Re: Domain controllers

Hello Smokey,

If your servers are in the same site, the client just uses the first one it can reach for authentication. You can not point the client to a special dc.

Best regards

Meinolf Weber (Myweb)
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.

We just added a second dedicated domain controller to our server
mix... we had two in the past but one of them died... none of them in
the past where dedicated, but the new box is just a domain
controller... We'd like this to be the one that most of the people
hit... but even 3 weeks after putting it in, everyone seems to still
authenticated on the old DC which runs more then just DC... Is there
any way to give preference to the new dedicated DC? I can't find a
single system that is authenticated against the new DC right now...
Our new DC... call it DCNew and old call it DCOld have the following
settings in the directory...

Both DC's are in the same domain and physically on the same switch
also

DCNew - Global Catalog, Replicated from DCOld, Replicates to DCOld,
Operations master for RID, Operations Master for PDC, Operations
Master for Infrastructure

DCOld - Previous RID/PDC/Operations master... Global Catalog

any suggestions? or ideas why everyone authenticates always against
DCOld? thanks!



.

Relevant Pages

  • Re: Domain controllers
    ... the DCOld the clients still try to authenticate against it... ... If your servers are in the same site, the client just uses the first one it can reach for authentication. ... Operations master for RID, Operations Master for PDC, Operations ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain controllers
    ... the DCOld the clients still try to authenticate against it... ... If your servers are in the same site, the client just uses the first one ... Operations master for RID, Operations Master for PDC, Operations ...
    (microsoft.public.windows.server.active_directory)
  • Re: Windows Authentication, Single sign on and Active Directory
    ... service proxy client fails to connect due to authentication failure and then ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... The server is always in the domain. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: BASIC authentication Issues with IE - Part II - Solved but WHY?
    ... it does not know the difference between a request from IE or from ... some other HTTP client. ... Some other authentication schemes are more ... IIS can sometimes remember the token for a particular set of credentials so ...
    (microsoft.public.inetserver.iis.security)
  • Re: Sporadic IAS Authentication problems
    ... * Some times however, a physical reboot of the client laptop is required, ... *The remote access policy in IAS is set to grant access to the group 'Domain ... Proxy-Policy-Name = Use Windows authentication for all users ...
    (microsoft.public.internet.radius)
Loading