We help IT Professionals succeed at work.

Secondary Domain Controller

Last Modified: 2010-03-17

I have had some issues with three remote offices and the main DC.  Here is the previous thread number: 23581531.  Basically, there are three offices and each are connected with a point-to-point connection.  There was one DC in the main office and file servers in each remote office.  Everything works great, but the other day, the internet went down in the main office, cutting off communication from the remote offices.  The remote offices lost the ability to connect to local resources, getting lots of authentication errors.

It was suggested that I make each file server in the remote offices additional DCs and also make them Global Catalogs so that if the connection went down again, the remote offices would not lose connectivity.  Well, I made both respective file servers backup DCs and  Global Catalog servers and I still have the same exact problem.  I have DHCP giving the workstations in each remote office the local server as the DNS server.

Is there something I missed or is there another way to fix this situation?

Watch Question

tigermattSite Reliability Engineer
Most Valuable Expert 2011

So when you lose your connection to the main office, you are also losing all local connectivity? If it is less than 24 hours since you promoted the GCs, then you will need to wait for replication to occur fully, which can take at least a day in some cases depending on your replication topology.

I can understand the Internet connection going down, because you may have DNS set to forward all queries to DNS servers in the main office. Provided you are using Active Directory-integrated DNS (http://support.microsoft.com/kb/198437) and you have DNS installed on all the local servers (http://support.microsoft.com/kb/814591), forwarders should be set to forward requests to the ISP's DNS servers (at every site) (http://technet2.microsoft.com/WindowsServer/en/Library/ee992253-235e-4fd4-b4da-7e57e70ad3821033.mspx).



I had not waited 24 hours when I first tried it so I will revisit that and see if it makes a difference.  What would be the proper way to handle addressing at each office?

Site Reliability Engineer
Most Valuable Expert 2011
This one is on us!
(Get your first solution completely free - no credit card required)
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.


Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.