Windows CE + Remote Desktop connection to an IP + OpenDNS = Idiocracy
My company uses Windows Terminal server extensively so most of our users connect via thin clients running Windows CE. I am currently in the process of pointing all of our thin clients to point to a DNS name rather than an IP. But there are still several thin clients which are still point directly to an IP address.
For a couple of reasons, I decided it would be a great idea to switch our DNS servers to forward to OpenDNS. I make the switch late in the evening, check that I can browse the internet, and figure all is good. Wrong. My slumber is quickly broken by a 6 AM wakeup call that certain thin clients are unable to connect to our terminal servers. I determined that it was only the thin clients which were connecting directly to an IP address that were affected. I test the usual suspects. I can ping the thin clients, IP settings look correct, everything looks in order and I am stumped. Since these are pointed directly to an IP address DNS should not be a factor. Or so I thought.
Finally, I find a thin client which is affected and I bust out Wireshark. To my amazement, Windows CE was doing an A record lookup for the IP address. By its design OpenDNS returns 208.69.32.132 for any A record lookup that doesn’t have a valid record. So the thin clients were then trying to connect to the OpenDNS IP instead of the IP address which was programmed.
Thank you Microsoft for leaving out the “IF <> IP THEN Do a DNS Lookup” logic.
To be fair, most, if not all, of these thin clients are pretty old so this may have been fixed. Nonetheless I found it pretty backwards.
Posted: February 11th, 2009 under Terminal Server.
Comments: none