Solved

Windows 98 clients can't login when first DC is down.

Posted on 2003-12-05
8
426 Views
Last Modified: 2010-04-14
When I shut down the first DC that I setup for the domain, my Win98 clients can't login to the domain with the bad password/access denied message.  I know the domain is replicating OK, and my XP clients can login fine albeit a bit slower than usual.

It is a single domain with 2 domain controllers.

If I got the message "no domain server was able to validate your password" I would know that the clients couldn't even see the second DC so I'm a bit confused as to the problem.

Then I was thinking it was possibly an FSMO issue and PDC emulation, but I don't want to have to switch roles every time I take down a DC for maintenance or something.  Isn't that the job of AD?

Am I missing something simple?

Thanks!
0
Comment
Question by:kcorbiniqg
  • 3
  • 2
  • 2
  • +1
8 Comments
 
LVL 32

Expert Comment

by:Luc Franken
Comment Utility
1st, I already saw your posting in CS conserning that question.
2nd, let's see what we can tell that guy
0
 
LVL 32

Expert Comment

by:Luc Franken
Comment Utility
Oops, wrong question :-(
0
 
LVL 6

Expert Comment

by:Casca1
Comment Utility
Ummm, the problem is that you need to have a GC available. The reason your 2K clients logon is they are using cached credentials. It's not a big issue to resolve, however. Just add the second DC as a Global Catalog server, and you'll be fine.
0
 

Author Comment

by:kcorbiniqg
Comment Utility
Both DCs were already GC servers (the 'Global Catalog' box is checked under NTDS settings).  I then had just the non-primary DC be the GC server and still no dice.
0
What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

 
LVL 6

Accepted Solution

by:
Casca1 earned 250 total points
Comment Utility
Ok. Well, do these computers have the DSClient on them? If not, it's going to be an issue with the PDCemulator.
0
 
LVL 1

Expert Comment

by:cawelty
Comment Utility
Is the one domain controller also the DNS server that the win98 clients are pointed to?  
0
 

Author Comment

by:kcorbiniqg
Comment Utility
File this one under DOH!
After trying the PDC emulator role switch and the DSClient, it still didn't work.  This led me to start looking at all aspects of accessing the second domain controller.  Turns out, I had disabled File and Print Sharing.  I had done that a while back in a quest for minimalism while this machine was just an Exchange box and not a DC.

As usual, the most perplexing problems have the smallest fix.

Thanks for giving me some other things to think about however, and I was unaware of the DSClient in the first place so thanks for bringing that to my attention.
0
 
LVL 6

Expert Comment

by:Casca1
Comment Utility
My pleasure, and thanks for the points and score.
0

Featured Post

Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Suggested Solutions

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now