Re: NT domain and 2000 domain - strange problem.

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 06/10/04


Date: Thu, 10 Jun 2004 19:20:10 GMT

First off a computer can only be a member of one domain at a time as shown in the
computer name properties. You don't mention what kind of domain computers are in the
W2K domain - if they are W2K/XP Pro or NT/W9X. In a W2K domain, W2K/XP Pro computers
need dns [AD domain controller only]to find a domain controller in their domain while
NT/W9X computers still rely on wins to find a domain controller, so possibly the
server you are shutting down provides some networking service to computers in the W2K
domain that is disrupted when it is shut down not allowing them to authenticate to
the domain for access to network resources causing them to be prompted for
credentials to try and authenticate to the servers local user sam instead. For a W2K
domain keep in mind that the domain controllers must point only to themselves or
another AD domain controller as their preferred dns server in tcp/ip configuration
and W2K/XP Pro domain members must point only to a AD domain controller for their
domain. If wins is used, the W2K domain controllers must also be wins clients and a
wins computer must point only to itself as wins client. Also look in Event Viewer on
domain computers and domain controllers for any pertinent error messages in the W2K
domain and enable auditing of account logon events in Domain Controller Security
Policy and logon events in the Local Security Policy of servers providing shares. You
can then view the security log in Event Viewer for logon events that may be helpful
as to what is going on.-- Steve

"jkonkal" <jwkonkal@hotmail.com> wrote in message
news:d907e7f0.0406100922.2a3b3832@posting.google.com...
> Since I haven't received a reply in
> microsoft.public.win2000.active_directory newsgroup, I thought I'd
> post my problem here. Please help.
>
> jwkonkal@hotmail.com (jkonkal) wrote in message
news:<d907e7f0.0406090408.6a47912f@posting.google.com>...
> > I must further clarify the problem, the Server in Domain A that seems
> > to be causing network discontinuity, if shut down while the network is
> > in operation, things seem to work okay. If all servers are shut down
> > then restarted (i.e. power failure, and if the troublesome server is
> > not started while the rest of the network starts up, the problem
> > occurs. If the server is started, then resources are all of a sudden
> > available to Domain B. What is on this server that is causing
> > this????
> >
> >
> > jwkonkal@hotmail.com (jkonkal) wrote in message
news:<d907e7f0.0406040735.1e5916ad@posting.google.com>...
> > > I have two domains- Domain A (NT domain), and Domain B (2000 AD
> > > domain). The two domains have a trust relationship established
> > > between the two, some of the servers in Domain A are also members of
> > > the Domain B. One of the servers (not a domain controller) in Domain
> > > A (which is not a member of Domain B), if it is taken offline and the
> > > PDC of domain B is rebooted, the entire Domain B cannot access the
> > > PDC. A user name and password dialog box appears when trying to
> > > access a network shared folder. I am not sure what is happening here,
> > > but if I put the other server back on the network and reboot the
> > > Domain B PDC the network shares are accessible again. This is really
> > > weird that a server from an NT domain can interfere with network
> > > resource shares on a different domain. Any suggestions?
> > >
> > > John



Relevant Pages

  • Re: The name could not be resolved
    ... On a domain controller, ... question, and check Exchange General to see what server they're on, and you ... >> Its possible that the Global Catalog server that Outlook is hitting to ... Connect via Active Directory Users and Computers and connect ...
    (microsoft.public.exchange.admin)
  • Re: "DNS name does not exist."(error code 0x0000232B RCODE_NAME_ERROR)
    ... Here is a little of what is happening with the server. ... of my network of three computers. ... The following error occurred when DNS was queried for the service ... The DNS SRV records required to locate a domain controller for the ...
    (microsoft.public.windows.server.active_directory)
  • RE: DC Policy
    ... error 1030 on the server. ... Run the following command on one domain controller to check all the GPOs: ... Check the SMB signing settings on the client computers. ... PLEASE NOTE the newsgroup SECURE CODE and PASSWORD were ...
    (microsoft.public.windows.server.sbs)
  • Re: IS Active Directory a part of a Domain Controller or independent ?
    ... A Domain Controller ist a Server which can authorize Users an Computers ... for the managers and give the Group "Manager" fullcontrol on this Folder. ...
    (microsoft.public.windowsxp.network_web)
  • Re: demoted server Kerberos authentication?
    ... Okay the computer is definitely not a domain controller. ... relate to users logging into sql not the network. ... Can a non-DC server handle Kerberos authentication? ... "Logon events" ...
    (microsoft.public.win2000.security)