Avatar of atlbearcat
 asked on

Domain Controller Replication

We have several remote sites and 1 site in particular only has 1 2003 domain controller. This domain controller went down and users were not able to authenticate. In active directory sites and services this Site only has this 1 DC listed there. Replication is setup and is working as it is connected to one of our other domain controllers. My question is what is best practice to setup up redundancy for authentication. Is this failing because we only have 1 DC in this remote site listing? Is there an alternative to actually adding a second DC in this site?
Microsoft Legacy OS

Avatar of undefined
Last Comment

8/22/2022 - Mon

Best practice is to have two DCs per site to provide redundancy in the event 1 DC crashes.

All you have to do to add a 2nd DC to a site is promote a member server using DCPROMO.

How many domains do you have?  If more than one, do you have redundant Global Catalogs?

When the 2003 Domain Controller is back up, can you open a command prompt window on it and run:
dcdiag /v /c

Open in new window


If the domain is setup properly, the DCLOCATOR process should allow clients in one site to failover to using a domain controller in another site, in situations where their nearest site DC is down. But many things can hinder this process.

Which operating systems were the users using that failed to authenticate?

This thread discusses your issue, and at the bottom offers some fixes.

But as motnahp00 pointed out above, it's ALWAYS best to have two or more DC's per site.
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question

Thread helped