2 Replies Latest reply on Dec 1, 2011 12:23 AM by nidob

    Joining MWG7 on Windows Domain


      Hi All,


      I'm trying to join MWG7 on our Windows Domain (Windows Server 2008)


      Under Windows Domain Membership menu, I add our domain name and using an account capable of adding computers on the domain.


      Upon checking our Active Directory, I can see the name of our MWG under the Computers.

      But when I check the status of MWG on the domain membership, it was not connected and MWG is generating a report that it cannot contact our domain.


      Can anyone share me how to troubleshoot this?


      fyi, if I use LDAP, MWG can properly retrieve user information on it.




        • 1. Re: Joining MWG7 on Windows Domain

          Hello Nido,


          most issues when joining a Domain are related to DNS. You need to ensure that DNS is properly working, e.g. you need to be able to resolve the Domain Controllers FQDN on Web Gateway forward and backwards. In many cases this is causing problems. To quickly test, you can add the Domain Controller into the /etc/hosts file on MWG (can be done via the GUI).


          In my Lab for example my domain is "mcafee.local". My DCs are called pdc and bdc. In MWG I have to specify "mcafee.local" as the domain name, and add pdc.mcafee.local and bdc.mcafee.local as the Domain Controllers (do NOT specify IP addresses here!).


          On the MWG CLI if I ping pdc.mcafee.local I see the IP address of my DC and - the other way round - if I resolve the IP I get the FQDN back. This is really important.


          Additionally you may want to check if there are any restrictions for the computer account MWG creates. It needs to set and change a password on a regular basis, maybe this is not allowed due to group policies.


          I would check DNS first. Most likely this will already help.




          • 2. Re: Joining MWG7 on Windows Domain

            Hi Andre,


            You were right! I did not know that IP addresses were not allowed to be use as the Domain Controllers address.


            I have not done any other changes both on the MWG and on the AD.