OT (sort-of) Any 2K Server experts in here?

[MWalkden]

My herd has been off-line for 2 days while I struggle to set up a Win2K server on my network. My basic config is as follows:

Surfboard Cable Modem
Linksys 4 Port Cable Router
8 Port switching hub
5 PCs, one laptop and the 2K Server PC

I turned off the DHCP in the router, for the WAN side it has my connect info and uses DHCP to get the rest of the WAN info

On the intranet side, I am using 192.168.1.1 for the IP, 255.255.255.0 SNM

What I'm having problems with is getting connected to the Internet after I install the server. I'm setting up Active Directory, DNS, DHCP, and WINS. After I installed it comes up with the 'Configure Your Server' wizard, which asks if this is the only server on the network. I answered yes and it proceeded to walk me through setting all but WINS up. It wanted to use a different IP scheme (10.10.1.1 for the server and 10.0.0.1-254 for the scope) so I changed it to the following:

Server IP: 192.168.1.2
SNM: 255.255.255.0
Gateway: 192.168.1.1
DNS, DHCP and WINS Server IP:192.168.1.2
Scope: 192.168.1.1-192.168.1.254
Exclusion range: 192.168.1.1 & .2
Domain root is Crack.local
Server name is Dealer
I'm logged in on any PC as administrator, some 2K Pro, some 98.
I have some set to log in the domain, some not.

Now the rest of the network works fine (inside the network). The PCs not logging into the domain have the expected result of no access to those that do. No known errors (in the logs except for the time service), for any of the services set up, but NO INTERNET! (not even the server box itself).

I've tried a bunch of stuff, different settings within the services (both DHCP and DNS), even went back to DHCP on the router and disabled it on the server. I tried looking at different policies, but nothing stuck out as something that needed to be changed for that reason (actually locked myself out on a prior install messing with those, hehe, but that's another story).

Can anyone tell me what's wrong????????

I went back to the router serving up DHCP and shut down the server. It took resetting the cable modem and the router to get back up on the net after shutting the server off which I found to be strange too (but hey, I seen stranger things!).

I'm crossin my fingers!!!

.MW

 

[SYST3M]

well, i have the same router [i think, befsr41] and a similar network. i have 2 win98 boxes and one win2k. 1st thing you need to do is set the router's network identification to whatever your isp needs it to be. mine has to be cxxxxxxx-a [name] @home [workgroup] for it to work. after that just make sure you have enough ips enabled for the router to give out, and in my experience most win9x & nt boxes can self detect the proxy settings. hope this helps, if not give me an email or stop by the irc and i'll see if i can help some more.

 

[MWalkden]

My router is set to cxxxxxxx-a.demone.ia.home.com, should it have more? This setting works without the server.

 

[mindless]

So if you disconnect the server from the network you can access the internet?

 

[Kilowatt]

<< ..wizard, which asks if this is the only server on the network. I answered yes >>

The router is acting as a server too.

Reading your post, I take it you set W2K up as the &quot;Domain Controller&quot;?

If so, it'll want to take over the router's position.

Set it up as a &quot;Workgroup&quot; master, and it should get along just fine with the router.
Even as a Workgroup controller, you can still use it to dish out the DHCP, DNS, and use WINS for the rest of the network.

 

[MWalkden]

mindless, not without a great deal of resetting, basically I have to reset the router to defaults, disconnect it all (router, cable modem), re-config the PCs not to log on the DC (which is a given), power them all down, plug in the router, plug in the modem, start powering up PCs. Additionally I have had some problems getting the 9x boxes releasing their previous NIC settings (well actually only one). That happened on my laptop which sees many networks.

Kilowatt, you are correct, however the major reason for me doing this is to work with 2K server (learning curve). Setting it as a workgroup controller will defeat a major part of 2K server's ability, that is Active Directory. Another major reason is the centralized security. Last but not least, when I move to a commercial spot with some real bandwidth, I want to have all the services ready to go (web site etc.).

I'm guessing setting it up as the only server is causing the problem, but I do not know where to begin to look for adjustments. More than likely a policy setting somewhere (we have Enterprise, domain, local and server policy settings not to mention some specific to services!!!!) It's guite a monster compared to NT4.

On my first attempt to install this I had to set up remote access and routing to get connectivity. The second time, I didn't have to do that. Both of those times I did not select the setting for being the only server (actually, the first time it simply failed out the wizard, the second time I just went with another choice). Now my second setup was working just fine (except I made some bad partition choices). I started changing policy settings and ended up locking myself out of any administrative settings. 😱 Somehow changing the administrative account name did it, although I don't know why. I changed some other settings too, maybe it was a particular combo that did it. Anyway, in the second setup I was forced to set all my client PCs to log into the network to get connectivity. That I know is a policy setting although I was not able to make the changes to correct it. There must be additional policy settings to get what I was looking for in 2K (vs. NT4). Now I'm on my 3rd attempt, and it is looking like my best choice is to install one more time and not select 'Only Server' option. Unless someone recognizes what my problem is and can point me in the right direction!🙂

Thanks for your input guys!

.MW

 

[Kilowatt]

<< ...ended up locking myself out of any administrative settings 😱 >>

lol, That's funny 🙂 I'm sure your not the only one to have done that with W2K. 😉
</ I'm not laughing AT you, I'm laughing with you. 😀

<< There must be additional policy settings to get what I was looking for in 2K >>

Have you read the policy on policy changes? 😉

Seriously now, Are there two nics in the W2K box?
I think there should be.
One to the router, one to the network hub, W2K controls the rest of the network from the hub.
The rest of the network should have to go through the W2K box so you get your learning experience.

Since the router is also acting like a server, let it just serve the W2K box for the internet, that way you're still behind the security of your router.
You might want to remove the router sometime, so you can make sure you can secure the W2K box, without the aid of a router.
I know you'll want to get use to the other workings of W2K first.

 

[MWalkden]

You have another solution that would indeed work! But.... I found my problem. NAT got screwed on my router and it was no longer able to pass DNS information on to my clients. I didn't list DNS settetings for @Home on my server either (or it may have been able to correct the problem) and when NAT stopped functioning on my router the network had no Internet access. I figured this out by the IP that was locked onto my laptop NIC; 169.254.183.68.

That is a generic (random) generated number given to a NIC that searches for DNS and fails to find a server. I'm not sure if the NIC provides it or the OS (probably the OS). I don't know what errors cause this DNS search failure but I'm willing to bet that if I found it (them, I'm sure the list is rather short) I would also track this to a procedure error. I probably didn't power cycle the server at some point I should have.

Possibly removing the router when installing a parent DC and reinstalling it after is in order too.

I currently have my router serving up DHCP but I will be switching back to a server DHCP service later tonight and will let you all know if it works. Anyone want to take bets? LOL!🙂🙂🙂

🙂oHa ha, barrel of laughs!:|😉) It really wasn't hard!😀😀😀 Took me less than 5 minutes! (to lock myself out)

[edit]for clarity above[/edit]