Help with Laptop Wireless

[zarkon4]

I am having something strange happen, it seems that it started after upgrading the domain to Win 2003.

Here is what happens...

User takes laptop out of office, turns on wireless, connects
to an access point. user cannot connect to internet.

User calls IT, has IT remove laptop from domain, takes laptop out of office, turns on wireless, connects to access point. User has no problem connecting to internet.

I am at a loss, I would not want to have to disjoin a laptop from the domain every time a user want to take his laptop out of the office.
I don't even know where to begin to look for a solution.

I am beginning to wonder if it has something to do with Group Policy...but what setting?

Any ideas?

 

[rphips]

zarkon4

There could be several things blocking the access to the internet

1. The access point is that internal to your company or are you talking about a public one?

2. Do you have a firewall - if so check your settings to make sure the the syem allows wireless access to the outside.

3. when going outside and still in the domain what IP address are they recieving?

4. Can they access the internet within the domain?

bob

bob

"ZOINKS !!!!!"

Shaggy

 

[zarkon4]

1. The access point is external, either home or hotel.

2. Firewall can be on or off - still same results

3. DHCP addresses are being assigned properly. I have checked ipconfig /all from command prompt

4. Yes

 

[rphips]

zarkon4

let me get this straight - The wireless user can access the internet using the wireless connection when they are in the domain at your office (using your SIDD and WEP). But once they go home they cannot access the internet using wireless.
But if you remove the laptop from the domain they can gain access to the internet.

Ok - now how do they log on?

Inside the domain you logon as the ad users - outside of the domain they are most likely logging into the machine locally with the same login.
if this is so make sure the user (ad user) has admin rights to the local machine - this will allow the user to switch wireless setup when he is out of the office.
what it sounds like is the wireless was pre-set up and given to the user - (who was given no rights to the local machine) once the user leaves the domain he can login to the local machine but has no rights to modify or switch any configuration - but if you take the machine out of the domain - the local user has the power.

 

[zarkon4]

They have 2 logins setup on the laptop.

one is for the domain and the user is a power user (domain user).

the other is local to "this computer" and they have admin rights (local user).

The problem is only when they are out of the office. They cannot connect to the internet using the wireless connection, it does not matter whether they are a local user or a domain user. They will connect to an access point but cannot get to the internet unless the computer is disjoined from the domain.

I am considering writing an application the user can run to remove the computer from the domain when leaving the office, and rejoining upon return. At this point I am at a loss on how to correct this.

 

[schtek]

check your domain does it use a proxy for internet???
at home is the proxy still set?
just a thought

"Practice makes Perfect"
CPO rt'd RN

http://www.schtek.co.uk

 

[picohat]

You said

"They will connect to an access point but cannot get to the internet unless the computer is disjoined from the domain."

When you say the labtop will connect to an access point but cannot get to the internet, got to check whether the labtop got any IP, netmask and gateway assigned. You can use "ipconfig" in command prompt to check. After that compare the output with the case the labtop can really access Internet.

I think it can be related to wireless setup on labtop as well..Just try to help..

picoHat
Home Network, Wireless Network and Computer Networking Made Easy

 

[hayes47]

Windows firewall has 2 reg keys-could this be the issue.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
"EnableFirewall"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
"EnableFirewall"=dword:00000000

 

[kcbell]

zarkon4:

Has the problem been fixed?

Let me share my experience here.
- (2) logon is the right thing to do. However, not many access connection software will change some of the IE settings to accommodation different profile.
- Enable cache logon on the lapotp will allow them to logon with the work user name, password and domain.
- Users may have to change the IE proxy setting manually to "automatic" when they are away from the company.

Hope this help!

KCBell

 

[zarkon4]

I have tried all of the above. Nothing has worked.

 

[zarkon4]

Eureka! I found it... It was a setting in our group policy
"DNS Servers". It was overriding the nic card settings, I had cleared the entry in our group policy and now our users can access internet when they leave here.

 

[kcbell]

zarkon4:

GLad to hear that you fixed it. We have Norton personal firewall on laptop and desktop. We wasted many hours troubleshooting issues because we forgot there is personal firewall! Good job!

KCBell