We are currently experiencing an issue with users querying the GAL. Throughout the day we have about 20+ users out of 400 who complain about the fact they can't view the GAL. it just errors. We find if we change their hosts file tempoarily by adding the domain IP ... 10.*.*.* domain.com we can usually fix it.
We have recently built an additional DC for a site, which in a rush, had to build up in our main site and simulate the routing, but for some reason I believe DNS and replication did not fully replicate. This server is now in the physical site and is setup within sites & services.
with correct subnet etc.
I have run dcdiag on all DCs in all sites and all looks to be healthy. But we are still having users complain about this issue. It seems to be incorrect information in ther GC on a particular DC which the clients are querying.
Could anyone point us in the right direction to diagnose this. I can't find much on the internet as to understand the exact steps the outlook client will query a DC apart from its primary DNS server, it looks at the list of DC that host a GC and I guess it queries these to confirm they are alive and round robins every hour ?!? I f can understand this better I might help me to pin point exactly when to look in DNS.
Just to also note. We are currently in transition between AD2003 and DS2008r2