Re: Question - Can I force a machine to use a specific DC for Authentication

We have a central site with 2 DC's and six regional sites all with a DC.
HODC1 is Schema owner, Domain role owner, PDC role ,RID pool manager and GC
server
HODC2 is Infrastructure owner

I've checked the replication and all is OK

AD sites and services setup is fine and all replication is working (our AD
site is about 7 years old)

Links for regional sites are between 20Mb and 2Mb per site.

The problem will generally effect users after they change their passwords
but will sometimes just appear out of the blue.

Clearswift verdor and local office have said it's a problem when the
authentication of the user and the proxy server happens at different boxes,
hence I want to force the proxy to authenticate to HODC1.

Thanks
Mark



"Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb6692f48caf735b63c89e3@xxxxxxxxxxxxxxxxxxxxxxx
Hello Clubsprint,

Normally it doesn't matter which DC's is used, when your replication
between the DC's is running correctly. Please describe your network setup,
how many sites, how are they connected, how many DC per site and how you
setup your DNS.

Did you check replication between the DC's with replmon GUI or repadmin
/showrepl from command line?

Did you configure AD sites and services with the subnets and move the DC
to the belonging sites?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

G'day all
my proxy/internet server (2003 service pack 2) runs a product called
Clearswift Mimesweeper that uses NT authentication to validate user
data for
instigation of rulesets and reporting. We seemm to have a problem with
some
users the proxy server is using a different DC to the users PC to
authenticate and this is then stopping the users from surfing the web
when
authentication fails. The prtoblem appears to be that the proxy server
is
using a remote (WAN) DC to Authenticate.
Does anyone know how I can force the proxy to authenticate to a
particular
or is there some software that will work?
Thanks




.

Relevant Pages

  • Re: Question - Can I force a machine to use a specific DC for Authentication
    ... Normally it doesn't matter which DC's is used, when your replication between the DC's is running correctly. ... Please describe your network setup, how many sites, how are they connected, how many DC per site and how you setup your DNS. ... The prtoblem appears to be that the proxy server ... using a remote DC to Authenticate. ...
    (microsoft.public.windows.server.general)
  • Re: Group policy and File Replication Service
    ... How does the client authenticate to a dc that isn't on the network? ... > problems if SYSVOL is missing or out of date--so in addition to removing it ... > from FRS replication, you need to stop and disable the Netlogon service on ... the Windows Group Policy Guide is out from Microsoft Press!!! ...
    (microsoft.public.windows.group_policy)
  • Re: AD site design - Finalized
    ... Your thought process of authenticating across the WAN is ... >When you have more than one site the replication between ... >> into sites...then each user would authenticate to the ... >> domain controller in his site This as I ...
    (microsoft.public.windows.server.active_directory)
  • RE: New Site Creation...
    ... "Ken Gardner" wrote: ... > a new subnet with that site. ... > trying to authenticate over th WAN back to us. ... > Third I dcpromo'd it and its now in the replication loop, ...
    (microsoft.public.windows.server.active_directory)
  • Re: User authenication from remote site ?
    ... There is a domain controller at the Head Quarter ... Users at remote site finds that the response time for accessing data ... Replication of data of AD between HQ and RS ... Users at RS has to authenticate via HQ ...
    (microsoft.public.windows.server.active_directory)