How to connect a Vista Client to the domain?
Date: Sat, 23 Dec 2006 13:44:54 PST
Subject: How to connect a Vista Client to the domain?
From: Hollis Paul
Newsgroups: microsoft.public.windows.server.sbs
I have installed a Vista client computer. I go to connect the computer to the domain by entering http://<domainserver> and get the page with the four options. I choose connect computer to domain. I get the page with the active x that tells me to start the wizard now. I click that, and get an error message which says I have to be an administrator on the computer (which I presume is the domainserver). I go to the SBS2003 console and add a new user, with the same name as the user on the client computer. I attempt to connect the computer to the domain, in the same way, and get the same error. I don't see anyway to tell it to use the domain user.
So, I create a computer and am told to go back and use the IE interface. Still will not let me connect.
How do we do this with Vista?
--
Hollis Paul
Mukilteo, WA USA
**************************************
From: "HandyAndy aka Andy Goodman [SBS-MVP}" <andy att spamkillerSBS-Rocks dot com>
Subject: Re: How to connect a Vista Client to the domain?
Date: Sat, 23 Dec 2006 18:27:50 -0500
Newsgroups: microsoft.public.windows.server.sbs
http://seanda.blogspot.com/2006/08/looking-to-run-vista-rc1-on-sbs-2003.html
**************************************
Date: Sat, 23 Dec 2006 19:23:32 PST
Subject: Re: How to connect a Vista Client to the domain?
From: Hollis Paul
Newsgroups: microsoft.public.windows.server.sbs
The first step seems to be the killer. It says to log in as the special administrator account that was set up in the install. How does one do that. All I am able to get to is the screen with the gliphs for the two users I created. Right-clicking doesn't get me a style drop-down in which I can "classical" version in which I can enter "Administrator". I presume it uses the same mechanism as WinXP did, but that installation was so long ago I have forgotten how it worked.
--
Hollis Paul
Mukilteo, WA USA
**************************************
From: "Kerry Brown" <kerry kdbNOSPAMsys-tems c*a*m>
Subject: Re: How to connect a Vista Client to the domain?
Date: Sat, 23 Dec 2006 19:38:58 -0800
Newsgroups: microsoft.public.windows.server.sbs
The article was written for RC1. In the RTM the built in administrator is disabled in safe mode as well unless there are no other admin accounts. To join a Vista pc to an SBS domain I just right click IE and pick Run as administrator. If you get any complaints about enabling the Intranet then do so. The wizard doesn't work 100% but it will get the pc joined to the domain and in the proper OU. It won't add any domain users to the local admin group so if you want that you'll have to logon as a domain admin and add the users or groups manually to the local admins group. The article is mostly right about the steps for RTM, just ignore the part about using the special administrator account.
--
Kerry Brown
Microsoft MVP - Shell/User
www.vistahelp.ca/phpBB2
**************************************
From: "kj"
Subject: Re: How to connect a Vista Client to the domain?
Date: Sat, 23 Dec 2006 21:34:41 -0700
Newsgroups: microsoft.public.windows.server.sbs
A little patience (January 2007) is asked as it appears.
http://support.microsoft.com/default.aspx?scid=kb;en-us;926505&sd=rss&spid=3208
--
/kj
**************************************
Date: Sat, 23 Dec 2006 22:18:38 PST
Subject: Re: How to connect a Vista Client to the domain?
From: Hollis Paul
Newsgroups: microsoft.public.windows.server.sbs
I did say I was interested in filling up a cold, winter night. I'm not interested in standing out in the cold and stargazing. No telescope, for one. And no digital camera to record anything on the telescope. That leaves working on the computer.
Besides, I feel simpatico with the Zantac Man. Wait a month? That's crazy talk. And, do you really have faith that the patch will appear in January? You believe in Santa Clause, still?
--
Hollis Paul
Mukilteo, WA USA
**************************************
From: "kj"
Subject: Re: How to connect a Vista Client to the domain?
Date: Sat, 23 Dec 2006 23:39:31 -0700
Newsgroups: microsoft.public.windows.server.sbs
I can't blame you for that but it said;
"Until the update is released, you must manually join Windows Vista-based computers to a Windows SBS network. To do this, follow these steps."
The 4 step program sounds much like what the patch will achieve.
--
/kj
**************************************
Date: Sun, 24 Dec 2006 09:08:15 PST
Subject: Re: How to connect a Vista Client to the domain?
From: Hollis Paul
Newsgroups: microsoft.public.windows.server.sbs
Actually, I don't really sympathize with Zantac man. And, while I have done almost everything on the server already, it does seem like a lot of extra work in the land of wizards. My basic values are beginning to kick in--What me Worry? What really frosts me is that I can go anywhere out there on the internet, get into any trouble I want, but I can't get to my home page because it resides on the SBS server intranet. Seems to me, that if the domain server was really controlling resources, it wouldn't even let me out on the internet. One gets the feeling that all this windows authentication is a bunch of smoke and mirrors, signifying not much, but guaranteeing product loyalty.
Which also raises a question. I have a WinXP client workstation that logs into its workgroup-not the domain. Yet, just having a domain account of the same name and password gives that client access to all the domain resources. Is Microsoft trying to kill off that basic, DOS connectivity?
--
Hollis Paul
Mukilteo, WA USA
**************************************
From: "Cris Hanna [SBS-MVP]"
Subject: Re: How to connect a Vista Client to the domain?
Date: Mon, 25 Dec 2006 09:07:16 -0600
Newsgroups: microsoft.public.windows.server.sbs
XP does a better job of allowing Pass Thru Authenication (PTA). In Vista the goal was to make it more secure, so, in otherwords, isolate a workstation that simply comes up, plugs into your ethernet and wants to try to access resources. Longhorn Server will enhance this "network" quarantine even further.
I have Vista Ultimate connected to SBS, its not a problem to do, several have outlined the procedure, and it will allow access to the resources then.
--
Cris Hanna [SBS-MVP]
<crisnospamhanna@computingnospampossibilities.net>
------------------------------
Please do not contact me directly, only respond in the Newsgroups
MVPs do not work for Microsoft
**************************************
Date: Mon, 25 Dec 2006 09:56:43 PST
Subject: Re: How to connect a Vista Client to the domain?
From: Hollis Paul
Newsgroups: microsoft.public.windows.server.sbs
Thanks, Cris, I will toy with it some more to see if I can get it to work.
--
Hollis Paul
Mukilteo, WA USA
**************************************
From: "Cris Hanna [SBS-MVP]"
Subject: Re: How to connect a Vista Client to the domain?
Date: Mon, 25 Dec 2006 12:17:07 -0600
Newsgroups: microsoft.public.windows.server.sbs
Just to be clear
1. Logon to Vista (with an account with Admin rights)
2. Right Click on IE > Run As Administrator
3. In the addresse bar > http://sbsservername/connectcomputer
4. From there you will have the same wizard as you do with XP
After a bit, it will come back up and tell you have to press Ctrl-Alt-Del
The account it will revert to is sbs_netsetup or something like that
Choose Logon as a different user
Logon with an SBS user name/password
You will need to get the new firewall client since you have premium
Ping me if you need help with this
--
Cris Hanna [SBS-MVP]
------------------------------
Please do not contact me directly, only respond in the Newsgroups
MVPs do not work for Microsoft
------------------------------
Send via Windows Mail on Vista Ultimate connected to SBS 2003 R2
**************************************
Date: Mon, 25 Dec 2006 13:06:49 PST
Subject: Re: How to connect a Vista Client to the domain?
From: Hollis Paul
Newsgroups: microsoft.public.windows.server.sbs
I did not go and get the hotfix that the KB 926505 says is necessary. So the wizard completed, with an error, and there is no client setup that I can find on the Vista computer. At least, there isn't anything on the menus. I haven't rooted about in the directories looking for it.
Do I need that hotfix?
--
Hollis Paul
Mukilteo, WA USA
**************************************
From: "Cris Hanna [SBS-MVP]"
Subject: Re: How to connect a Vista Client to the domain?
Date: Mon, 25 Dec 2006 16:00:32 -0600
Newsgroups: microsoft.public.windows.server.sbs
There is nothing you will really see. But what error did you get?
The KB article refers to an update to SBS for a more seamless adding of Vista clients to SBS
Its not out yet...won't be out till around the time that Vista is commercially available in stores (January 30th)
There is a new Firewall client out to let vista and ISA 2004 work more seamlessly, but you can make the current ISA client work, by using XP SP2 compatiblity and run as administrator on all the firewall client files in that folder.
--
Cris Hanna [SBS-MVP]
------------------------------
Please do not contact me directly, only respond in the Newsgroups
MVPs do not work for Microsoft
------------------------------
Send via Windows Mail on Vista Ultimate connected to SBS 2003 R2
**************************************
Date: Mon, 25 Dec 2006 20:31:12 PST
Subject: Re: How to connect a Vista Client to the domain?
From: Hollis Paul
Newsgroups: microsoft.public.windows.server.sbs
The message I got was the unhelpful "An error occurred when configuring networking settings. See your Network Administrator." Right on. But since I am the Network Administrator, it doesn't help much.
So, think things over, I recalled that I did not get the wizard to run by using the name of the account, but the logon name. Perhaps I should not be using an account for HollisVista Paul, but the HollisV64, which is the logon name. So, I created a user in the workgroup with that name, and gave it administrator group membership. Now, when I try to connect to the domain, I just get the error message at /ConnectComputer/Error.htm">http://<servername>/ConnectComputer/Error.htm . Specifically:
"The Small Business Server Networking Wizard was not installed. You may not be a member of the local Administrators security group on this computer or your Local Intranet security settings may be set to High. Click Connect to the network now to try again and click Yes when prompted. If the wizard fails to install, contact the person responsible for your network.
Connect to the network now"
In fact my Local Intranet security settings are set to Medium-low.
Does the fact that I don't have to go through the business of selecting a user account and computer mean that it falls in place from the name?
--
Hollis Paul
Mukilteo, WA USA
**************************************
From: "Cris Hanna [SBS-MVP]"
Subject: Re: How to connect a Vista Client to the domain?
Date: Tue, 26 Dec 2006 16:41:29 -0600
Newsgroups: microsoft.public.windows.server.sbs
Hollis
You forgot to right click on the IE and choose Run As Administrator Do that and then try the HollisV64 logon name and password
In network properties, uncheck the IPv6
--
Cris Hanna [SBS-MVP]
**************************************
Date: Tue, 26 Dec 2006 19:13:22 PST
Subject: Re: How to connect a Vista Client to the domain?
From: Hollis Paul
Newsgroups: microsoft.public.windows.server.sbs
Cris Hanna [SBS-MVP] wrote:
> You forgot to right click on the IE and choose Run As Administrator
> Do that and then try the HollisV64 logon name and password
>
Actually, it makes no difference between the two. It always goes to that error message.
Is the cursed FireWall blocking this? There are only three exception boxes checked on the allowed programs: core networking, network discovery, and remote assistance. Should anything else be checked for this? Should I disable the firewall just to test?
> In network properties, uncheck the IPv6
>
Fortunately, I never put anything into it.
--
Hollis Paul
Mukilteo, WA USA
**************************************
From: "Cris Hanna [SBS-MVP]"
Subject: Re: How to connect a Vista Client to the domain?
Date: Wed, 27 Dec 2006 10:28:01 -0600
Newsgroups: microsoft.public.windows.server.sbs
X64 connecting to SBS Premium has been an issue, but will get fixed with the update that is coming out, but I understand you don't want to wait for that.
Charlie Russel (Windows Server MVP) has been the expert for Vista X64 and SBS...I'll see if I can ping him and get him to jump in on this
--
Cris Hanna [SBS-MVP]
**************************************
From: "Charlie Russel - MVP" <charlie at mvKILLALLSPAMMERSps dot org>
Subject: Re: How to connect a Vista Client to the domain?
Date: Wed, 27 Dec 2006 09:53:16 -0800
Newsgroups: microsoft.public.windows.server.sbs
I don't have time or energy to read through the whole thread, I'm here because Chris asked me to. So if some of this has been covered, sorry about that. I'm on vacation and not supposed to be touching my computer, and definitely no newsgroups. ;)
1.) There is no official supported connectcomputer way to do this.
2.) That being said, I'm running it just fine. With one exception - you'll need to disable the automatic program launcher that hits every SBS client on every login. You don't want it on this box - it and UAC don't play nice together. You can't disable it by computer, you can only do it by user, by removing the SBS_LOGIN_SCRIPT.bat from the users Profile in ADUC.
3.) Disable the ISA RPC filter. It doesn't play well with anything x64.
( http://msmvps.com/blogs/xperts64/archive/2006/06/08/100096.aspx )
4.) Manually join to the domain, using standard Windows Server AD steps. Well and thoroughly documented many places.
5.) Install the updated ISA client. It's now available on the MS download site, see my blog for details:
http://msmvps.com/blogs/xperts64/archive/2006/12/12/finally-isa-client-for-vista-and-xp-x64-releases.aspx
6.) If you don't for some reason want to run the ISA client, use DHCP reservations and a custom IP address rule in ISA.
7.) Once the Vista x64 machine is joined to the domain, move it to the proper SBS spot in AD, using ADUC and dragging it to the proper folders.
8.) While in ADUC, remove the SBS_LOGIN_SCRIPT.bat from the user's profile that logs in to this computer.
9.) With R2, it _should_ get automatically added to WSUS, but if it doesn't, manually add it. Note: there is an issue currently with getting updates directly. Until there is an official Vista/SBS patch, you can only get WSUS approved updates once you're part of an SBS domain and are running Vista - you can't get to Windows update directly.
Sorry if turnaround will be slow here. You're welcome to ping me offline, but I'm just not spending time on the newsgroups while I'm on vacation.
--
Charlie.
http://msmvps.com/xperts64
**************************************
Date: Wed, 27 Dec 2006 11:08:42 PST
Subject: Re: How to connect a Vista Client to the domain?
From: Hollis Paul
Newsgroups: microsoft.public.windows.server.sbs
Thanks, Charlie. You go back to your vacation. I'll struggle as far as I can and will wait through January, if necessary, for the SBS2003 stuff from MS.
--
Hollis Paul
Mukilteo, WA USA
**************************************
Date: Wed, 27 Dec 2006 15:37:45 PST
Subject: Re: How to connect a Vista Client to the domain?
From: Hollis Paul
Newsgroups: microsoft.public.windows.server.sbs
Happy Days are Here Again!!! I did manage to get the computer to work. I was running down your list of steps, and step 4 failed, with the same error message.
So I started to do Stefano's procedure, went awry, and wound up at the System Information panel where you can change the name or join the network. So, for Duck Soup, I attempted to join the network, and it worked. It would not use the computer name I had set up, but used the workgroup name of the computer. It did find the user account I had created.
So now I am joined to the domain, and I also have the ISA firewall client running. Its clearly a good day.
Thanks go the Charlie and Stefano, and all the others who have helped along the way.
--
Hollis Paul
Mukilteo, WA USA
**************************************
What follows is a major subthread that over-lapped the main thread.
**************************************
From: "Stefano Colasanti"
Subject: Re: How to connect a Vista Client to the domain?
Date: Mon, 25 Dec 2006 18:25:50 -0500
Newsgroups: microsoft.public.windows.server.sbs
I am not sure that I am understanding what you say correctly so forgive me
if I misunderstood your issue.
Getting to the point: the actual situation is indeed far from perfect but you can access the domain resources, like the default home page on an intranet site; the only problem is that you have to manually set http://companyweb/default.aspx as your default page.
Happy Holidays
Stefano Colasanti
**************************************
Date: Mon, 25 Dec 2006 20:31:12 PST
Subject: Re: How to connect a Vista Client to the domain?
From: Hollis Paul
Newsgroups: microsoft.public.windows.server.sbs
Stefano Colasanti wrote:
> the only problem is that you have to manually set http://companyweb/default.aspx as your default page.
>
I'm afraid that doesn't work either. I entered that in the Internet Options and then started IE. It reported that it could not connect.
It is interesting that I can go to http://<servername> and get the page with the four options, one of which is companyweb. But when I click the companyweb link, it reports that it cannot connect.
--
Hollis Paul
Mukilteo, WA USA
**************************************
From: "Kerry Brown"
Subject: Re: How to connect a Vista Client to the domain?
Date: Mon, 25 Dec 2006 21:19:46 -0800
Newsgroups: microsoft.public.windows.server.sbs
What dns server is set in the TCP/IP properties for the Vista client?
--
Kerry Brown
Microsoft MVP - Shell/User
www.vistahelp.ca/phpBB2
**************************************
Date: Tue, 26 Dec 2006 11:44:44 PST
Subject: Re: How to connect a Vista Client to the domain?
From: Hollis Paul
Newsgroups: microsoft.public.windows.server.sbs
That is an interesting question. The TCP/IPv4 properties have DG, WNS and DNS set to the server IP. The TCP/IPv6 properties are undefined. Is that a problem here?
--
Hollis Paul
Mukilteo, WA USA
**************************************
From: "Kerry Brown"
Subject: Re: How to connect a Vista Client to the domain?
Date: Tue, 26 Dec 2006 13:01:37 -0800
Newsgroups: microsoft.public.windows.server.sbs
No, that is as it should be. I was just checking. The previous post and some of the others pointed to a possible DNS problem. It sounds like that is not the case.
--
Kerry Brown
Microsoft MVP - Shell/User
www.vistahelp.ca/phpBB2
**************************************
From: "Stefano Colasanti"
Subject: Re: How to connect a Vista Client to the domain?
Date: Tue, 26 Dec 2006 10:17:59 -0500
Newsgroups: microsoft.public.windows.server.sbs
This is weird; I was a beta tester for Vista and I never encountered this issue.
Eventually you could consider to wipe out you domain account and all the related files in Vista, delete and re-add the client computer in SBS and follow the wizard.
If this does not work either you could turn on and use the "real" administrator account that, in Vista, is hidden. If you decide to do this, don't forget, as soon as you succesfully joined the domain, to de-activate the "super-administrator" account.
Happy Holidays
Stefano Colasanti
**************************************
Date: Tue, 26 Dec 2006 08:29:13 PST
Subject: Re: How to connect a Vista Client to the domain?
From: Hollis Paul
Newsgroups: microsoft.public.windows.server.sbs
Thanks, Stefano, for the help.
> If this does not work either you could turn on and use the "real"
> administrator account that, in Vista, is hidden.
>
How do you do that? And, as a collateral issue, how do you dump that icon based logon page and go back to the classic logon control. I really do not see myself as either a flower, a goldfish, or a kitten. It is nice that Vista has advanced graphics, but this is really stupid.
--
Hollis Paul
Mukilteo, WA USA
**************************************
From: "Stefano Colasanti"
Subject: Re: How to connect a Vista Client to the domain?
Date: Wed, 27 Dec 2006 11:56:28 -0500
Newsgroups: microsoft.public.windows.server.sbs
DISCLAIMER: enabling the hidden "Administrator account" could increase the vulnerability of your system, follow the following procedure at your own risk.
Here it is what to do to enable the hidden ""Administrator account":
Log in Vista with your local account (The one you created when Vista was installed)/ Click the "Orb" (Start)/ Click "Control Panel", "System and manteinance", "Administrative tools"/ While in "Administrative tools" click "Computer management"(The link is in the right pane) and click OK in the "User Control Account Pop-up window/ Once in "Computer management" click "Local users and Groups" then "Users"/ Right click the "Administrator" icon and then "Properties" in the drop-down menu/ Uncheck "Account is disabled".
Now we get to the tricky part: in order for the newly enabled account to appear you have to delete the account you created when Vista was installed; in other words "Administrator" has to be the only existing account together with the "Guest" one (no need to enable the latter though).
For safety reason move all the data you are interested to keep and that is stored in one of the sub-folders under your original account.
Log off , click Ctrl-Alt-Del and now the newly enabled "Administrator" account icon should appear; login and run the wizard to join a SBS Domain again. Be careful: when you enter "your domain/ ConnectComputer" Vista could offer you to enable intranet settings" (this of course unless you already enabled it).
Again I would strongly recommend that after you succesfully joined the domain you re-create your "regular administrator" account and disable the other one.
Hope this help
Stefano Colasanti
**************************************
Date: Wed, 27 Dec 2006 11:08:42 PST
Subject: Re: How to connect a Vista Client to the domain?
From: Hollis Paul
Newsgroups: microsoft.public.windows.server.sbs
Thank you, Stefano. While I sometimes am willing to play risky, I usually wait till I know the "beast". So, I will probably disable the WAN connection before doing any of this, and will disable it after I am done. I will try Charlie Russel's procedure first. Perhaps this will not be necessary.
--
Hollis Paul
Mukilteo, WA USA
**************************************
From: "kj"
Subject: Re: How to connect a Vista Client to the domain?
Date: Wed, 27 Dec 2006 13:22:32 -0700
Newsgroups: microsoft.public.windows.server.sbs
>>>>>>>Wait a month? That's crazy talk.
..... Unless it comes from Charlie I suppose.
But then I can't blame you for trying all avenues. ;-)
--
/kj
**************************************
Subthread rejoins main thread.
**************************************
Subject: Re: How to connect a Vista Client to the domain?
From: Hollis Paul
Newsgroups: microsoft.public.windows.server.sbs
As you will see, I continued to poke at the problem, and it finally yielded. I don't have the foggiest idea what made it work, but finally the Connect to the Domain wizard on the System ID page worked this time. It failed before, but this time it worked. Perhaps it is because I had removed the logon script from the User's Profile and there was no attempt to push anything onto the Vista computer. That sounds reasonable; its my story and I'm sticking to it.
--
Hollis Paul
Mukilteo, WA USA
**************************************
From: "kj"
Subject: Re: How to connect a Vista Client to the domain?
Date: Wed, 27 Dec 2006 22:10:24 -0700
Newsgroups: microsoft.public.windows.server.sbs
Persistence and determination win out! Now if only you could repro it.
--
/kj
**************************************
Comment made by Josh on 12/14/2007
Here is how to get rid of toredo
1) In control panel, open up system. properties.
2) Select the hardware tab, and then click Device Manager.
3) In device manager, click the view menu and select "Show hidden devices".
4) You'll find "Teredo Tunneling Pseudo-Interface" listed under NetworkAdapters.
5) You can right click and disable it.
Josh
Posted using 