Solved

Cross-Site Active Directory Login

Posted on 2011-03-16
5
409 Views
Last Modified: 2012-05-11
We run a windows 2003 server domain.

We have two sites, site A and site B. They proper routes are setup between them.
Each site has 1 domain controller.

If the domain controller in site A goes offline, users are unable to login.

I would like to change it so that if the domain controller in site A goes offline, users are still able to login using the domain controller over at SITE B.

How do i make this change?
0
Comment
Question by:HADDADD3
  • 2
  • 2
5 Comments
 
LVL 57

Expert Comment

by:Mike Kline
ID: 35150813
That should happen by default, are both DCs global catalog servers?  Are you running DNS on both servers and are clients using both IPs in their DNS configuration.

You say the route is setup so I'm assuming no firewall/port issues.

Thanks

Mike
0
 

Author Comment

by:HADDADD3
ID: 35150828
- No firewall / route issues
-Both run a DS server

-Clients @ site A only have site A DNS server, not SITE b DNS server as well.

Could that be problem?
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 35150847
Yes, add the site B DNS server to site A's clients (add it as secondary).   Do the reverse for site A.

Thanks

Mike
0
 

Author Comment

by:HADDADD3
ID: 35150861
Any way to test without having to take site A DC offline?
0
 
LVL 11

Expert Comment

by:RickSheikh
ID: 35151857
Not sure if it is. Unless you mess with the SRV records' weight. But I am sure Mike may have an alternative.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
This article outlines the process to identify and resolve account lockout in an Active Directory environment.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question