Windows Forum

Ask something
Discussion Locked

NAT and changing password

0 helpful
3 replies

by jclaverie 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

We use one single domain under 10 sites.
PDC and 1 BDC on central site, 1 BDC on other sites.
Each site is connect via internet.
Part of the security is a NAT on a router.

Problem :
When a user want to change password in a site (except central site), the response is : unable to contact the PDC.
We find the origin : address translation.
But we never find a solution.
Someone know ?
Changing a password is possible without contacting directly PDC ?

3 replies

by bill_h

You have to be able to contact the PDC to make a password change. Changes are then propagated to the other domain controllers (BDCs). For further information, you may wish to view the MSDN article "Verifying Domain Netlogon Synchronization", whichmay be found at:

http://support.microsoft.com/support/kb/articles/Q149/6/64.asp

Regarding the address translation problem, you may have to contact the NAT vendor to solve the problem. For further info, see the MSDN article "Network Address Translators (NATs) Can Block Netlogon Traffic" at:

http://support.microsoft.com/support/kb/articles/Q172/2/27.ASP

BTW, if the URLs above result in "Page Not Found", the TechRepublic system may have inserted a space before the last fragment of theURL; remove the space to view the article.

Hope this helps...

This discussion is closed to new replies.