Logon scripts running from different DC

[mmorgensen]

We are having a problem where our logon scripts are running off a different DC than the one that did the authentication.

Eg. Client is authenticated via DC01, but the clients connects to DC02 to run the login script.

DC01.myco.local is located in the US, DC02.myco.local is located in England, so you can see the problem! Slow running of scripts.

Additionally when I ping 'myco.local' the DNS server returns with the ip address of DC02.

checked the DNS and both dc01 and dc02 are setup correctly (to my knowledge)

help!

mm

 

[BWilson77080]

do you have them split into sites? if so, ensure the server object in ad sites and services is moved to the appropriate site, and ensure that both of those DCs are global catalogs....hope this helps

-B Wilson
MCSE, MCSA, A+
MS DS Support

 

[mmorgensen]

Yep! I should have stated that.

both servers are in two different sites, each site has it's own ip addresses with no overlap. Both DC's are GC servers.

mm

 

[Seaspray0]

The scripts that are run by GPO are supposed to be replicated to all the DC's. The policy is what sets which scripts are run by memberships. You may have a policy somewhere that is causing this script to run for users on a different domain (most likely a parent domain policy affecting a sub domain).