Domain authentication

[Jawloms]

I'm sure I remember doing this in the days of NT Server 4.0 and Windows 95, but can't remember for the life of me how........

 

Can I tell at a workstation which domain controller I am authenticated against. We have two domain controllers; one is Windows Server 2003 and the other is Windows Server 2008 running on VMWare. The virtual server has only been on a few days (the other Server 2003 domain controller still exists, it's just off while we check out the virtual one!) but this morning we had several people log in and not get any group policies applied. I'm wondering if it's the virtualised server not doing whatever it should, and of course the easiest way to find this out is to see where I'm authenticated against. When RDPing to the domain controllers, the virtual one is definitely slower than the 'real' one so all I can think is that most people are talking to the 'real' one so are getting policies, but when this one is too busy the virtual one authenticates them but doesn't dish out the policies for some reason. Or am I well off with this theory?

 

Has anyone got any thoughts please?

 

Thank you

 

Stuart

[tarquel]

As "rubbish" as it seems, when I want to find out what DC im authenticating with, I open up a cmd and use:

 

echo %LOGONSERVER%

 

 

Hope that helps.

Nath.

[srochford]

If you want to save typing then:

SET L

will also give you the logonserver name :-)

 

Incidentally, this is not necessarily the server which is authenticating you now but it is the server which processed your logon request.

[Jawloms]

As "rubbish" as it seems, when I want to find out what DC im authenticating with, I open up a cmd and use:

 

 

 

 

Hope that helps.

Nath.

 

Doh! Thank you so much for reminding me of something I should have known about completely. Amazing what lack of sleep and too much work can do isn't it?

 

Thanks Steve too

[tarquel]

hehe as i said to a member of staff today when he exclaimed how late i worked on a particular issue "thats when i do some of my best work"....

 

its a shame about the rest of the day really

 

Cheers

Nath

[Gatt]

if you want to be really fancy - take a look at a KIX script - we have one that shows:

 

Full Name

Date & Time

Workstation ID (or TS Session ID)

Logon Server

Department / Year Group (goes off AD Group Membership)

 

Also for kids we have one that alerts them if they are denied USB and/or Internet access..

[SpuffMonkey]

Won't bginfo do it for you too?

[Gatt]

It does - as well as show a host of other information:

 

IP address(es)

MACs

Hardware info, etc etc etc