Move DC to new computer but behavior did not change

Due to a stabilty problem I move my master dc to a new computer, however, the behavior has not change.  When the old master dc crashes no user can login into the network.  Any ideas?

I have three Windows 2000 Server DC's in my network.  All three have DC's AD intergrated DNS configured. If I add a user to one DC's AD catalog the other DC's picks it up just fine.  However, if the old master crashes there is no redundancy with the other two DC's.  Even after, I move preforming a FSMO move per Windows docs.  What am I missing?
rileyadmAsked:
Who is Participating?
 
Carlo-GiulianiCommented:
If you have no subnets, then you have only one site....presumably the default first site.  AD does not know that your have two sites, and so the PCs in one site may be using the DCs in another site.    If you have a fast connection between the two sites, it won't matter very much, but you really should define the subnets for each location, define two different sites, and move the DCs to the appropriate sites.

But that is really a whole seperate subject.  

Now that you have more than one GC, if the first GC crashes you should still be able to logon.
0
 
Carlo-GiulianiCommented:
What do you mean by "master DC".   Do you mean the PDC role?

I suspect your problem is the Global Catalog.  When running AD in native mode, you must have access to a Global Catalog server to be able to login.  If you have only one, then you are vulnerable to a server crash.   For a single-site, single-domain environment, configure *all* your domain controllers to be global catalogs.  
0
 
rileyadmAuthor Commented:
Yes, I do mean PDC role.  

1.) How can I check if I have access to the Global Catalog server?  Do I need to login using a domain administrator account?

2.) I do have multiple sites, 2 DC's at one site, 1 DC at a second site.  Neither scenario is working.

3.) How do I configure *all* of our DC's replicate the global catalog as you mentioned.

Thanks!
0
How do you know if your security is working?

Protecting your business doesn’t have to mean sifting through endless alerts and notifications. With WatchGuard Total Security Suite, you can feel confident that your business is secure, meaning you can get back to the things that have been sitting on your to-do list.

 
Carlo-GiulianiCommented:
Are these sites configured as different sites in Active Directory?  AD can't tell that DCs are at different sites by itself...you have to tell it what subnets correspond to each site.  I think that, when you install a new DC in a new site, it will be a GC by default.  But if you don't tell AD that this is a different site, a new DC will not be a GC by default.

To make a DC a GC:
Open to Administrative Tools>Active Directory Sites and Services>Sites, and then double-click the domain controller you want to work with in the Server folder for your desired site: Right-click NTDS Settings>Properties.   You should be able to
0
 
rileyadmAuthor Commented:
Carlo,

Even though your response was cut off; I believe I got most of it.  I did enable the GC option on 2 of my DC's.  One DC in my N. Carolina site and the secondary DC in my Georiga site.  Of course, the primary DC (PDC role) in my Georgia site was already enabled.

What do you mean when you stated that " Are these sites configured as different sites in Active Directory?".  When I Open to Administrative Tools>Active Directory Sites and Services>Sites, and then double-click the domain controller, I do see the other DC servers.  Should I be looking for something else?

However, I do not see any entries under Inter-Site Transports or Subnets.  Is that correct?
0
 
rileyadmAuthor Commented:
OK! After configuring all my DC's in one site to be  Global Catalog server faillover still did work.  This weekend my (master) DC crashed and no users were able to log into the network.

I am missing something?
0
 
Carlo-GiulianiCommented:
There are a number of other scenarios in which logins depend on just one server...I don't know enough about your configuration to know which ones might apply.  Have a look at
http://support.microsoft.com/default.aspx?scid=kb;en-us;305027

0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.