strange problem

Here is a funny one.

We have a server running an app named 'DiskShare' which allows remote
Unix users to access file shares by mapping the Unix account to a
*local* account on the windows 2003 server.

we are replacing our 2003 domain controllers with 2008R2 DCs.

When the last 2003 DC is demoted, the app no longer works. It refuses
to access any other DC for (apparently) authentication.

DiskShare uses the net logon api for the *local* accounts - not sure
why access to a DC is even required.

we've
1) set up an ipsec policy to block access to the 2003 DC,
2) used a hosts files to redirect it to a 2008 DC,
3) used the LdapSrvPriority seting on the 2003 DC,
4) reset the secure channel with nltest...

the server is a domain member in the same AD site as all the DCs...

the server seems to have a particular affinity for the old domain
controller that cannot be broken.

any ideas?


HankC