New Domain controler

[ComSig]

Hi

I’m installing some new servers into 2 new remote sites. The servers have active directory and contain the user’s profiles and home drives.

The problem is it’s looking like the Main Central DC is doing all the authenticating not the new servers. As a result mapping drives doesn’t work on the new servers the batch file runs but stops at each mapping and asks for a password.manualy mapping the drives brings up a user name and password authentication popup and no account will get past it......even the admin account.BUT to add to the mix normal navigating to the share works fine...... as you can probably tell im slightly confused :s

 

[58sniper]

So you added those new DCs to the main domain (that holds other domain controllers), and then promoted them?

Pat Richard
Microsoft Exchange MVP

 

[ComSig]

Added the domain controlers to the domain set up there DNS then Promoted them though dcpromo.The where put in as additional DC to current forest. Active directory comes up fine in Admin Tools and im able to change settings and reset password at will from it.

 

[ntinlin]

Have you configured the sites in AD sites and services and moved the new DC's to the relevant site?

DC selection will be pretty random if you don't do that.

Neill

 

[ntinlin]

Even with the sites configured you'll probably want to get your login script to check which site the client is in when doing its drive mappings.

i.e. If client site = x then net use f: \\dc-1\share
rather than
net use f: \\%logonserver%\share

You will sometimes get pointed to a DC that isn't in the site for no apparent reason so you need to plan for that.

Neill

 

[ComSig]

the servers have been assigned to different sites but i thought windows xp would detect the closest DC on there subnet and authenticate off that as default.......

 

[ShackDaddy]

Do the SRV records in your DNS accurately reflect the current IPs of your remote servers, and is your site layout properly reflected there too? If you did all your site setup before you deployed the servers with remote IP's, it's possible that the old local IPs (if there were any) would still be in the SRV section of your DNS...

Dave Shackelford
Shackelford Consulting