-server installed on your server, right?

--
Regards,

Marina
[SBS-MVP]


"Eric" <eharrelson(shift+2)equitytechnologies.com> schreef in bericht
I installed WINS today, and the problem is still there. We run a
static-ip network, and there are 4 NICs is the server - 3 disabled
Intel PRO 100+'s and 1 enabled Intel PRO 1000+

WINIPCFG info:
dns server 192.168.0.1
ip address 192.168.0.36
subnet 255.255.255.0
gateway 192.168.0.1
primary wins 192.168.0.123 (domain controller)
ip routing isn't checked
wins proxy isnt checked
netbios resolution uses dns is checked

note that .1 is the managed firewall we have

Thanks!
Eric Harrelson

in message Got WINS installed on the server? W98 needs it. Also options 003,
006, 015, 044 and 046 (0x8) in DHCP-server, Scope options.
How many nics in the server?
Does the winipcfg on the W98 show that everything is pointing to
the server-IP?

--
Regards,

Marina
Microsoft SBS-MVP

"Eric" <eharrelson(shift+2)equitytechnologies.com> schreef in
bericht Help! We have just deployed Windows 2000 server to replace the
old NT4 domain (clean install on new server) and everything works
fine for a few hours. Then some (not all) users will get an
access denied message when trying to access their directory on
the server - this also happens
with
the
'public' directory. Rebooting will fix this for a while, but
people are having to reboot 3+ times per day. If anyone has any
idea what to do
to
fix
this, PLEASE let me know - I'm at my wits end here!!!

Thanks In Advance!
Eric Harrelson
Click to expand...
Click to expand...
Click to expand...
 
Can you post the ipconfig/all from the server please and one from a client?
Did you restart DNS-server? Do you have options 003, 006, 015, 044 and 046
(0x8) in DHCP-server, Scope options?

--
Regards,

Marina
Microsoft SBS-MVP

Eric said:
Ok, I have the DNS forwarders set up, and the clients are pointing to the
new server for both their DNS and WINS. They are still having the "Access is
Denied" message. This problem almost seems like a timeout - they log in in
the morning and it works fine until later in the day, when a reboot fixes it
for a while. We also do have users that use the server all the time that
never have had a problem.

HTH,
Eric

"Lanwench [MVP - Exchange]"
All servers and workstations should specify the internal AD-integrated DNS
server's IP address in their network settings. The AD-integrated DNS server
should be set up with forwarders to your ISP's DNS servers for external
resolution.

See http://support.microsoft.com/default.aspx?scid=kb;en-us;300202 for more
info.
We do have dns set up on the server, but all of our dns is handled by
an outside company on the firewall. How can i set up the server to
work in conjunction with the firewall's dns?

Eric
message DNS server should be your DC, not the router address. You do have
DNS-server installed on your server, right?

--
Regards,

Marina
[SBS-MVP]


"Eric" <eharrelson(shift+2)equitytechnologies.com> schreef in bericht
I installed WINS today, and the problem is still there. We run a
static-ip network, and there are 4 NICs is the server - 3 disabled
Intel PRO 100+'s and 1 enabled Intel PRO 1000+

WINIPCFG info:
dns server 192.168.0.1
ip address 192.168.0.36
subnet 255.255.255.0
gateway 192.168.0.1
primary wins 192.168.0.123 (domain controller)
ip routing isn't checked
wins proxy isnt checked
netbios resolution uses dns is checked

note that .1 is the managed firewall we have

Thanks!
Eric Harrelson

in message Got WINS installed on the server? W98 needs it. Also options 003,
006, 015, 044 and 046 (0x8) in DHCP-server, Scope options.
How many nics in the server?
Does the winipcfg on the W98 show that everything is pointing to
the server-IP?

--
Regards,

Marina
Microsoft SBS-MVP

"Eric" <eharrelson(shift+2)equitytechnologies.com> schreef in
bericht Help! We have just deployed Windows 2000 server to replace the
old NT4 domain (clean install on new server) and everything works
fine for a few hours. Then some (not all) users will get an
access denied message when trying to access their directory on
the server - this also happens
with
the
'public' directory. Rebooting will fix this for a while, but
people are having to reboot 3+ times per day. If anyone has any
idea what to do
to
fix
this, PLEASE let me know - I'm at my wits end here!!!

Thanks In Advance!
Eric Harrelson
Click to expand...
Click to expand...
Click to expand...
 
Back
Top