Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 134
  • Last Modified:

Newly built systems cant logon to domain

When I build a new system and initially try to logon to the domain (mixed mode AD and one BDC) I always get an error about the "primary account" etc. and I have to wait for a while before the system can logon to the domain with a legitimate user logon.

I have no problem geting to network resources if I use the local admin logon but it seems I always have to wait for a while before my domain logon works. Im sure it has something to do with DNS or WINS perhaps ? Any ideas ?
0
tmccabe
Asked:
tmccabe
1 Solution
 
YarnoSGCommented:
after adding the machine to the domain, you need to allow some time for the new MACHINE account to be replicated through AD;  if you have a large network, and your DCs are separated by large geography, this can take some time.

Where I am at, we have more than 50K machines on our network and are in every time zone on the planet;  when we add a machine to the domain, we need to wait until at least the local DCs are aware of the PC before we can use it on the domain;  for us this delay is usually less than 15 mins.


HTH
-Steven Yarnot
http://yarnosg.home.insightbb.com
0
 
tmccabeAuthor Commented:
50 thousand computers on your lan ? betcha cant name them all
0
 
tmccabeAuthor Commented:
Seriously though, what part of AD handles this ? I want to find out.
0
Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

 
YarnoSGCommented:
How are you building machines?  Imaging?  did the prototype system have a domain account?  how are you adding machines to the domain (or are you?)?  Do you have many, or just a few DCs?  are they all local or distributed geographically?  More information on your problem please


"betcha cant name them all" >> you would be correct.  I only deal with about 3500 of them in my little corner of the network;  I can't even name all of them, even with our naming conventions.


-Steve
0
 
tmccabeAuthor Commented:
Yarno - Its a single domain with 2 AD DC's and one BDC leftover as we are in mixed mode. and I get the same result if I "build" from scratch or use a ghost image for those systems that we have a lot of.

I noticed that when systems were added to the domain back when it was an NT4 PDC prior to migrating to AD this never happened.
0
 
YarnoSGCommented:
Do you have a machine doing PDC emulation?

-Steven Yarnot
0
 
tmccabeAuthor Commented:
the "main" DC running AD was once a PDC that was promoted during migration using DCpromo. I have one other DC that was Windows 2000 from scratch and one old BDC that hasnt been retired yet.
0
 
tmccabeAuthor Commented:
the "main" DC running AD was once a PDC that was promoted during migration using DCpromo. I have one other DC that was Windows 2000 from scratch and one old BDC that hasnt been retired yet.
0
 
tmccabeAuthor Commented:
the "main" DC running AD was once a PDC that was promoted during migration using DCpromo. I have one other DC that was Windows 2000 from scratch and one old BDC that hasnt been retired yet.
0
 
aftershoqCommented:
If running DHCP - have DHCP do auto updating to DNS.  It will give a list of computers/IPs it serves to the DNS server.  That might speed things up.
0
 
spin36Commented:
what others things are you getting your PDC to do or is just SOA?
0
 
tmccabeAuthor Commented:
Steve - is there a setting for updating the AD database  or for  how long it should take for the "machine account" to be created ? We have a simple one domain , 3 DC network.
0
 
YarnoSGCommented:
A machine account is created the moment a machine is added to the domain, but the REPLICATION of that account to the other DCs may take some time.  The account is created on the DC that the machine is talking to, which can change at each boot.  You probably need to look into potential replication issues.

-Steve
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now