2012 server multiple issue

[mikemcsharry]

For various reasons I've inherited some school networks which have been set up very strangely ..

 

In one, when I go to log in as a pupil I allowed policy options so i could actually grab the gpresult there - it's 75 pages long.

 

I've read through it for a bit, found some issues, but now trying to get to the real bottom of this network.

 

Taken one of the laptops out of the domain, cleared all gpo infor from it - got it back on domain again - then cleared all gpo info again (here's how to do that, seems to work -

Group policy settings being held in machine - see this on how to clear them -

https://social.technet.microsoft.com/Forums/windowsserver/en-US/75ab1158-e460-4aa5-8658-402836e6096a/old-domain-gone-but-gp-lives-on?forum=winserverGP

 

I've then gone in to gpo and turned off all the policies so I can have a fresh start. problem i seem to have at the moment is that i can only logon if i put the domain name in along with the user name. So myschool\name and passowrd are okay just name and password gives 'no logon servers' available.

I'm not sure where to look - is this an entry to re-sort in the GPO for the machine or do i have an underlying DNS issue somewhere?

edit...

I've run dcdiag /test:dns and it came back okay. A strange thing so, lets imagine the school is called highroad school

the doamin seems to be known as highroad or high.road or high-road ..

 

eg in the output of he result .

testing server high-road\servername

'running enterprise tests on' high.road

 

from a user viewpoint everything looks like highroad

 

Thanks for any suggestions..

Edited August 7, 2017 by mikemcsharry

[sparkeh]

You might want to check this group policy setting

 

Computer Configuration -> Administrative Settings -> System -> Logon -> Assign a default domain for logon

 

It *could* be that by default its trying to login to a nonexistent domain, which wold explain why just username + password fails but specifying the domain works.

[mikemcsharry]

Thank you - amongst the several thousand GPO entried done, that wasn't one - seems to be helping.

All seems to be okay network, wireless, dhcp distribution etc - its one of these where the total feels a lot les than the sum of the parts!

[mikemcsharry]

Actually, before I left the school, the P.O. needed to lock up and throw me out, I'd just started to pick upon a problem. As i showed above DHCP distribution etc. seemed to be okay, but I wasn't convinced. On a laptop I checked all the info - everything looked good, but then I found it wasn't getting ping response from server or defualt gateway. ipconfig /release and /renew all looked good. I ran netsh winsock reset and rebooted - all looked okay, but no ping response from dns server or gateway, it was only after I right clicked the network icon and said 'diagnose' did it play ball... I'll know more when I get in tomorrow... where would youtroubleshoot next? What did diagnose do that I didn't?

[mikemcsharry]

My head is almost around this one - I found a very starnge status across the wireless network which I seem (fingers crossed) to have resolved.

If you have a Unifi netowk - this could help you.

I suspected that the wireles network was somehow in a 'non' state and wanted a full re-set. Unifi networks don't offer this - out of the box.

 

Discovered - talking to the folks at ms-dist that if you put a new ssid on to the controller - then the point at which you save it actually re-provisions all the WAPs - effectively re-booting your whole wireless network.

 

I'll probably forget all about this tip when I get stuck again...