Odd lock-ups with Windows Server 2003

We're using Windows Server 2003 as a Domain Controller, DHCP server, WINS server, file-server, and Active Directory server with Remote Installation Service enabled. It's based on an Intel SE7505VB2 motherboard, and 2GB of ECC-Registered/Buffered ram.

The issue here is related to network adapters we're using. For the domain network, we're using the gigabit network port. That part's fine. However, we also need internet access for the Domain Controller so it can periodically update various tax tables, so we can accept credit-card payments, etc. This is where the issues start...

The domain is running on the 192.168.0 subnet, and we want to keep the internet connection running on the 192.168.1 subnet. We also need to keep it firewalled as securely as possible, so we have a firewall/VPN router limiting all inbound connection attempts, and blocking all outbound connections other than those made on 4 ports (DNS, HTTP, HTTPS, and POP3). However, whenever I attempt to re-enable the second network adapter, the server completely locks up and requires a hard reboot. I've even tried disabling the onboard 10/100 adapter and using an add-in one, and we still have the problem. Sometimes, the server doesn't even completely boot (hangs at either "Applying computer settings" or "Preparing Network Connections" dialog) when the second adapter is connected to anything.

I've tried uninstalling and reinstalling the network adapter drivers, and we still have the problem. I think it may be something with the Active Directory service trying to make use of every network adapter present, but we don't want that to happen. We only want the Active Directory to run on the 1000Mbit adapter.

If anyone has any suggestions, feel free to fire em my way. I'm at a stand-still with this annoying issue.

 

Microsoft doesn't recommend or support multiple network adapters on a DC (Multihoned). I would simply use a router with 2 interfaces, one connecting to the internet side, and the other connecting to the domain side. You can create an ACL on the router / firewall to stop any would be hackers from the outside.