Ok spiceheads, here's my dilemma...
First, the Facts.
1) Last Wednesday in the middle of the day, a Dell Proliant DL380 G6 server running 2008 R2, and running terminal services suddenly wont let users "Google." We have 15-20 Thin clients throughout the building that teachers use for their gmail, gDrive, google docs etc.
2) I got to the console and log in (I tried as both network admin and local admin), still no dice. We learn that it's not just "the google's" but any site using HTTPS.
3) It doesn't matter what browser we use, I've tried everything From IE, to K-melion,
4) Pinging www.google.com resolves an IP and gets a response, same as mail.google.com etc.
5) If i put Google's IP in the address bar of any browser, I am able to do a search and click on result pages (except secure ones).
5) Now the fun part... I CAN connect to two Https sites, our Sonicwall, and the ILO interface of this server.
7) DNS is served via our Domain controller
8) EVERY other computer on our network is perfectly fine, it is ONLY this one Terminal services server experiencing the issue.
9) No windows updates or any other programs were installed/removed that day or the day before.
Here's What I've done:
1) Changed DNS to 8.8.8.8, Dyn, OpenDNS etc. No difference.
2) Disabled/enabled IPv6
3) Removed any firewall rules pertaining to this server. I have also scoured the logs of the Sonicwall and have found only one entry having anything to do with this server (Facebook blocked due to content filter). There is no IPS configured for this Firewall.
4) Windows firewall is off.
5) No IIS is running.
6) Ran various and sundry (MalwareBytes, SPybot S&D and more) Anti-malware, and rootkit apps.
7) Ran AVG scan and then tried removing it to see if that made a difference.
8) And ,yes, time and date are correct on the server :)
9) Followed the instructions in the following articles:
http://www.bleepingcomputer.com/forums/t/41067/cant-access-secure-sites/
http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q318815
http://www.brighthub.com/internet/security-privacy/articles/126222.aspx
http://www.computing.net/answers/networking/cant-connect-to-any-https-web-sites/46619.html
http://www.techsupportall.com/solved-cannot-access-secure-sites-https-websites-not-opening-view/
Plus many more, I mainly put those links in to illustrate that i have done all the Basic stuff that one would do in this case. I don't think it is a simple issue. So what i am hoping, is that one of you Spiceheads has seen something like this before and figured out a solution. There were a couple threads i found where people seemed to be having the same issue, and they all ended with "we just reinstalled windows." Unfortunately in our environment taking this server offline long enough to rebuild the OS needs to be an absolute last resort.
If anyone has seen this, your help would be greatly appreciated! Thanks!