Re: Logon interactively with domain account to disconnected DC ?
- From: Tomasz Onyszko <T.Onyszko_nospam_@xxxxxx>
- Date: Wed, 03 Aug 2005 00:09:34 +0200
Joe_SMS wrote:
General question.
What instances should you be able to logon interactively to a domain controller while its network cable is unplugged using a domain account ?
The DC is one of 50 in the domain with no FSMO roles. The question has been brought up as to why you can logon to the console with a domain account but the DC is not connected to the network so it can't see any FSMO roles etc. It is a global catalog.
First of all FSMO roles holders are not used in logon process, PDC emulator can be conntacted in some cases to get new ADM files etc.
Becouse as long as it is operational DC even without contacting any other DC it can authenticate You when You are logging on to this DC locally. This is the role of the DC and DC can act for authentication process on its own.
Why should you be able to logon to a DC with a domain account while its not connected to the network ?
Why shouldn't you be able to ? Whats the criteria ?
Sorry, I'm not getting a point of this questions. If DC is working even without connecting to any other DC it can authenticate domain user. That's all.
-- Tomasz Onyszko http://www.w2k.pl .
- References:
- Prev by Date: Re: Uncheck "password never expires"
- Next by Date: Re: Service account expired
- Previous by thread: Logon interactively with domain account to disconnected DC ?
- Next by thread: Re: Logon interactively with domain account to disconnected DC ?
- Index(es):
Relevant Pages
|
