?
Solved

Newly built systems cant logon to domain

Posted on 2003-03-21
13
Medium Priority
?
132 Views
Last Modified: 2010-04-13
When I build a new system and initially try to logon to the domain (mixed mode AD and one BDC) I always get an error about the "primary account" etc. and I have to wait for a while before the system can logon to the domain with a legitimate user logon.

I have no problem geting to network resources if I use the local admin logon but it seems I always have to wait for a while before my domain logon works. Im sure it has something to do with DNS or WINS perhaps ? Any ideas ?
0
Comment
Question by:tmccabe
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
13 Comments
 
LVL 7

Expert Comment

by:YarnoSG
ID: 8181424
after adding the machine to the domain, you need to allow some time for the new MACHINE account to be replicated through AD;  if you have a large network, and your DCs are separated by large geography, this can take some time.

Where I am at, we have more than 50K machines on our network and are in every time zone on the planet;  when we add a machine to the domain, we need to wait until at least the local DCs are aware of the PC before we can use it on the domain;  for us this delay is usually less than 15 mins.


HTH
-Steven Yarnot
http://yarnosg.home.insightbb.com
0
 

Author Comment

by:tmccabe
ID: 8181467
50 thousand computers on your lan ? betcha cant name them all
0
 

Author Comment

by:tmccabe
ID: 8181814
Seriously though, what part of AD handles this ? I want to find out.
0
Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

 
LVL 7

Expert Comment

by:YarnoSG
ID: 8181839
How are you building machines?  Imaging?  did the prototype system have a domain account?  how are you adding machines to the domain (or are you?)?  Do you have many, or just a few DCs?  are they all local or distributed geographically?  More information on your problem please


"betcha cant name them all" >> you would be correct.  I only deal with about 3500 of them in my little corner of the network;  I can't even name all of them, even with our naming conventions.


-Steve
0
 

Author Comment

by:tmccabe
ID: 8182027
Yarno - Its a single domain with 2 AD DC's and one BDC leftover as we are in mixed mode. and I get the same result if I "build" from scratch or use a ghost image for those systems that we have a lot of.

I noticed that when systems were added to the domain back when it was an NT4 PDC prior to migrating to AD this never happened.
0
 
LVL 7

Expert Comment

by:YarnoSG
ID: 8182287
Do you have a machine doing PDC emulation?

-Steven Yarnot
0
 

Author Comment

by:tmccabe
ID: 8182389
the "main" DC running AD was once a PDC that was promoted during migration using DCpromo. I have one other DC that was Windows 2000 from scratch and one old BDC that hasnt been retired yet.
0
 

Author Comment

by:tmccabe
ID: 8182747
the "main" DC running AD was once a PDC that was promoted during migration using DCpromo. I have one other DC that was Windows 2000 from scratch and one old BDC that hasnt been retired yet.
0
 

Author Comment

by:tmccabe
ID: 8182827
the "main" DC running AD was once a PDC that was promoted during migration using DCpromo. I have one other DC that was Windows 2000 from scratch and one old BDC that hasnt been retired yet.
0
 

Expert Comment

by:aftershoq
ID: 8184209
If running DHCP - have DHCP do auto updating to DNS.  It will give a list of computers/IPs it serves to the DNS server.  That might speed things up.
0
 

Expert Comment

by:spin36
ID: 8185937
what others things are you getting your PDC to do or is just SOA?
0
 

Author Comment

by:tmccabe
ID: 8219773
Steve - is there a setting for updating the AD database  or for  how long it should take for the "machine account" to be created ? We have a simple one domain , 3 DC network.
0
 
LVL 7

Accepted Solution

by:
YarnoSG earned 600 total points
ID: 8219965
A machine account is created the moment a machine is added to the domain, but the REPLICATION of that account to the other DCs may take some time.  The account is created on the DC that the machine is talking to, which can change at each boot.  You probably need to look into potential replication issues.

-Steve
0

Featured Post

Enroll in August's Course of the Month

August's CompTIA IT Fundamentals course includes 19 hours of basic computer principle modules and prepares you for the certification exam. It's free for Premium Members, Team Accounts, and Qualified Experts!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Introducing Priority Question, our latest feature.
In this video you will find out how to export Office 365 mailboxes using the built in eDiscovery tool. Bear in mind that although this method might be useful in some cases, using PST files as Office 365 backup is troublesome in a long run (more on t…
Visualize your data even better in Access queries. Given a date and a value, this lesson shows how to compare that value with the previous value, calculate the difference, and display a circle if the value is the same, an up triangle if it increased…

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question