Domain Issues-Computers Seem to drop “off” the domain

active-directorydomain

I am having a issue with the domain at work (P.S I am not an IT prof.) and I was hoping someone could help me debug what is happening or point me in the direction of where to look.

The whole thing comes down to the fact that some of the Computers seem to be "dropping" off the domain. But its strange because I can still log in as domain\UserName from the computer, but when I look at the Networking And Sharing Center it doesn't show the domain, it just sees a network, and programs that use to run fine suddenly get timeout errors. As well it has been happening in such a way that first one computer drops off the domain then another and so on. If however I log on to one of the Computer that is still "on" the domain it works fine. But slowly all the computers are dropping off.

I have been doing a bit of looking around, but I'm still confused as to what's going on. These are some relevant points:

  1. All the computer that have dropped off, under windows firewall it says the domain is not connected, firewall is on
  2. All the those computers except for 1 I cannot ping from the server but I can ping the server from them.
  3. I also cannot ping between any of the PCs that are off domain.
  4. Note all these computers used to work fine on the domain, nothing has changed (except a new router was put in but none of the computers are connected through the router, they all go through a switch).
  5. It also seems to only affect the computers and not the users. I can log on to another computer and use everything fine.
  6. Under the System section the domain is set.
  7. I can still log on to those computers, even after setting the cached logon to 0.
  8. The server is Windows SBS 2003 and all the computers run Windows 7.

I am not sure if I have supplied enough information, but if someone could point in the direction to possibly narrow down what might be the cause or any help at all would be greatly appreciated.

Best Answer

I would immediately suspect the new network hardware that went in is issuing DHCP addresses, which the affected computers are using. I would also suspect this new hardware is setting itself as the DNS server, which will be the root of your issues.

Edit: Now you've discovered this is the problem, you have a couple of options:

  • If your Domain Controller is hosting the DHCP service, simply turn off the DHCP server on the router. Next time the computers send a DHCP request, the Domain Controller will respond accordingly.
  • If your Domain Controller is not hosting DHCP, I would recommend installing the built in DHCP server because this very tightly integrates with Active Directory and DNS. If installing DHCP is not an option, you will need to turn DHCP back on in the router configuration and change the DNS servers to point at your Domain Controllers.

If you start to have problems, fire up Wireshark and see what DHCP activity (or lack of) is happening on the network.