Re: Single user with Domain Auth Issue

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Hello thanks for the reply, and yea the reason I quoted the primary and
backup terms was indeed for that reason, and I understand that the
metrics makes a difference when pertaining to logins but if the case
were that server was the closest or best path for him to use, then 9
other people would be doing the same thing and its not a one time
occurence where that could have been the issue on some certain high
load times, it is every attempted login, as far as sites and services
at this time we do not need to implement this because they are both on
the same subnet with no vlan setup between anything at all.
Again thank you for the response though, much appreciated.
Cory

Bill Frisbee wrote:
Cstorms,

Windows 2003 Domain authentication doesn't work the same way as Windows
NT did. The user can typically authenticate against the Domain Controller
that responds the fastest to his/her login requests.

Be careful using the terms Primary and Backup Domain Controllers, as no such
thing really exists in the 2003 world. All Domain Controllers are the same
(well not counting FSMO roles).

Typically it is a BAD thing to force Domain based accounts to hit only one
DC.

If the two servers are on different VLAN's/Subnets, you could use Sites &
Services to create an AD site, but be careful with this as it does tend to
complicate AD's and if you are not up to stuff with managing multiple sites
and AD you can run into issues quick.

Bill F.

"Cstorms" <corystorms@xxxxxxxxx> wrote in message
news:1163101124.837036.75260@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hello all, I am having an issue with one of my users having problems
trying to connect to the "Primary" 2003 DC, they are instead
consistantly authing to the "BDC". The background is late last week we
had our DC go down for a bit and the bdc took over just fine but now
that we have the primary back up obviously we want them authenticating
to that one. So everyone else in a 60+ user enviroment has not had
problems. So I have tried while logged on as that user on his machine,
using the ipconfig /flushdns as well as disabling the adapter and then
renabling it and the like. I would maybe guess it had something to do
with the "sites" mmc with the servers being weighted differently if
alot of users started to have this problem but as it stands he is the
only one I cant get to point to our PDC for authing.... Please shoot me
some ideas here I am at my wits end as it is affecting other issues
with performance (ie, outlook, etc...) THANKS


.

Relevant Pages

  • Re: net use and LM / NTLM
    ... Kerberos authentication is used between Windows 2000 machines in a Windows ... verify that all domain controllers for users who log on to ... controllers") MUST have been upgraded to SP4. ... with earlier servers exactly as it did with Service Pack 3. ...
    (Focus-Microsoft)
  • Re: Active directory corruption?
    ... 2003 domain controllers and 2 Win2000 domain controllers. ... The Security System detected an authentication error for the server ... Instead of the website you're using, I suggest to use OEx (Outlook Express ... This is a direct link to the Microsoft Public ...
    (microsoft.public.windows.server.active_directory)
  • Re: net use and LM / NTLM
    ... For example, two Win2k ... Windows networking authentication is used in x scenario). ... the only time domain controllers need to be configured is to ... Any machine on the network is ...
    (Focus-Microsoft)
  • Re: authentication question
    ... would have to go to each client and at a command prompt enter set l (that ... priority of 100. ... You should notice that about 50% of your authentication ... > We have two Win2003 Domain Controllers. ...
    (microsoft.public.win2000.active_directory)
  • Re: Authentication with pcAnywhere.
    ... I will try to change the reason later. ... This can be set in the Default Domain Controllers ... > to normal users? ...
    (microsoft.public.win2000.security)