the system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you.

 

please help any advice, thanks...

 

I've done:

 

port 88 settings TCP/UDP - not working

Disable kerberos on account - not working

try to un-join domain and re-join.

@ICTCity

 

still not working can you give me a link on how to change Preferred DNS Server?

 

Someone advice me like this "Setting the Preferred DNS Server to the DC Address, and alternate DNS Server to the router address" I cannot browse and see in our Windows Standard 2008 Server. Thanks.

 

Temporary: I manually set-up the DNS Server to affected Clients as of now is working, but I want to retain the original Obtain IP address.

Who is providing addresses? in other words, who is your dhcp server?

 

If it is under windows:

under DHCP settings, you can easily assign the DNS ip.

@ICT City

 

thanks for your reply: this is the scenario

 

My Default DNS Server: 192.168.0.200 (Also my DHCP Server)

 

But once my Client join the domain gets this DNS Address: 202.20.20.200 which is comes from my ISP DNS, so there are times they cannot connect to Data Server (192.168.0.200)

 

I want to retain that once my Client connected they can get this DNS IP Address: 192.168.0.200 instead of ISP DNS Adddress (202.20.20.200)

That means you have 2 dhcp server or one but misconfigured.

 

Check under SCOPE of your windows dhcp server if there's the correct DNS server, if it is correct, well you have somewhere another dhcp server.

 

Check this article to better understand how to setup the dhcp server:

http://www.windowsnetworking.com/articles_tutorials/How-to-Install-Configure-Windows-Server-2008-DHCP-Server.html

Thank you very much, now its working i can see to all clients that there getting the right DNS Server Address:192.168.0.200 with Alternate DNS 202.20.20.200

 

It is after I add 192.168.0.200 to DHCP Server Scope DNS Server option.

 

It is true that?

 

192.168.0.200 - Is my DNS Server Address for Internal Network Then 202.20.20.200 for External DNS Server Address?

Yes it is. But in most cases you assign just the internal DNS, then is the internal DNS itself that forward request to root servers.

Thank you for you help, now all workstation is working.

 

Can I ask one more question? Can you check if there is still problem with my set-up?

 

Server INFO:

 

IP Address: 192.168.0.200

Subnet Mask: 255.255.255.0

Default Gateway 192.168.0.8 (ISP #1) - Do I need to change this with my present ISP # 2 IP: 192.168.0.7

DHCP Server: 192.168.0.200

202.20.20.200 (ISP #2)

 

Workstation CLIENT:

 

IP Address: 192.168.0.65

Subnet Mask: 255.255.255.0

Default Gateway 192.168.0.7 (ISP #2)

DNS Server: 192.168.0.200

202.20.20.200 (ISP #2)

 

ISP # 1 : 192.168.0.8 (Linksys) ISP #2 : 192.168.0.7 (Dlink)

 

nslookup result:

 

Default Server: Unknown

Address: 192.168.0.200

I don't know if it is right... I mean... yes it's right at network level, but I don't know if the 192.168.0.200 is a DNS server... but if it is... ok no problem.

 

I only hope that yours servers have a static IP.

 

If you need more help, try to be a bit more specific.

Many thanks for your help. Yes all is works fine. My DNS Server is 192.168.0.200 also.