Win2K 3 not accessible from different subnet

[RookiePaul]

Hi there,

I am running a Windows Server 2003 domain on our office network (10.121.10.0/24). We recently added an Amazon Virtual Private Cloud (VPC) to the network via a site-to-site VPN. This is all working great and I have even added an Amazon instance to the office domain. The VPC subnet is 10.121.12.0/24.

My problem is that all my servers in the office can access and be accessed by the amazon subnet except for one which is my primary domain controller. The primary domain controller can ping/file share with servers on the amazon subnet, but when my instance in the amazon subnet attempts to ping/access shares on the primary domain controller it times out. I had this issue with some of my other servers originally but fixed it when I edited the group policy to allow communication from the amazon subnet but this didn't seem to fix it for the primary domain controller.

I'm fairly competent with Windows Server 2K3 but I come from a Linux background so I may be missing something small that is stopping this one server from being accessed correctly. It doesn't seem to be a firewall or routing issue that I can see.

So just to recap. Domain controller on office subnet can access the amazon box, but not the other way around, yet it can access all my other servers.

Any help would be greatly appreciated.

Regards

Paul.

[Syndrose]

Seeing as it is a domain controller, it was probably given a manual IP address and info. Make sure that it all got punched in the correctly, and that the DNS server and gateway is the same as the other boxes that are working.

Also from a command prompt, you can issue the "route print" command which will show you all the routes your computer knows about. It breaks it up by type of route, check the section labeled "Persistent Routes" and make sure its empty, or at least matches your other servers. Persistent routes are ones that are usually entered manually, and so they can be forgotten about.

Also check the GPO locally on the Win2k3 box, as depending on what OS your other servers run, the GPO might not be the same, and the Windows 2008 GPO's are a bit different then the older ones so they aren't shared by default with the older servers.