Ip from one location but gets authenticated from a different location. What could the issue be. How can i solve this issue.

Posted on 2009-05-06
Last Modified: 2012-05-06

Ip from one location but gets authenticated from a different AD which is in different location. What could the issue be. How can i solve this issue.

Windows 2003 AD

Question by:bsharath
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
  • +1
LVL 11

Expert Comment

by:Abhay Pujari
ID: 24315516
Do you have a GC in your environment? Can you briefly describe your problem?
LVL 57

Accepted Solution

Mike Kline earned 200 total points
ID: 24315541
Do you have an active directory site setup for the location which is authenticating to a different domain controller?
You create a site and associate the subnets with that location to the site and have a domain controller in the site.
The clients in that site should authenticate with that DC.
LVL 70

Expert Comment

ID: 24315628
If you have miltiple sites then each site needs to have its own subnet. The subnets need to be defined in AD sites and services and the DC on each site assigned to the site. Once that is done you need to make sure that each DC at each site is also a global catalog and DNS server and that clients on each site point to their local DNS server as the preferred DNS server. Once all that is set up - then clients will automatically authenticate with the DC in their oen site in preference - but will use the other if their own DC is down.
Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

LVL 11

Author Comment

ID: 24315969
Yes i do have a GC
i have 5 locations with 2 Dc's in each location

I have been seeing just few machines of 2 locations showing the wrong Authentication server names.

yes each site has different subnets. and all was working fine before.

Say for example
I have few laptops that move between these 2 locations.
When they are in site A they show B Dc names as authentication
LVL 11

Expert Comment

by:Abhay Pujari
ID: 24316099
"I have few laptops that move between these 2 locations" --- Means they just change their terminals, right?
Also what is the primary site for these machines?
LVL 57

Expert Comment

by:Mike Kline
ID: 24316146
In site A are they getting the IP address for site A or do they still have site B addresses?
LVL 70

Assisted Solution

KCTS earned 200 total points
ID: 24316198
I would not get too hooked up about "wrong Authentication server names" any server can authenticate a client and the fact that a couple of machines are authenticated against a DC which is not in their site is not the end of the world.

I suspect the problem lies with the fact that these machines keep moving between sites and thatn the site information is being cached, when the machine moves to a different site the old cached site info is being used. Left long enough it will correct itself - presonally I would just learn to live with it - its not important.
LVL 11

Assisted Solution

by:Abhay Pujari
Abhay Pujari earned 100 total points
ID: 24316199
Also check DNS suffix changes or not when they authenticate. This could be DNS issue.
LVL 11

Author Comment

ID: 24316731
As these move from location to location the Dc's,DNS & DHCP servers  all are different

Is there any way to sort this.

i know this is not any issue that i am facing.

The only reason i want to get the right dc names from the machines is because i am using some scripts to pull this info from machines and this helps me to keep track of my asset where they are when i need to find them.

Which building they might be when i need to trace them...

Is there any way that to get it the right Authentication dc's

Any commands .....

Featured Post

On Demand Webinar - Networking for the Cloud Era

This webinar discusses:
-Common barriers companies experience when moving to the cloud
-How SD-WAN changes the way we look at networks
-Best practices customers should employ moving forward with cloud migration
-What happens behind the scenes of SteelConnect’s one-click button

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question