Intermitent problems with logging on

[alexknight]

I have two workstations that have started to play up when someone tries to log on to the network.

Sometimes the worksation logs on fine and other times it has problems logging on and runnng the log on scripts etc.

 

Could it be something as simle as the NIC card?

 

Alex

[tarquel]

It could be

 

It also be spyware or being hit from another pc thats zombiefied/infected with spyware/nasties.

 

Have you checked the cabling to the switch from the computer and is it when there are loads logging onto the system (at the same time) and this one sorta gets "left behind" regarding priority?

 

Just a few things to think about there

Nath

[Dos_Box]

20p Says its a DNS problem.

[Ric_]

20p Says its a DNS problem.

 

You always say it's a DNS problem! - Admittedly it usually is!

[Dos_Box]

Because I'm always right.

[mrtechsystems]

Has anyone mentioned to look in the Application and System event logs to see if there is any ideas to the problem

[Mango_RW]

Has anyone mentioned to look in the Application and System event logs to see if there is any ideas to the problem

 

Yes, you have!

[tarquel]

I really cant work out DNS lol but managed to setup the dns' here ok - not sure how but it all works for me (touch wood)

 

Event Viewer is your friend ppl (good point guys - knew I've forgot something lol)

 

Cheers

Nath

[MkII]

How would a DNS problem cause this intermittant fault? - I'd just like to understand DNS better [who wouldn't! ]

[Dos_Box]

If you have 2 domain controllers and have DNS running on each (as you must do with active directory) and it is misconfigured or not setup correctly then you end up with logon problems depending on which server handled the logon request. PM me tomorrow and I'll talk you through some troubleshooting over the phone.

[Ric_]

It may not be DNS - it may just be a borked replication between the DCs.

 

If there is a sufficient time discrepency between the DCs, it too can happen.

[Dos_Box]

It may not be DNS - it may just be a borked replication between the DCs.

 

If there is a sufficient time discrepency between the DCs, it too can happen.

 

Which in turn may be a DNS problem.

[MkII]

Going off at a tangent: I'm sure my setup isn't right - I have 2 IP ranges 57.x and 140.x

 

To get things working between the two ranges I fitted/enabled two network cards on all machines needed to be seen by machines in both ranges. This includes the DC/ DNS. Forwarding didn't seem to do the trick - anyone know what I should be doing here??

 

Everything seems to work - most of the time...

 

The router is half a mile across town at the end of an LES2 line - and county [who control it] opened it up so that both ranges could talk through it.

 

Appreciate any input guys

[GrumbleDook]

The router is half a mile across town at the end of an LES2 line - and county [who control it] opened it up so that both ranges could talk through it.

 

Appreciate any input guys

 

Talk through it to the outside world or talk to each other through it?

 

I would also asked them to run some diagnostics across it if it works sometimes and not others ...

[MkII]

talk to each other through it. they said there was plenty of trafic queueing up when they enabled it...

 

So you recon my setup is ok?

[MkII]

I just set up a machine on one range, and I couldn't see the admin server on it!?! - yet I could see the DC and the Curric server - I don't geddit?? [DB:-"DNS" LOL!]

[Ric_]

Why the two ranges? Just seems a little complicated.

 

If security is an issue you could try VLANs. There's obviously going to be a bottleneck using a remote router.

[RobC]

Just a quick question... Why two separate ranges? Do you run the admin & school networks separately?

[Dos_Box]

Why those address ranges too? Are you not running two internal ranges or are you running global IPs throughout your LAN!!!?

I.E.

 

Internal (private):

10.x.x.x

172.x.x.x

192.x.x.x

 

Globlal;

 

Everything else (just about)

[tarquel]

*steps up to the mic for mark*

 

They were county defined in the school's by Powys before his time and possibly before my time too (cant remember that long ago )

 

The ranges he was refering to, do start with 172 btw - its common in powys to refer to the 3rd bit as that range is the one that is different in each school. Best not say anymore on that.

 

With my two ranges, they are seperate ranges as it has been the way for as long as I remember it, and here its one range admin and one range curriculum. Powys control the ACL's but i can request changes to it.

 

In the process of getting a VPN/Firewall (as you know i think) for the obvious reason of being able to tunnel in and work on stuff. I'm trialling a few to try and find the best one - particularly one that can do 3 or more IP ranges specifically assigned to a certain port....

 

Hope that clear it up a little

Nath

[MkII]

Thanks Nath.

 

We have more than 255 devices attached now - which is why we have the second range. Staff and Student machines are not seperated - I have staff wanting to use PC's in offices and in classrooms as well, though SIMS access is mostly on dedicated admin machines.

[Ric_]

Mark, why not use NAT? You then only need a handful of 'outward' facing IPs.

[MkII]

Can you explain Ric_?

 

To the outside world we all[most all] present a single IP. We use the private range 172.16.x.x across the whole county for WAN addressing. If that helps :oops:

[ChrisH]

I shall explain it how I do.

Our County private range is 10.x.x.x

My internal IPs are 192.168.0.0/23

 

This is for all workstations and servers. When they need net access they go through the Proxy server which has 2 NICs.

One in the

10.x range

One in the 192.x

 

The one in the 10.x then goes to the router fitted by county on the 10.x range.

 

I therefore can use ip Addresses from 192.168.0.1-192.168.1.254 allowing me a lot more flexibility.

 

So the proxy server does all the address translation to the "outside" world.

[MkII]

I wonder if county would let us do that? We're currently told to use thier proxy - a central schools [/chuck out time - will resume later]