Users only authenticating to one DC and not other.

Dear All,

We have implemented two Domain Controllers AD1 & AD2 in new domain. The
users login are with login scripts to map network drives.
The normal user login and drive mappings works perfectly fine with the two
AD running. The issue is that users are authenticating to AD2 most of the
time and it seems that AD1 is not operational at all. We tested shutting down
AD2, and users will fail to logon to domain, and exchange will not work until
we on the AD2.
Both AD's are GC.

Please help, as the purpose for two AD is redundancy and it seems not
working that way.

 

Where are the clients and servers pointing for DNS? If you are using
AD-Integrated DNS, you should point all member servers and clients at both
DCs for DNS. There's some choice as to how you configure the DCs for DNS -
best bet is to point at self, or if a small(er) environment each other and
then self.

You also need to ensure that both DCs are GCs:
-- http://www.msresource.net/content/view/25/47/

 

Hi Paul,

Below are the configurations as well from your questions:
1. All clients & member servers DNS are pointing to the AD-integrated-DNS.
2. Both AD's DNS are pointing to itself first and then each other.
3. Both AD's are GC.

Thanks. Any other pointers?

 

You'll have to start at the beginning. Run DCDIAG /V /C /E and look for
errors or warnings and Google them and post them here.

Also, look at the event logs on both DCs if you haven't already.