Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Clients won't login to local domain controller when WAN link is down

Posted on 2004-04-01
9
Medium Priority
?
385 Views
Last Modified: 2006-11-17
I have a Win2K AD domain in a school district, and have multiple sites configured in AD, each with their own domain controller. These sites are connected physically by T1. When the T1 is up and operational, the clients login just fine, and by running a script, I can tell that they are authenticated by the local on-site domain controller. But when the WAN is down, they can't log in at all. The local DC's are configured as GC controllers, and each site has all their resources local. I designed it this way so they would be able to continue to work when the WAN link was unavailable. But it's not working. Something is still tying them to the main site, where the PDC emulator resides. Shouldn't I be able to log these clients in with local resources when the WAN is down?
0
Comment
Question by:David Goldsmith
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
9 Comments
 
LVL 31

Expert Comment

by:Gareth Gudger
ID: 10734881
Yes you should.

Are these all separate domains? Or is it the same domain but with a DC in each location?

Also, how are you binding the NICs in the DCs? I assume these are multihomed to allowed internet access or do they have a different gateway for that purpose?
0
 

Author Comment

by:David Goldsmith
ID: 10735357
Single domain, separate DC in each location. Servers not multi-homed, they have a gateway to get back to the District Office and on out to the internet.
0
 
LVL 31

Expert Comment

by:Gareth Gudger
ID: 10735448
Is a DNS server operating locally on the local DCs? And are the clients using the local DNS if you check their IP info?
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:David Goldsmith
ID: 10735559
No local DNS, only primary DNS servers at main site. Is that it? I have to have DNS services running on each remote DC?
0
 
LVL 31

Accepted Solution

by:
Gareth Gudger earned 2000 total points
ID: 10735645
Yes if you lose DNS capabilities you wont be able to log on. Set up a secondary DNS server at each local location (just put it on with the DC) and specify the secondary DNS server as an additional DNS server in the clients IP settings.
0
 

Author Comment

by:David Goldsmith
ID: 10735656
As I'm asking that question, it's becoming obvious to me that I would definitely need DNS at the site in order to route network requests internally...either that, or implement a local hosts file on the clients for internal requests.
0
 
LVL 31

Expert Comment

by:Gareth Gudger
ID: 10735697
Depends on the number of clients you have at each location I guess. I would say if you have more than 5 to 10 use a DNS server...less headache.

Also a DNS server in each location should improve performance (as long as the local DNS server you implement is listed first in the clients IP settings with the remote second).
0
 

Author Comment

by:David Goldsmith
ID: 10735853
Thanks, that was a forehead slapper...I should have known that one...
0
 
LVL 31

Expert Comment

by:Gareth Gudger
ID: 10735943
Happens to all of us. :)
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The Need In an Active Directory enviroment, the PDC emulator provide time synchronization for the domain. This is important since Active Directory uses Kerberos for authentication.  By default, if the time difference between systems is off by more …
Are you one of those front-line IT Service Desk staff fielding calls, replying to emails, all-the-while working to resolve end-user technological nightmares? I am! That's why I have put together this brief overview of tools and techniques I use in o…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
In this video, Percona Director of Solution Engineering Jon Tobin discusses the function and features of Percona Server for MongoDB. How Percona can help Percona can help you determine if Percona Server for MongoDB is the right solution for …

636 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question