none
DisableStrictNameChecking; server alias does not work from the actual server RRS feed

  • Question

  • Hello,

    I am not sure if this would be a network issue or file sharing issue, so I will try here.

    I have a domain server with two NICs and subsequently two IPs (on the same subnet). The second NIC/IP has no gateway, therefore uses the first NIC/IP's gateway.

    I have created the DisableStrictNameChecking registry value and rebooted. I have created two DNS A records: "server" resolves to the one NICs IP and "server2" resolves to the other NICs IP (IP2 in my example).

    What I am doing is using DFS and have created a DFS namespace called \\domain\share and am trying to add a second target for each link; one target is \\server\sh1 and the other target is \\server2\sh1.  From any domain PC, I can open explorer and type \\server1\ and see Scheduled Tasks and non-hidden shares, etc fine. I can also access the same through \\server2\ and see the same items.

    The problem I am having is that when actually logged on to "server", the \\server\ works as expected, but \\server2\ does not show anything and pressing Enter results in a username/password prompt (that doesn't even work with proper authentication information). From the server, using the explicit IP address, \\IP2\ works fine though.

    Is there a way to get \\server2\ to work as expected when logged on to the actual server? This happens on both Windows Server 2003 SP2 and Windows Server 2008 SP1 servers.
    Friday, March 13, 2009 3:50 PM

Answers

  • Sorry,  I just found out about DisableLoopBackCheck...

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
    "DisableLoopBackCheck"=dword:00000001

    This seems to have resolved it in both 2008 and 2003.
    • Marked as answer by HillJack Friday, March 13, 2009 4:43 PM
    Friday, March 13, 2009 4:43 PM