具有多个子网和Active Directory策略的Hyper-V服务器,并将域对象添加到本地组不工作

我的实验室是一台连接到无线路由器端口的testingHP计算机。 它正在运行带有Hyper-Vangular色的Windows 2012 R2,我试图模拟多个testing子网来testing一些场景。 一切似乎都正常工作与子网之间的基本IP连接和互联网。 但是,第三个networking中的计算机在第二个networking中没有从我的DC获取AD策略。 有没有人见过这个? 有没有我忽略的东西?

谢谢,克里斯

1 Cisco无线路由器(对互联网)IP地址:192.168.1.1 DHCP池:192.168.1.50到192.168.1.100

1 HP计算机运行安装了Hyper-Vangular色的Windows Server 2012 R2安装并configuration了RRASangular色pipe理操作系统的IP地址:192.168.1.200(静态)

Hyper-V Manager Virtual Switch Info: ------------------------------------ Virtual Switch 1 (External): vNET 1 (192.168.1.0/24) Virtual Switch 2 (Internal): vNET 2 (192.168.2.0/24) Virtual Switch 3 (Internal): vNET 3 (192.168.3.0/24) Network Connections Window: --------------------------- External NIC - Enabled Virtual NIC 1: vNET1 - 192.168.1.200 - Network - Internet access Virtual NIC 2: vNET2 - 192.168.2.1 - LAB_DOMAIN - Internet access Virtual NIC 3: vNET3 - 192.168.3.1 - LAB_DOMAIN - No Internet access (this is working!?) RRAS configuration: ------------------- NAT enabled - on vNET1 NIC LAN Routing enabled 

加工:

 HOST Ping SMB AD functionality Internet connectivity All VMs on vNET2 network (Lab VM machine with AD & DNS) (10+ machines running Server and Workstation OSes) Ping SMB AD functionality Internet connectivity All VMs on vNET3 network (3+ machines) Ping SMB Internet connectivity 

不工作:

 All VMs on vNET3 AD functionality - Active Directory Policy not coming down EventID 1129 "The processing of Group Policy failed because of lack of network connectivity to a domain controller. This may be a transient condition. A success message would be generated oncwe the machine gets connected to the domain controller and Group Policy has successfully processed." - Unable to add domain groups, users or computers to local groups (however, it does resolve the names when you click on 'Check Names') ERROR MSG: Window Title: Local Users and Groups Body: Information returned from the object picker for object "<group/user/computer>" was incomplete. The object will not be processed. 

通过禁用vNET3中的虚拟机上的防火墙或运行gpudate来解决此问题的几次尝试都会使Hyper-V服务器崩溃。 现在我已经在不到4个小时的时间内完成了4次。