Solved

Login to secondary Domain controller if primary one goes down

Posted on 2014-09-22
9
197 Views
Last Modified: 2014-09-28
We recently build secondary Domain controller (DC2) and replication between PDC (DC1) and DC2 is working fine. We want to shutdown PDC (DC1) in order to migrate to another host. Question is will DC2 automatically take over logon services? DNS,AD roles are on DC2. They both are running on same OS (2008 R2).
0
Comment
Question by:ArcIT
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
  • 2
  • +1
9 Comments
 
LVL 58

Expert Comment

by:Cliff Galiher
ID: 40338399
If you made it a GC then it should.
0
 
LVL 25

Assisted Solution

by:Sekar Chinnakannu
Sekar Chinnakannu earned 166 total points
ID: 40338404
Yes DC2 automatically take the logon services, Users who are connected to DC1 will face the timeout issue for few mins, but after sometime they able to connect to DC2 automatically.
0
 

Author Comment

by:ArcIT
ID: 40338406
Is their anyway without rebooting to DC1, i can force my machine to logon to DC2? for testing purposes? Also netlogon and Sysvol is not appearing on DC2 as well.
0
NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

 
LVL 58

Assisted Solution

by:Cliff Galiher
Cliff Galiher earned 167 total points
ID: 40338431
active directory is multimaster, so you don't "force" anything. It just works. Timeouts only occur if something is misconfigured.

Missing sysvol is a bigger issue. That usually means that replication is broken and you need to troubleshoot the health of AD. Dcdiag is the usual tool of choice.
0
 
LVL 25

Expert Comment

by:Sekar Chinnakannu
ID: 40338459
For testing you can give a try in your lab\staging environment. You just create AD site and associate with the subnet, client can reach the dc based on their site configuration.
0
 

Author Comment

by:ArcIT
ID: 40338466
I will leave this case opens until i findout more about this sysvol and netlogon not replicating. I think that the biggest issue we need to sort out before migration.
0
 
LVL 26

Accepted Solution

by:
DrDave242 earned 167 total points
ID: 40339116
A couple of questions:

Do the SYSVOL and NETLOGON shares show up correctly on DC1?
Is SYSVOL replicated using File Replication Service (FRS) or Distributed File System Replication (DFSR) in your environment?
The first thing I'd do is check the corresponding event log (FRS or DFSR) on DC2  for errors.
0
 

Author Comment

by:ArcIT
ID: 40340619
We use DFS in our organisation but as we just created secondary DC, we thought some sort of inbuilt replication in DC would be replicating those folders to secondary.
0
 
LVL 58

Expert Comment

by:Cliff Galiher
ID: 40340623
It does, but the "inbuilt" replication is either FRS or DFS-R, depending on how old the environment is and if I.T. ever chose to upgrade from FRS at any time in the past. The added DC will simply look at the existing environment and use the replication engine already in place.
0

Featured Post

NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
This article explains the steps required to use the default Photos screensaver to display branding/corporate images
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question