Re: Problem finding domain over VPN

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Chriss3 [MVP] (noSpamHere_at_chrisse.se)
Date: 08/18/04


Date: Wed, 18 Aug 2004 17:52:45 +0200

Hello Trevor,

Make sure DNS is working correct, Active Directory is depended on DNS, I
recommend to deploy at least one AD-integrated dns in each site for
redunance. Its also recommended to have one Global Catalog Server in each
site, (All DCs can perform both this roles) The Domain Controller holding
the FSMO Role Infrastructure Master in an multi domain environment can't be
assigned the Global Catalog Role.

-- 
Regards
Christoffer Andersson
Microsoft MVP - Directory Services
No email replies please - reply in the newsgroup
------------------------------------------------
http://www.chrisse.se - Active Directory Tips
"Trevor Jackson" <removethistjackson@removethisapextechnologygroup.com>
skrev i meddelandet news:864401c48535$ebd6f2b0$a401280a@phx.gbl...
> I have a Windows 2003 Active Directory domain. I have
> three locations. The Windows 2003 server is located at
> one location and the 2 remote sites log on to the Windows
> 2003 Active Directory domain over the VPN. For some
> reason certain aspects of it are not functioning
> properly. For example, at one site, I was able join the
> computers to the domain, and they were even able to log
> on, but now when they try to log on, it says that the
> domain cannot be found. Also, I have a server at another
> remote site that I was able to promote to a domain
> controller for the domain, but users cannot authenticate
> o it. If the VPN goes down, they won't authenticate to
> the local server, they will just gets messages saying
> that the domain is not available. Please advise.


Relevant Pages

  • Re: Migrating NT4 to Windows 2003
    ... Migrating from Windows NT Server 4.0 to Windows Server 2003 ... How to Upgrade from Windows NT Server 4.0 ... Best Practice Active Directory Design for Managing Windows Networks ... ensure that you have designed a DNS ...
    (microsoft.public.windows.server.active_directory)
  • Re: NT Domain to AD migration
    ... Windows 2000/XP always prefer Kerberos authentication, ... Server 2003 Active Directory service, ensure that you have designed a DNS ...
    (microsoft.public.windows.server.active_directory)
  • Re: 2003 Migration
    ... Best Practice Active Directory Design for Managing Windows Networks ... Windows Server 2003 Tools ... ensure that you have designed a DNS and Active ...
    (microsoft.public.windows.server.active_directory)
  • Re: i got 6 server in company which contains NT4 , windows 2000 , windowser 2003
    ... Best Practice Active Directory Design for Managing Windows Networks ... Windows Server 2003 Tools ... ensure that you have designed a DNS and Active ...
    (microsoft.public.windows.server.active_directory)
  • Re: Urgent Advise - [WildPacket]
    ... Best Practice Active Directory Design for Managing Windows Networks ... Windows Server 2003 Tools ... ensure that you have designed a DNS and Active ...
    (microsoft.public.windows.server.active_directory)