Cannot reach company's website internally

full picture:

small vpn 3 domain controllers dns located @ different locations.  1 dns server 2008 other 2 or 2012.  problem started after migrated exchange 2007 2013.  have office 365 , on-prim server.  original 2007 exchange server taken offline , demoted removing dns also.  changing primary dns on-prim server.  when try reach company's website internally, outlook web app (the on-prim exchange server) or error 403 forbidden:  access denied. no other complaints reaching other websites.

dcdiag reports:

an error occurred while using ssl configuration endpoint localhost: 443.  error status code contained within returned data

eventid"  0xc0003aad

i can ping dns servers.

primary dns server , mail1.xxx.com same server.

so when go xxx.com tries open outlook web app or error 403 forbidden. 

the problems trying open xxx.com trying open outlook, these host records, on primary dns server:

2013                                  host(a)      192.168.1.5

(same parent folder)   host(a)      192.168.1.5

dc001                               host(a)      192.168.1.5

how fix this?

---

praxishousing

hi praxishousing,

please use nslookup command check if client resolve fqdn of site want visit correct ip address, if yes, check if client ping resolved ip address successfully.

best regards,

anne

---

please remember mark replies answers if help.
if have feedback technet subscriber support, contact tnmff@microsoft.com.

Windows Server  >  IPAM, DHCP, DNS