DC logon failure from separate subnet

[manuchau]

I have two subnets. Each subnet has two different domain controllers on two different domains. My problem is that when I created a third DC on subnet A and moved it to subnet B I cannot logon. The firewall between both subnets is wide open, per the firewall admin. DNS reverse lookup zones are configured on both DNS servers in subnet A & B. I can terminal on to the third DC, which was moved to subnet B, I just cannot logon.

Any suggestions? All help is appreciated...

 

[kmkeshav]

Moving a Domain Controller to a different subnet would have definitely required a change in IP address. The story does not end there. Please refer to the following URL for what you have to do if you have/want to change the IP address of a Domain Controller:

http://searchwinit.techtarget.com/tip/0,289483,sid1_gci924473,00.html

Hope this will be useful.

-Keshav

 

[manuchau]

Keshav,

The server is set to DHCP. I can TS into the server from subnet A.

Subnet A: One domain controller. Domain is abc.com

Subnet B: One domain controller. Domain is xyz.com

The third domain controller was created in subnet A. Joined to domain abc.com. When this third dc is moved to subnet B, I cannot authenticate on that server. I can ping, terminal in, just can log in.

 

[WhoKilledKenny]

Couple of things...
DHCP, I hope you are using reservations for your DCs. Otherwise I would not use DHCP to assign IP to your DCs.

Since you adding a Second DC for abc.com, in the other subnet, I would suspect that you need to add the subnet in Active Directory Sites and Services in abc.com.

Hope that's your answer...

 

[manuchau]

I can confirm that the subnet is in Sites and Services.

Error message is:

Logon Message

The system could not log you on. Make sure your User name and domain are correct, then type your password again. Letters in passwords must be typed using the correct case.

The local tech support consultant was able to logon once, locally. He'll be in the office on Monday and we'll see if he can authenticate again.

Also, I thought of joining a pc to the domain in Subnet A, where the third dc came from, over the wan link. If the firewall is open as the engineer says it is then the pc should have no problems finding the domain in subnet A and joining it over the link.

 

[WhoKilledKenny]

True as long as the firewall is open and the PCs DNS settings are pointing to the DNS that contains the service records for abc.com.