I configured a DA server for our company which uses a split brain DNS infrastructure. We have a DA server with one network adapter behind a NAT firewall. Almost everything seems to work but we are not able to reach our intranet resources.
The client tries to establish a connection, but in the DA properties on the client, the status remains “connecting”, “Attempting to reach network resources”. I can see that the HTTPS-IP interface is up, and I’m able to ping the DA server with is IPv6 address.
The exemptions in the NRPT table are working. I’m able to access all resources from the internet which are specified in the NRPT table.
Some configuration we have done:
- DA Server is Windows 2012
- Client Windows 8 Enterprise
- Removed ISATAP from the query block list on the DNS server
- TEREDO and ISATAP interfaces on the client are disabled
- Directaccess URL is defined as an exemption in the NRPT table (otherwise we are not able to establish a connection to the DA server, split brain DNS)
- …
Can anybody help?
Thanks in advance…
Urs