Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Windows 2003 AD and NT 4 domains on same network, can't log on to NT 4 Domain

Posted on 2004-09-01
4
Medium Priority
?
167 Views
Last Modified: 2010-03-18
Until this summer we have been running an NT4 domain on our campus.  We added (did not migrate) a Win2k3 Domain this summer and are partially through moving accounts to the new domain.  We have established trusts between the two domains (for access to each side during the move) and haven't had any problems up to today.  This morning we began receiving errors that machines couldn't log on to the NT4 domain because it wasn't avaliable.  We haven't changed anything on the network or servers since yesterday.

We can log on locally to the NT4 DCs, but when we try to log on from a client it won't authenticate.  We've restarted servers, the NETLOGON service specifically, and also tried promoting one of our BDCs to see if there was an issue with our PDC.  No matter what we try we can't log in to the NT4 domain any longer.  

Anyone have any ideas to check? I've double checked WINS and the 1b and 1c entries are resolving correctly. Any other paths to troubleshoot?
0
Comment
Question by:Northwestu
4 Comments
 
LVL 6

Expert Comment

by:chumplet
ID: 11956039
Which domain is DHCP (if you're using that) coming from?  Can any of those boxes ping the PDC and BDC from the NT4 domain?  It sounds like clients are using DNS and/or DHCP from the new domain and thus aren't "aware" of the old domain controllers, but that's just a hunch.

Let me know what you find out!
0
 

Author Comment

by:Northwestu
ID: 11964819
To answer your question, yes, DNS and DHCP are being served from the new domain.  However we also have WINS setup with information for both domains being served and the WINS addresses are being handed out by the new DHCP.

We fixed the problem through a combination of steps.  First, promoted a new PDC for the NT4 side. Second, we recreated the two-way trusts between the domains. Finally, we restared DNS and WINS (which we had tried before all of this).  Don't exactly know why we had to go through this specific combination, but it cleared up our issue.
0
 

Accepted Solution

by:
modulo earned 0 total points
ID: 13181263
PAQed with points refunded (500)

modulo
Community Support Moderator
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The Need In an Active Directory enviroment, the PDC emulator provide time synchronization for the domain. This is important since Active Directory uses Kerberos for authentication.  By default, if the time difference between systems is off by more …
Measuring Server's processing rate with a simple powershell command. The differences in processing rate also was recorded in different use-cases, when a server in free and busy states.
Video by: ITPro.TV
In this episode Don builds upon the troubleshooting techniques by demonstrating how to properly monitor a vSphere deployment to detect problems before they occur. He begins the show using tools found within the vSphere suite as ends the show demonst…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…

885 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question