Users only authenticating to one DC and not other.

Discussion in 'Active Directory' started by Danny Chieng, Sep 6, 2006.

  1. Danny Chieng

    Danny Chieng Guest

    Dear All,

    We have implemented two Domain Controllers AD1 & AD2 in new domain. The
    users login are with login scripts to map network drives.
    The normal user login and drive mappings works perfectly fine with the two
    AD running. The issue is that users are authenticating to AD2 most of the
    time and it seems that AD1 is not operational at all. We tested shutting down
    AD2, and users will fail to logon to domain, and exchange will not work until
    we on the AD2.
    Both AD's are GC.

    Please help, as the purpose for two AD is redundancy and it seems not
    working that way.
    Danny Chieng, Sep 6, 2006
    1. Advertisements

  2. Where are the clients and servers pointing for DNS? If you are using
    AD-Integrated DNS, you should point all member servers and clients at both
    DCs for DNS. There's some choice as to how you configure the DCs for DNS -
    best bet is to point at self, or if a small(er) environment each other and
    then self.

    You also need to ensure that both DCs are GCs:
    Paul Williams [MVP], Sep 6, 2006
    1. Advertisements

  3. Danny Chieng

    Danny Chieng Guest

    Hi Paul,

    Below are the configurations as well from your questions:
    1. All clients & member servers DNS are pointing to the AD-integrated-DNS.
    2. Both AD's DNS are pointing to itself first and then each other.
    3. Both AD's are GC.

    Thanks. Any other pointers?
    Danny Chieng, Sep 7, 2006
  4. You'll have to start at the beginning. Run DCDIAG /V /C /E and look for
    errors or warnings and Google them and post them here.

    Also, look at the event logs on both DCs if you haven't already.
    Paul Williams [MVP], Sep 7, 2006
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.