Multiple non-trusted domain active scan not working

[Mike_Large]

We have upgraded our 3.5 installation of Lansweeper to 3.5.1 on our primary domain anesis.net in great hopes of finally being able to active scan the two other domains in our organization hhcomt.local & bqhhc.bqhhc.com using alternate creditials.

No matter what we configure in the alternate creditials, the other two domains not being scanned. The errorlog.txt file gives us the following messages:

5/15/2009 10:36:55 AM: bqhhc.bqhhc.com The server is not operational.

5/15/2009 10:37:02 AM: hhcomt.local The server is not operational.


Are there any tools available similiar to the connectiontester that would help us test the Domain DNS names & Domain Netbios name to determine why we cannot access the domains.

Does the lansweeper service need to be installed on the other domains or does some Windows service need to be running that we are unaware of?

[Hemoco]

There are several ways to solve this:

1) using one dns server with dns forwarding for the other zones.
2) using multiple dns servers in the tcp/ip properties.

It doesn't matter how you do it, but you have to make sure this works:

No, I cannot ping bqhhc.bqhhc.com from the anesis domain were the Lansweeper service is running.

[Mike_Large]

I made the changed to my NIC configuration on my lansweeper server as stated in http://www.lansweeper.com/kb/untrusted.aspx, but that did not affect the active scanning of the other two domains. We are still receiving the same errors.

After looking at your instructions again it appears you are using one DNS server for both domains. Is this required for the active scanning to work?

As I have stated before all three of our domains are completely autonomous of each other, which includes each domain having its own DNS server. We do have some manual entries in ANESIS’s DNS for management of the other servers.

[Hemoco]

Take a look here : http://www.lansweeper.com/kb/untrusted.aspx
(at the bottom)

[Mike_Large]

No, I cannot ping bqhhc.bqhhc.com from the anesis domain were the Lansweeper service is running.

Do I need to put some entry in the ANESIS DNS server to recognize the bqhhc.bqhhc.com domain? If so, what do I enter.

As far as I know you can only ping machine names and not domains anyway. I already had entries in the ANESIS DNS for the machines in the HHCOMT & BQHHC domains. I can ping all of the individual machines on all domains from the ANESIS machine were Lansweeper is running.

THANKS for all of your quick responses.

[Hemoco]

What you entered in the configuration looks ok.

Are you able to "ping bqhhc.bqhhc.com" from the lansweeper server?

[Hemoco]

Did you check the DNS resolution?

[Hemoco]

Could you send me your configuration details please. (screenshots)
Make sure that the lansweeper server can resolve the dns names of the target domains.

[Mike_Large]

Lansweeper wrote:
Could you send me your configuration details please. (screenshots)
Make sure that the lansweeper server can resolve the dns names of the target domains.

I attached the requested screenshots to the primary post.

These are three completely different domains that are not associated with each other except they are on the same physical network. They each have there own seperate DNS and operate independantly of each other.

Just as a wild test, I removed bqhhc at this point to make thing simplier and changed hhcomt.local to the actual machine name hmtdc (the HHCOMT domain controller server). The orginal "The server is not operational." did not show up but I got the follow error message in errorlog.txt:

5/15/2009 3:14:10 PM: Database connection successful, starting up service
5/15/2009 3:14:17 PM: A referral was returned from the server.
at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
at System.DirectoryServices.DirectoryEntry.Bind()
at System.DirectoryServices.DirectoryEntry.get_AdsObject()
at System.DirectoryServices.DirectorySearcher.FindAll(Boolean findMoreThanOne)
at System.DirectoryServices.DirectorySearcher.FindAll()
at LansweeperService.LS_ActiveDirectory.EnumerateDomainControllers(LS_Domain Mydomain)

I hope I'm just confussed but it may be helpful to know exactly what should be entered in the active scanning (I can see what could be entered different for domain creditials). How exactly are you authenicating to a non-trusted domain. Maybe that will help me figure out what I am doing wrong. I was hoping you had some tool or command line options I could use to determine if we are configured correctly to access the other domains. Does WINS come into play here?

How would you like me to test DNS resolution since the three domains are completely seperate of each other. Do I need to manully put some entry into my anesis DNS to recognize the other domains?

If I perform a net view at the command line on aneas (lansweeper server), I do not see the hmtas.
C:\Documents and Settings\administrator.ANESIS>nbtstat -n
Local Area Connection 3:
Node IpAddress: [192.168.2.33] Scope Id: []
NetBIOS Local Name Table
Name Type Status
---------------------------------------------
ANEAS <00> UNIQUE Registered
ANESIS <00> GROUP Registered
ANEAS <20> UNIQUE Registered
ANESIS <1E> GROUP Registered

When I ran this on the hmtdc machine I get:
C:\Documents and Settings\Administrator>nbtstat -n
Node IpAddress: [192.168.2.121] Scope Id: []
NetBIOS Local Name Table
Name Type Status
---------------------------------------------
HMTDC <00> UNIQUE Registered
HHCOMT <00> GROUP Registered
HHCOMT <1C> GROUP Registered
HMTDC <20> UNIQUE Registered
HHCOMT <1B> UNIQUE Registered
HHCOMT <1E> GROUP Registered
HHCOMT <1D> UNIQUE Registered
..__MSBROWSE__.<01> GROUP Registered


I'm sure I gave you a lot you did not need but I sent it just in case.


THANKS for all of your help.