Apfelmus
Hello everybody,
I hava a Domain-logon-problem with Windows10 Clients.
Everything is working fine on the XP and Windows7 Clients.
I have a SBS2008 Server with openVPN installed, tap device.
I have XP, W7, and W10 clients with openVPN installd as a service.
I can connect on all clients to the server, Ping works, shares work.
But new AD-user do not work on the w10-clients.
If I add a new user to the SBS-Server and want to logon at the W10-client over openvpn, I get the message "Es ist kein Anmeldeserver verfügbar" that means "there is no logonserver reachable".
(Existing user on the w10-client work, but I haven´t tried to change the password at the server.)
---
here is the server-config:
port 1199
proto udp
dev tap
dev-node openvpn
ca ca.crt
cert serv2003.crt
key serv2003.key
dh dh1024.pem
topology subnet
server 10.0.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
duplicate-cn
keepalive 10 120
comp-lzo
max-clients 15
persist-key
persist-tun
status "c:\\programme\\openvpn\\log\\openvpn-status.log"
log-append "c:\\programme\\openvpn\\log\\server.log"
verb 3
mute 20
---
here s the client-config:
remote xxx.xxx.xxx.xxx 1199
proto udp
dev tap
dev-node openvpn
tls-client
ca "C:\\Programme\\OpenVPN\\config\\ca.crt"
cert "C:\\Programme\\OpenVPN\\config\\client01.crt"
key "C:\\Programme\\OpenVPN\\config\\client01.key"
ns-cert-type server
comp-lzo
pull
keepalive 15 60
verb 3
mute 50
persist-key
persist-tun
---
And I hab to set these registry-keys on the clients:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Parameters]
"DomainCompatibilityMode"=dword:00000001
"DNSNameResolutionRequired"=dword:00000000
---
It seams to me that MS has changed something to the worse in W10.
Can anyone help?
best regards
Apfelmus
Apfelmus
!! Solved !!
Hello everybody,
nobody wanted to post a reply to my problem, so I had to think and try for myself and ask google ...
The bad guy was the DNS-Server in my SBS-2011 Server.
I added the IP of the openvpn-tap-adapter (10.0.0.1)
and I made a new enty in the reverse lookup table for the 10.0.0 lan
and made a server restart.
Now I can see the IPs of my client PCs in the IP-table and can logon with a new domain-user to the client-PC (over openvpn)
I can start outlook and the new user is found automatically and outlook does a selfconfig.
8-) 8-)
In the client hosts file I made two entries: "10.0.0.1 servername" and "10.0.0.1 servername.domain.local"
The clients use their lancard for google and the openvpn-card for the server-access
😃
Some things do not work yet, but that is no real problem:
I cannot set the autoresponder in Outlook, but that can be done with owa.
I cannot set a user as the local administrator of the remote client pc.
---
I hope this solution is good for someone else too.
Best regards
Traffic
Hi
Thanks for letting us know your solution 8-)
Also, as you have access to Microsoft OS's and you are clearly capable of solving problems
I would like to say, if you have any spare time, the Developers are always looking for people
who can offer a little help testing new openvpn versions with Microsoft systems.
Subscribe to the developer/user mailing lists to find lots more details.
Kind regards
