Solved

Clients won't login to local domain controller when WAN link is down

Posted on 2004-04-01
9
376 Views
Last Modified: 2006-11-17
I have a Win2K AD domain in a school district, and have multiple sites configured in AD, each with their own domain controller. These sites are connected physically by T1. When the T1 is up and operational, the clients login just fine, and by running a script, I can tell that they are authenticated by the local on-site domain controller. But when the WAN is down, they can't log in at all. The local DC's are configured as GC controllers, and each site has all their resources local. I designed it this way so they would be able to continue to work when the WAN link was unavailable. But it's not working. Something is still tying them to the main site, where the PDC emulator resides. Shouldn't I be able to log these clients in with local resources when the WAN is down?
0
Comment
Question by:David Goldsmith
  • 5
  • 4
9 Comments
 
LVL 31

Expert Comment

by:Gareth Gudger
ID: 10734881
Yes you should.

Are these all separate domains? Or is it the same domain but with a DC in each location?

Also, how are you binding the NICs in the DCs? I assume these are multihomed to allowed internet access or do they have a different gateway for that purpose?
0
 

Author Comment

by:David Goldsmith
ID: 10735357
Single domain, separate DC in each location. Servers not multi-homed, they have a gateway to get back to the District Office and on out to the internet.
0
 
LVL 31

Expert Comment

by:Gareth Gudger
ID: 10735448
Is a DNS server operating locally on the local DCs? And are the clients using the local DNS if you check their IP info?
0
 

Author Comment

by:David Goldsmith
ID: 10735559
No local DNS, only primary DNS servers at main site. Is that it? I have to have DNS services running on each remote DC?
0
Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 
LVL 31

Accepted Solution

by:
Gareth Gudger earned 500 total points
ID: 10735645
Yes if you lose DNS capabilities you wont be able to log on. Set up a secondary DNS server at each local location (just put it on with the DC) and specify the secondary DNS server as an additional DNS server in the clients IP settings.
0
 

Author Comment

by:David Goldsmith
ID: 10735656
As I'm asking that question, it's becoming obvious to me that I would definitely need DNS at the site in order to route network requests internally...either that, or implement a local hosts file on the clients for internal requests.
0
 
LVL 31

Expert Comment

by:Gareth Gudger
ID: 10735697
Depends on the number of clients you have at each location I guess. I would say if you have more than 5 to 10 use a DNS server...less headache.

Also a DNS server in each location should improve performance (as long as the local DNS server you implement is listed first in the clients IP settings with the remote second).
0
 

Author Comment

by:David Goldsmith
ID: 10735853
Thanks, that was a forehead slapper...I should have known that one...
0
 
LVL 31

Expert Comment

by:Gareth Gudger
ID: 10735943
Happens to all of us. :)
0

Featured Post

New My Cloud Pro Series - organize everything!

With space to keep virtually everything, the My Cloud Pro Series offers your team the network storage to edit, save and share production files from anywhere with an internet connection. Compatible with both Mac and PC, you're able to protect your content regardless of OS.

Join & Write a Comment

A common practice in small networks is making file sharing easy which works extremely well when intra-network security is not an issue. In essence, everyone, that is "Everyone", is given access to all of the shared files - often the entire C: drive …
The Need In an Active Directory enviroment, the PDC emulator provide time synchronization for the domain. This is important since Active Directory uses Kerberos for authentication.  By default, if the time difference between systems is off by more …
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now