dougdog
asked on
how to find out which users are authenticated by a particular domain controller?
i am trying to remove a windows 2003 domain controller
this domain controller has been in place a long time so im not sure just how widely used it is
i have removed the global catalog server role and though that by doing this that no users would be authentictaed by it.
However when i test shuting down the server to see what impact it has some users are being prompted for a password
when i go to their machine and do a set l i see that their logon server is the server im trying to remove
how can i remove this server safely
i dont want to run dcpromo on it and remove active directory until im sure it can safely be removed
just in case some devices are still using it for dns or ldap or something
can i run some command that will show me who all has been authentictaed by this server?
this domain controller has been in place a long time so im not sure just how widely used it is
i have removed the global catalog server role and though that by doing this that no users would be authentictaed by it.
However when i test shuting down the server to see what impact it has some users are being prompted for a password
when i go to their machine and do a set l i see that their logon server is the server im trying to remove
how can i remove this server safely
i dont want to run dcpromo on it and remove active directory until im sure it can safely be removed
just in case some devices are still using it for dns or ldap or something
can i run some command that will show me who all has been authentictaed by this server?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
And you don't have to worry, users should be automatically redirected to other available Domain Controller(s).
Please ensure that you have valid DNS servers list in DHCP server/scope options (depending on your configuration)
Please check option no. 006 in DHCP management console
Krzysztof
Please ensure that you have valid DNS servers list in DHCP server/scope options (depending on your configuration)
Please check option no. 006 in DHCP management console
Krzysztof
ASKER
yes but if i switch the domain controller off during working hours it causes the password prompt
if this server is not a GC why is it authenticating users?
if this server is not a GC why is it authenticating users?
It authenticates users redirecting them to GC
If this is a problem, you can shut it down after business hours and the problem would be solved. Next day, they would be authenticated by the only existing DCs.
Krzysztof
If this is a problem, you can shut it down after business hours and the problem would be solved. Next day, they would be authenticated by the only existing DCs.
Krzysztof
ASKER
what exactly does the net sesion show?
ASKER
can i dcpromo when users are logged in?
will this automatically transfer them to another dc?
will this automatically transfer them to another dc?
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
net session
and review the output?
Regards,
Krzysztof