Re: Remote site loses access to member server when WAN goes down

From: Frank McCallister (anonymous)
Date: 08/13/04


Date: Fri, 13 Aug 2004 08:38:06 -0500

Hi David

"I can't make the remote member server a backup domain controller in an SBS
environment, right?" Wrong you can have a BDC in a SBS network.

Frank McCallister
COMPUMAC
"David Schrag" <david-no-spam@schrag.net> wrote in message
news:e4OJVZTgEHA.1048@tk2msftngp13.phx.gbl...
>I have a main office running SBS03 and a remote office with a Windows 2003
> member server. They are connected with a VPN between two hardware
> firewalls.
> Yesterday the VPN went down because of a phone line failure and everyone
> in
> the remote office lost access to the local member server. When they tried
> to
> access a share on the server, there was a long delay followed by a
> password
> prompt. If they put in their own password, they got a message to the
> effect
> of "I tried that one already and there's no domain controller to validate
> your password; try again." It also failed if they tried to put in a
> different user's password. As soon as the VPN was restored, everything
> started working fine again.
>
> Fortunately this is the first time the VPN has failed in the few months
> since this whole thing was set up, but surely it will happen again
> someday.
> I did not realize that cutting off access to the domain controller would
> mess up access to the member server like this. I guess I just assumed that
> since users could still log into their computers using cached credentials
> when connection to the domain controller was lost, that they'd still have
> access to the member server as well.
>
> So what do I do to prepare for the next VPN outage? I can't make the
> remote
> member server a backup domain controller in an SBS environment, right? Is
> there anything else I can do to make that server grant access to the
> remote
> office's users?
>
> Here's something I tried. If I logged into a remote office computer as the
> local administrator, I was able to gain access to the member server's
> shares
> by drilling through My Network Places, Entire Network, etc. -- but only if
> I
> supplied the domain administrator's user name and password when prompted.
> Regular users were denied access. I was thinking that I could create a
> local
> user account on each PC and tell them to log in locally if the VPN failed.
> But obviously I don't want them all logging in as the domain admin when
> they
> want access to their files.
>
> Any thoughts? I'd hate to go back to the client and say "guess what ...
> looks like SBS was the wrong product for you!"
>
>



Relevant Pages

  • Re: Recommended Setup
    ... yes the second server at the remote site as a Domain Controller for faster logons with a site to site VPN connection to the main office. ... Small Business Server Specialist ... SBS 2000 - microsoft.public.backoffice.smallbiz2000 ...
    (microsoft.public.windows.server.sbs)
  • Re: Domain name
    ... > Dcpromo is the utility that you use to promote a plain member server ... > to a Domain Controller (or demote a Domain Controller down to a plain ... Dcpromo is something that we don't normally ... > encounter with SBS since the integrated SBS install does this for us. ...
    (microsoft.public.windows.server.sbs)
  • Re: Remote site loses access to member server when WAN goes down
    ... They are connected with a VPN between two hardware ... >> the remote office lost access to the local member server. ... >> I did not realize that cutting off access to the domain controller would ...
    (microsoft.public.windows.server.sbs)
  • Re: Remote site loses access to member server when WAN goes down
    ... >> member server. ... They are connected with a VPN between two hardware ... >> the remote office lost access to the local member server. ... >> I did not realize that cutting off access to the domain controller would ...
    (microsoft.public.windows.server.sbs)
  • Re: Is it possible to run a domain controller on a 32-bit o/s and an Exchange server on a 64-
    ... You can not confiugre SBS as a member server, it MUST be Domain controller in the domain holding all FSMO roles, thats by design in SBS OS version. ... My next issue is how to get Exchange 2007 configured on the member ...
    (microsoft.public.windows.server.general)