Microsoft, Active Directory Login issue.

Posted on 2008-02-01
Medium Priority
Last Modified: 2010-03-17
We have 2 AD servers, One in Main Office *(  the other on a 3mb line in a Branch Office ( .   We have replaced the Main Office AD server with a new Server.
All the roles was moved before the old server was demoted. The Main Office server has the Global Catalog.    All of the other servers has and for DNS/WINS in that order.

My issue is when the Main Office AD server is rebooted. No one is able to login to the domain.  I get domain cannot be found.
Question by:edwardq
LVL 16

Accepted Solution

Matthew Millers earned 2000 total points
ID: 20796855
You can disable the requirement for a GC to be reachable, but it may be simpler to configure the remote office DC as a GC.

Enable or disable a GC:

How to disable the requirement that a global catalog server be available to validate user logons

From http://technet2.microsoft.com/windowsserver/en/library/0e4d2466-68e8-40d8-8c72-099f8bc259ff1033.mspx?mfr=true

In a single-domain forest, configure all domain controllers as global catalog servers. Because every domain controller stores the only domain directory partition in the forest, configuring each domain controller as a global catalog server does not require any additional disk space usage, CPU usage, or replication traffic. In a single-domain forest, all domain controllers act as "virtual global catalog servers" in that they can all respond to any authentication or service request. This special condition for single-domain forests is by design (authentication requests do not require contacting a global catalog server, as they do when there are multiple domains and a user can be a member of a universal group that exists in a different domain). However, only domain controllers that are designated as global catalog servers can respond to global catalog queries on the global catalog port 3268.
LVL 10

Expert Comment

ID: 20797271
Check the DNS zone on the branch office DNS server.  Is the DNS zone up to date?

or it could be a global catalog issue as mentioned above.  Check the branch office server is configured a global catalog server.

Featured Post

Free tool for managing users' photos in Office 365

Easily upload multiple users’ photos to Office 365. Manage them with an intuitive GUI and use handy built-in cropping and resizing options. Link photos with users based on Azure AD attributes. Free tool!

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Transferring FSMO roles is done when an admin wants to split roles between certain Domain Controllers or the Domain Controller holding the Roles has been forcefully demoted using dcpromo / forceremoval
One thing I've always found frustrating is no matter how many times one asks the end users to not save things on their local machines, they do it anyway.  Forget that we don't back up the desktops - only the servers.  Well, let's sneak their data on…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

619 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question