+ Post New Thread
Results 1 to 10 of 10
Windows Server 2008 Thread, Point clients to one server in domain for log on? in Technical; Hi All, My local authorities support team were helping us last week with a sysvol synch issue between our two ...
  1. #1
    reggiep's Avatar
    Join Date
    Apr 2008
    Location
    In the vast area of space and time
    Posts
    1,548
    Thank Post
    517
    Thanked 56 Times in 50 Posts
    Rep Power
    29

    Point clients to one server in domain for log on?

    Hi All,
    My local authorities support team were helping us last week with a sysvol synch issue between our two domain controllers.
    One of them is still not synching but they are still working on it, thanks guys.

    The problem I have however at the moment is that some clients are trying to authenticate against the broken server.

    Is there a way to make sure all clients authenticate against the working server?

    Thanks

  2. #2

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    2,698
    Thank Post
    143
    Thanked 542 Times in 486 Posts
    Rep Power
    148
    Bit drastic perhaps - could you demote the one that's causing issues, then promote it back when any other faults are found?

  3. #3
    reggiep's Avatar
    Join Date
    Apr 2008
    Location
    In the vast area of space and time
    Posts
    1,548
    Thank Post
    517
    Thanked 56 Times in 50 Posts
    Rep Power
    29
    Yep bit drastic that!

  4. #4

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    2,698
    Thank Post
    143
    Thanked 542 Times in 486 Posts
    Rep Power
    148
    What about a tweak in DNS for now, removing it from the default first name sites for the domain, so it's not seen as a DNS entry for domain.sch.uk?

  5. Thanks to 3s-gtech from:

    reggiep (28th February 2011)

  6. #5
    reggiep's Avatar
    Join Date
    Apr 2008
    Location
    In the vast area of space and time
    Posts
    1,548
    Thank Post
    517
    Thanked 56 Times in 50 Posts
    Rep Power
    29
    ooh, that sounds interesting?

  7. #6

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    2,698
    Thank Post
    143
    Thanked 542 Times in 486 Posts
    Rep Power
    148
    Yup - should work! Just fire up DNS, go to the domain site root under Forward Lookup Zones, and delete the Host (A) entry for the IP address of the server (same as parent folder). Make a note of the settings here so you can put it back manually if necessary. I've not tested this myself, but should work short term.

  8. #7
    reggiep's Avatar
    Join Date
    Apr 2008
    Location
    In the vast area of space and time
    Posts
    1,548
    Thank Post
    517
    Thanked 56 Times in 50 Posts
    Rep Power
    29
    In the end I disabled the netlogon service on the problematic server. Any machines with issues I just Took off the domain and rejoined.

  9. #8

    Join Date
    Dec 2008
    Location
    Essex
    Posts
    2,137
    Thank Post
    1
    Thanked 326 Times in 316 Posts
    Rep Power
    77
    Hi

    Make sure your domain controller does not stay off for too long as this can cause server damage to your AD.

    Check your tombstone settings.

    Regards
    Sukh

  10. #9
    michaelf's Avatar
    Join Date
    Jun 2007
    Location
    Kettering, Northants
    Posts
    81
    Thank Post
    7
    Thanked 13 Times in 10 Posts
    Rep Power
    17
    Quote Originally Posted by sukh View Post
    Hi

    Make sure your domain controller does not stay off for too long as this can cause server damage to your AD.

    Check your tombstone settings.

    Regards
    Sukh
    IIRC the default is 60 days, although I'd guess that disabling netlogon wouldn't trigger this because the server is still online just not accepting logon requests.

    However, a broken SysVol might well cause similar issues although I've never encountered this before so could be totally wrong, might be worth asking LA support though?

  11. #10

    Join Date
    Dec 2008
    Location
    Essex
    Posts
    2,137
    Thank Post
    1
    Thanked 326 Times in 316 Posts
    Rep Power
    77
    Hi

    Netlogon should not cause any issues (as long as you dont have any NT 4.0 DC), which I doubt. Was a scenario I remembered and typed first thing came to my mind.

    I'm sure the LEA won't take more than 60 days, if not, then you can change the attribute yourself. Netter off deploying SP1 than changing the setting.

    Regards
    Sukh

SHARE:
+ Post New Thread

Similar Threads

  1. Windows 7 clients on Server 2003 domain....
    By kennysarmy in forum Windows 7
    Replies: 7
    Last Post: 26th January 2011, 11:46 AM
  2. Replies: 3
    Last Post: 2nd December 2010, 07:54 AM
  3. Windows 7 clients on Server 2003 domain
    By Earthling in forum Windows 7
    Replies: 3
    Last Post: 9th September 2010, 01:00 AM
  4. Mac clients on Server 2008 R2 domain
    By TheCrust in forum Mac
    Replies: 2
    Last Post: 29th September 2009, 01:44 PM
  5. Can log on Local can't log on to domain
    By speckytecky in forum Network and Classroom Management
    Replies: 16
    Last Post: 25th April 2008, 12:05 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •