Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

User logging on against wrong DC

Posted on 2014-09-09
3
Medium Priority
?
338 Views
Last Modified: 2014-09-12
Hi all,

2003 domain running 2003/2008/2012 servers.

I have recently demoted a 2008 DC and replaced with a 2012 on a number of sites. All looks good apart from a particular user seems to authenticate against a DC on another site across the WAN and not the new local DC that is available?

This causes issues with group policy applying properly. But im not sure why the machine is doing this? has anyone seen this before?
0
Comment
Question by:Matt
3 Comments
 
LVL 29

Accepted Solution

by:
Dan McFadden earned 2000 total points
ID: 40311572
I would first run the following commands from the computer the user is working on:

1. nltest /DSGETDC:<YouDomainNameHere.Extension>

2. nslookup
2a. set type=SRV
2b. _ldap._tcp.<SiteName>._sites.dc._msdcs.<YourDomain.Ext>

#1 will tell you what DC & Site this computer/user is connecting thru.
#2 will tell you what LDAP servers are in DNS for the site

I would also verify the TCP/IP configuration on the computer. I would read thru this article and double check your Sites & Services config.

http://blogs.dirteam.com/blogs/paulbergson/archive/2010/04/19/ad-clients-not-authenticating-to-its-local-site.aspx

Dan
0
 
LVL 24

Expert Comment

by:Radhakrishnan R
ID: 40311760
Hi,

As Dan said, this type of behaviour occurs due to missing SRV records. If the restart the netlogon service on the appropriate server, the SRV records creates automatically if it is missing.
0
 
LVL 10

Expert Comment

by:Pramod Ubhe
ID: 40312392
set logonserver command will give you the name of DC that completed authentication request for that computer.
additionally check if that computer has a diff IP address which might belong to a diff. subnet. which then you can verify in AD sites and services about the DC where that subnet is mapped.
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Understanding the various editions available is vital when you decide to purchase Windows Server 2012. You need to have a basic understanding of the features and limitations in each edition in order to make a well-informed decision that best suits …
It’s time for spooky stories and consuming way too much sugar, including the many treats we’ve whipped for you in the world of tech. Check it out!
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

575 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question