Solved

Active Directory Logon Process

Posted on 2009-04-06
7
1,153 Views
Last Modified: 2012-08-14
I have two DCs, when the main DC is offline my users are unable to login. Shouldn't the second DC be taking over the login process in the domain?
0
Comment
Question by:gueraf
  • 3
  • 3
7 Comments
 
LVL 57

Expert Comment

by:Mike Kline
ID: 24081679
Yes the second one should take over and handle authentication requests.
Is the second box a Global Catalog server
Is it running DNS?
Are clients pointing to both boxes for DNS (primary and alternate)
Thanks
Mike
0
 

Author Comment

by:gueraf
ID: 24081803
Nope the 2nd box is not a Global Catalog Server, and it is runnning DNS. Clients are pointing to both boxes for DNS. I just changed the 2nd box to Global Catalog Server. Will test and hopefully this is the fix.
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 24081847
Yeah that should do the trick, let me know how it goes.
 
Thanks
Mike
0
Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 

Author Closing Comment

by:gueraf
ID: 31567234
Thank you Mike, just got a chance to test it and it works.
0
 
LVL 1

Expert Comment

by:GFCU
ID: 25339100
So it is recommmended that both of the servers be global catalog servers?  I have the same scenario and I want to verify that both of these will work in the case of an emergency.  If both have to be a GC Server can you remind me where I can find that configuration within AD?
0
 

Author Comment

by:gueraf
ID: 25339225
AD Sites and Services, under the NTDS settings of the DC that you would like to turn into a GC.
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 25341285
@GFCU,  yes it is best to have them both as GCs...in fact always go in trying to make every DC a GC   see bullet 1 in the blog below
http://adisfun.blogspot.com/2009/04/lessons-learned-from-eric-fleischman.html
Thanks
Mike
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

820 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question