Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a Windows Server 2008 R2 (actually a SBS 2011, but it is a 2k8 R2 underneath) and a active directory domain running on that Server.
I now want to include our remote Web-Server into that domain so I can "reuse" the users (there is a TFS instace running on that server so I basicaly need all users from the local domain there).

To do this I created an OpenVPN Access Server (using the .ovs-Template for ESXi) and configured it including the port forwardings in my firewall.

I now can connect to the VPN-Server from the remote server using the connector application and also ping and access all local servers by their IP (even RDP works), but if I try a DNS lookup I do not get any response.

E.g. if I try nslookup domain.local I get ( is the DC/DNS):

DNS request timed out.
    timeout was 2 seconds.
Server:  UnKnown

DNS request timed out.
    timeout was 2 seconds.
DNS request timed out.
    timeout was 2 seconds.

So I can not add the server to the domain, because it doesnt "find" the domain.

Does anyone know what the problem here is?
I would also be open to any other solution to the base problem of getting the TFS on the remote Server to authenticate using the domain users.

If I configure OpenVPN on Layer 2 instead Layer 3 I can not even ping the local servers.

share|improve this question
Assuming that the TFS server isn't already joined to a domain and that TFS is using local user accounts or groups, joining the TFS server to your domain isn't going to change the local user accounts into domain accounts so you're not going to be able to "reuse" the local user accounts in a domain context. They will remain local users. That being said, if TFS is using users in the local Users group then you should be fine as the domain Users group will be added to the membership of the local Users group upon joining the domain. –  joeqwerty Nov 20 '12 at 1:08
@joeqwerty: I didn't create any local users for TFS yet, so this is not the problem. –  ChrFin Nov 20 '12 at 7:43
Can you telnet to port 53? If not, then you have a problem with your firewall or forwarding rules. –  Ryan Ries Nov 21 '12 at 21:28
@RyanRies: Thanks forthe tip, that actually didn't work (but did for HTTP/Port80), so I can search in that direction, but it even didn't work when temporarily dissabling the FW on so it must be somewhere in the OpneVPN connection... –  ChrFin Nov 22 '12 at 7:16

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.