IP connot obtain automatic address and static address only works internally

By lynnring ·
I have a Windows 2003 Server with 45 XP Pro machines connected on a single domain. Last Monday (6/2/0 one machine could no longer obatin an IP Address. If I manually insert address, the machine can access our server but not e-mail or internet. I figured I could deal with this later (Old machine, not a lot of need for this person to access e-mail or internet) however, today (6/9/0 I arrived to find one of our newer machines has the exact same problem. The user said machine was off all weekend and I am not showing any Windows Updates have been installed. Any ideas on what might be causing this and how to fix it? Please help!!

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Answers

Collapse -

Lan switch problem?

by robo_dev In reply to IP connot obtain automati ...

To begin with, are both machines on the same LAN switch? Failing ethernet switch?

Rogue DHCP server?

DNS hijack virus?

If you give it a static address, can it ping the default gateway?

Also, can it resolve DNS? Test with nslookup at the command line.

Can you surf via IP address?

Collapse -

Checked all these things - here's what I've got:

by lynnring In reply to Lan switch problem?

The machines are on two separate switches. When I ping the default gateway, 4 packets sent; 4 packets received; 0 packets lost. The nslookup on both machies is "***Default servers are not avaiable; Default Server: Unknown; Addres:". Also surfing by IP, I used excite which loaded with errors (the only thing that loaded was the advertisement icons and I couldn't get anywhere by clicking them). I hope this means something to you . . .

Collapse -

Your nslookup result is not normal

by robo_dev In reply to Checked all these things ...

you should be able to do 'nslookup' and get a valid response:


Most sites use the default gateway as the DNS address, such that DNS entries from the IPS are forwarded to the router, and then to the client.

Look at a functioning machine and compare DNS settings. Do a Nslookup on a normal PC and compare the results.

It sounds a bit like a DNS hijack virus to me. These try to take over the hosts file on the local PC, and hard-code their own DNS server addresses in the PC.

Related Discussions

Related Forums