RODC looses link to main domain

-

i got strange situation. there technical info below, if needed. in order avoid myself making boring introduce problem before (in couple of words).

thus, after every reboot or shutdown of rodc system, rodc cannot authenticate user. reported "there no servers can perform authentication request available" or that. users "allowed rodc password replication group" cannot access system. local users or groups absent (rodc). how fix? switch patch-cord 1 network adapter another, wait couple of seconds, , switch cord first adapter. voila! how work? happens when adapters changed?

now, configuration parameters. have win2008 r2 domain in 1 subnet (two domain controllers).

we have several identical win2008 r2 rodc in branch offices dns server , wsus replica server installed. same domain, other subnets (one subnet 1 branch), other sites (one site 1 branch).

on every rodc have 2 network adapters, setted different subnets: 1 branch network (for work) -- adapter 1, 1 hq network (for install, set etc.) -- adapter 2. in every network connection static ip address, net mask, default gateway , dns servers setted. different: every subnet own settings. in every moment 1 adapter connected, depending on server is: in branch office (working properly) or in hq office (maintenance).

when server stands in branch subnet (and site) adapter 1 connected. after shutdown or reboot server up, responding ping, available via rdp, reported address in dns (on hq) , wsus. cannot authenticate users, neither locally, nor through rdp. accordingly, seems me, problem domain services. when switch cord branch subnet adapter hq subnet adaprer, stop working (of course!). when switch cord branch subnet adapter start working including domain authentication! same situation when server stands in hq subnet (adapter 2 connected). after every reboot or shutdown server stops authenticate users until cord switched adapter 2 1 , turned back.

i cannot understand why stops working , how fixed. got "route print" , "ipconfig -all" in moment when authentication works , when not -- parameters identical. turned windows firewall off network types -- no change. people, please, understand what's going on? got many such rodc, , after every reboot have contact admins in branch offices in order ask him switch patch-cord. insane!


i see first problem multihomed dc can culprit confusing client ip used locate dc. suggest use 1 nic instead & disable other since multihoming of dc not recommended or practice. due dual nic 2 records published dns same machine & client instead of using correct record random record picked in round robin fashion & issues starts.

as aware, rodc registers site specific records in dns & 2 records published of same dc confusing clients. can follow below article configure selected ip used register or listen.

http://technet.microsoft.com/en-us/library/cc740071%28ws.10%29.aspx

http://msmvps.com/blogs/acefekay/archive/2009/08/17/multihomed-dcs-with-dns-rras-and-or-pppoe-adapters.aspx

make sure rodc point dns preferred dns server & other local dns server alternate dns server in nic. suggest updating nic & windows 2008 r2 dc latest service pack & patches can way proceed, since windows 2008 r2 sp1 has 800 fixes.

http://social.technet.microsoft.com/forums/en-us/winserverds/thread/a1583d7f-fa59-4497-89de-666d683e53a0/

 

regards  

awinish vishwakarma

my blog:  http://awinish.wordpress.com 

this posting provided as-is no warranties/guarantees , confers no rights.



Windows Server  >  Directory Services



Comments

Post a Comment

Popular posts from this blog

2008 Windows Deployment Server Properties Error

-
currently wading through setup , configuration of wds on 2008 server. have captured xp sp2 image , purposes of testing not prestaging. pxe response settings have been set "respond (known & unknown) client computers" leaving "for unknown clients, notify administrator etc" unchecked when ok properties sheet error "server properties error" "the system cannot find file specified" when attempting use command "wdsutil /approve-autoadddevices /requestid:1" in response pending devices within gui "an error occurred while trying execute command. error code: 0x6 error description: access denied" surely if not attempting add workstations domain (no prestaging) there shouldn't problem. any appreciated  answering part of own question although if can explain reason appreciated. server properties error occurs when launching windows deployment services using start>all programs>administrative tools. if access via server manager...
Read more

Can no longer user MS Update - Files required to use Microsoft Update are no longer registered

-
hi, i'm new server 2003.  installed it.  removed enhanced ie security.  proceed download , install windows server 2003 sp1, of dot net (1.1, 2.0, 3.0, 3.5, , updates), , sp2. after downloaded , installed of above, tried windows update menu option in ie.  (ie 8 windows server 2003) , sits there "done" in lower left hand corner.  never brings in window. so try www.microsoft.com -> download , trails -> update.  received error message "files required use microsoft update no longer registered or installed on computer".  click on register or reinstall files me now.  window changes , "check latest version of windows updating software .... ".   sits there (last time sat there on hour). i went on internet , found instructions: regsvr32 wuapi.dll regsvr32 wups.dll regsvr32 wuaueng.dll regsvr32 wucltui.dll regsvr32 atl.dll regsvr32 msxml3.dll did not work either.  have other suggestions?...
Read more

How do a find data in one file, search for it in another file and if not found, write a custom message to another file

-
in file if.txt, starting on 2nd line of file, data formatted follows: ah10551,a10551,cn=a10551,a10551@qts.com ah10600,a10600,cn=a10600,a10600@qts.com ah10608,a10608,cn=a10608,a10608@qts.com in file sf.txt, data formatted follows: 2011-02-16 17:26:44 sid acme\ah10551 added sid history of qts\a10551 2011-02-16 17:26:44 sid acme\ah10244 added sid history of qts\a10244 2011-02-16 17:26:45 sid acme\ah10425 added sid history of qts\a10425 please provide suggestions on how following: 1. in if.txt file, read first field first ',' , store in variable called $if1 2. in sf.txt file, search for the value stored in $if1 , if found, ignore.  if not found, write custom message in another file such as: $if1 sidhistory not migrated. these files wont large.  im trying build 'exception file' of items in if.txt file not occurring in sf.txt file. thanks in advance ideas. mtv99 many ways that... here's one... (using example data) [array]$if1=@() gc d:\if.txt...
Read more