I've banged my head for a few hours on this. I'm beginning to move several computers to a new subnet, all Windows 7, all domain joined. On the original subnet (192.168.145.X) everything works as expected. Once put on the VLAN for the new network (10.1.0.X) I can no longer RDP, ping, etc. even between the two on a local switch (e.g. no firewall rules applied).
Turning on logging of dropped packets for the windows firewall shows explicitly that ping and RDP are being dropped by the Windows firewall. I've turned the firewall off, but still cannot connect. I figure that, even as a local administrator, disabling the firewall may still have some GPO firewall settings applied from the domain that it is running, but RDP is enabled via GPO for all connections, all subnets. I've even created local rules on the windows clients to allow RDP.
What drives me up a wall is that if I change the switch to put the computers back on the default VLAN (192.168.145.X) it work with no issues.
If I throw 2 ubuntu VM's on the VLAN (10.1.0.X) I can ping or SSH all day long. I'm thinking it is a Windows Firewall issue, but all the settings seem correct and it works on the original subnet.
What hidden setting am I missing here?