Solved

Windows Domain AD problems

Posted on 2007-04-04
3
218 Views
Last Modified: 2010-04-18
I have a domain with only 1 site and two subnets. One subnet is for an office in the USA and the other subnet is for an office in the UK. Both Domain controllers are located in the US office. The two offices are connected by a PPTP VPN with a netscreen frewall at each end, the tunnels allow "any" service in both directions. You can ping all computers in either network from both locations and name resolution (DNS) is working at both locations as well. The problem is that I can not add a computer to our domain from the UK office, I get unable to find a domain controller or if I remove a computer from the domain in the UK office and then try to add it back in, I get "The trust relationship between this workstation and the primary domain failed", so basically the machines over in the UK seem to be unable to communicate with the domain controller in this regard. However the other machines that are already part of the domain are still authenticating every morning when clients login for the day...

Additionally the UK office only has 5 computers total and they won't allow me to put a domain controller over there. The domaiin itself is in 2000 mixed mode and, all workstations are XP, I checked under "AD sites and services" and as I stated at the beginning we have one site (default-site) and both subnets are listed under the subnet folder. I've run DCDiag on our domain controllers and and everything checks out good...

Any thoughts on how I can get the ability to add machines in the UK office to the domain or even some diagnotstic tools I can use the isolate the problem further?

0
Comment
Question by:dsc18
3 Comments
 
LVL 1

Accepted Solution

by:
cdnq8 earned 250 total points
ID: 18850415
Hi,
In your tcp ip settings put the Primary dns server address of your Domain, and than try hope fully it will authenticate with it, it seems to be a DNS ip address problem.

Taher
0
 
LVL 51

Assisted Solution

by:Netman66
Netman66 earned 250 total points
ID: 18850722
It's definitely DNS.

Make sure you are handing out the DNS address of your own server - not the Netscreen.
0
 
LVL 1

Author Comment

by:dsc18
ID: 18851738
That was the first thing I checked and yes all UK machines have the right primary and secondary DNS server listed when you do a ipconfig /all. However manually entering the DNS servers in the properties of TCP\IP seemd to do the trick for the workstation I was troubleshooting in the UK.

Additionally after manually entering the DNS entries I needed to delete the workstation computer account from the DC, then moved the workstation to a workgroup and rebooted, then reanmed it and rebooted again. When it came backup I was able to add the workstation from the UK office to our domain here in the US. So maybe there was a problem with the sid too. Thanks for the help!
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
This article runs through the process of deploying a single EXE application selectively to a group of user.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question