2003 Domain controller

Posted on 2005-04-13
Last Modified: 2012-05-05

I have 3 2003 domain controllers in my active directory. When I take one of them offline for maintenance (the server which was first deployed) clients cannot log on.
"System cannot log on. Access denied".

What am I missing?

Question by:jan_egil
    LVL 9

    Accepted Solution

    That server is the only one that is a Global Catalog. You have to add at least another one as Global Catalog. There is a problem though if you make the RID Master a GC then you break the functionality of the RID master. With only 3 servers you can make all GC's with no problems.

    Author Comment

    Aha, Okay. I probably have some extra reading to do :)
    What tool on 2003 server is used to change roles of this kind?


    LVL 9

    Expert Comment

    You should follwo these steps:
    The first step in the process is to configure a Windows 2000 Server to act as a global catalog server. To do so, open the Active Directory Sites and Services console, found on the Administrative Tools menu. When the console opens, navigate through the console tree to Active Directory Sites and Servers | site name | Servers | server names. Now expand the entry for the server that you want to designate as a global catalog server. Right click on the server’s NTDS Settings entry and select the Properties command from the resulting context menu. When you do, you’ll see the NTDS Settings Properties sheet. On the General tab is a Global Catalog check box. If the box is selected, then the server has been designated to serve as a global catalog server.

    A note about my answer it is not a problem with the RID master but with the infrastructure master. Anyway it is no problem in a domain where every server is a GC, and in your case it is preferable

    Featured Post

    Do You Know the 4 Main Threat Actor Types?

    Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

    Join & Write a Comment

    Scenerio: You have a server running Server 2003 and have applied a retail pack of Terminal Server Licenses.  You want to change servers or your server has crashed and you need to reapply the Terminal Server Licenses. When you enter the 16-digit lic…
    Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
    Hi everyone! This is Experts Exchange customer support.  This quick video will show you how to change your primary email address.  If you have any questions, then please Write a Comment below!
    Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    23 Experts available now in Live!

    Get 1:1 Help Now