Re: Which Domain Controller is doing the authenticating?
- From: "Asher_N" <compguy666@xxxxxxxxxxx>
- Date: Tue, 10 Jan 2006 10:22:14 -0800
I'd say it's high time to get out of Dodge. You are in a no-win situaton.
"=?Utf-8?B?dmlkcm8=?=" <vidro@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
news:1CE2C7CE-8695-4E71-BE45-E8158869D507@xxxxxxxxxxxxx:
> The problem is beyond the scope of this thread but in a nut shell and
> this is the first time I've eluded to it this way is I'm dealing with
> a Hodge-podge of crap that started in 1994.
> Technology advanced faster than those that knew how to use it. It's
> was like sticking a sixteen yr old behind the wheel of a 1970 Mustang
> Mach Cobra Jet. Upper management thought they knew what they were
> talking about when most didn't even know how to spell it.
> I'm dealing with no support from developers who have a hippy mentality
> of give every body what they want.
> I have owner ship that has no direction. An IT manager that
> technologically sucks but Politically could run for president.
> No body wants to spend money but they all want the latest techno
> gadgets regardless if it actually is the appropriate fix for the
> problem. The real issue is "people" it's not the machines, it's not
> the technology. People don't do their jobs and everyone thinks
> technology will solve this problem.
> Dang I guess that has been building for about 15 years, sorry didn't
> mean to spoil this thread.
>
> Back to the original issue.
> I'm stuck is what it comes down to since communication around here is
> very bad, To try and orchestrate an optimized network is impossible.
> Focus changes from day to day, again no one speaks to those that have
> to implement, than implementation is hampered by the expedience
> require and dictated by managment
> I'm in mixed mode NT4/win2003. We bypassed WIN2K and were going to
> gently migrate into Win2003. 2 years ago that plan got shot down when
> somebody in owner ship wanted to run a server app that needed AD, they
> gave me 1 week to move a network of 12 remote locations, 500
> employees, and 8 servers over to Active directories. I've been living
> wit that decision ever since. I still have 1 NT4 BDC and 2 other
> servers that are running NT4. There are 15 workstations still on
> WIN98 that will not be up graded. I'm duck taping and chicken wiring
> this thing till it all falls apart and of course when it does it will
> be my fault.
>
> "Miha Pihler [MVP]" wrote:
>
>> Hi,
>>
>> As mentioned -- clients use DNS to find domain controllers. This
>> happens quite early in boot process. Once it has the list of domain
>> controllers it uses any one of them if they have equal settings in
>> DNS.
>>
>> What you can do is change DNS settings to specify that you would like
>> to use specific DC most of the time. For this to work you will have
>> to change Weight and/or Priority for DNS SRV record for specific DC.
>>
>> Still -- my question would be what is the reason that one of the DCs
>> is slower? Is it a hardware problem or is there another problem? If
>> it is not hardware -- try to figure out what could be the problem and
>> try to solve it. I would first look into Event Logs and DNS settings
>> on the servers
>>
>> Reducing the workload on the PDC emulator master
>> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library
>> /Operations/df86810b-9fc5-49b8-a704-d01c042cf460.mspx
>>
>> --
>> Mike
>> Microsoft MVP - Windows Security
>>
>> "vidro" <vidro@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> news:1DA9FD7A-5A7E-436C-AB90-6B76E8320874@xxxxxxxxxxxxxxxx
>> >
>> > Asher,
>> > these are just question that I feel could help me trouble shoot
>> > some issues
>> > that I'm dealing with.
>> > But your thinking has a 2 edge sword, if the CEO keeps being
>> > authenticated by the slower DC than there is an appearance that
>> > there is a problem and possibly so.
>> > If I can point him to the faster server till the problem with the
>> > slower DC
>> > is solved than things aren't as gloomy as you elude to.
>> >
>> > "Asher_N" wrote:
>> >
>> >> Why would you want to? Multiple DCs are fault tolerant. Do you
>> >> really want to deal wth the CEO not being able to logon because
>> >> his DC is down while everybody around is working?????
>> >>
>> >> "Miha Pihler [MVP]" <mihap-news@xxxxxxxxxxx> wrote in
>> >> news:um2Np2TFGHA.3892@xxxxxxxxxxxxxxxxxxxx:
>> >>
>> >> > You can't. Client will use DNS to locate a DCs.
>> >> >
>> >> > --
>> >> > Mike
>> >> > Microsoft MVP - Windows Security
>> >> >
>> >> > "vidro" <vidro@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> >> > news:F5465008-ECDE-4DB5-9591-F030FA35CAAE@xxxxxxxxxxxxxxxx
>> >> >> How to force to specific DC if there is no sub-nets?
>> >> >>
>> >> >> "Miha Pihler [MVP]" wrote:
>> >> >>
>> >> >>> Hi,
>> >> >>>
>> >> >>> You can run following command on your server...
>> >> >>>
>> >> >>> echo %logonserver%
>> >> >>>
>> >> >>> and it will tell you which server authenticated you.
>> >> >>>
>> >> >>> If computers are in different subnets - you could implement
>> >> >>> Sites and force
>> >> >>> clients to try and connect to nearest DC first (nearest DC
>> >> >>> would be one in
>> >> >>> same subnet (Site)).
>> >> >>>
>> >> >>> --
>> >> >>> Mike
>> >> >>> Microsoft MVP - Windows Security
>> >> >>>
>> >> >>> "vidro" <vidro@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> >> >>> news:07CF12D1-7224-4426-8B89-3FB89B81B009@xxxxxxxxxxxxxxxx
>> >> >>> > Enviroment = Windows 2003 Active Directory
>> >> >>> >
>> >> >>> > Having multiple, DC's how can I find out which DC
>> >> >>> > authenticated certain
>> >> >>> > clients?
>> >> >>> > How can I configure clients to be authenticated by specific
>> >> >>> > DC's?
>> >> >>>
>> >> >>>
>> >> >>>
>> >> >
>> >> >
>> >> >
>> >>
>> >>
>>
>>
>>
>
.
- Follow-Ups:
- References:
- Re: Which Domain Controller is doing the authenticating?
- From: Miha Pihler [MVP]
- Re: Which Domain Controller is doing the authenticating?
- From: Miha Pihler [MVP]
- Re: Which Domain Controller is doing the authenticating?
- From: Asher_N
- Re: Which Domain Controller is doing the authenticating?
- From: vidro
- Re: Which Domain Controller is doing the authenticating?
- From: Miha Pihler [MVP]
- Re: Which Domain Controller is doing the authenticating?
- From: vidro
- Re: Which Domain Controller is doing the authenticating?
- Prev by Date: Re: Confused about DNS on Windows SBS 2003
- Next by Date: Re: Too many Master browsers?
- Previous by thread: Re: Which Domain Controller is doing the authenticating?
- Next by thread: Re: Which Domain Controller is doing the authenticating?
- Index(es):
Relevant Pages
|
