General discussion

Locked

Clients can't validate to BDC????

By MCSE75 ·
I am having a bit of an issue with my BDC validating user logons.

My site configuration is as follows.

Single domain PDC and Exchange server in 1 location, BDC, SQL, IIS, NT4.0 dev and WIN2K Development servers in 2nd location connected via 1.5mbps T1 vpn.

Problem:

all clients in location 2 don't validate to local BDC, they validate to PDC across WAN link, unless netlogon service on PDC is stopped, then they will log in to BDC.

I have tried using an lmhosts file, but this does not work. BDC and member server resources are available after logon.

just a thought!!! Is there a way to disable netlogon service on PDC only for clients in location 2???

Any help will be appreciated

This conversation is currently closed to new comments.

16 total posts (Page 1 of 2)   01 | 02   Next
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Clients can't validate to BDC????

by SyscoKid In reply to Clients can't validate to ...

Did they ever log on to the BDC? One thing I seem to remember is that workstations will log into whichever domain controller that last validated them (sort of like they create a secure channel to it).

We have a PDC in New York and a BDC in Massachusetts. When I find my users consistently logging on via the PDC, restarting and trying again usually gets them the BDC.

Collapse -

Clients can't validate to BDC????

by MCSE75 In reply to Clients can't validate to ...
Collapse -

Clients can't validate to BDC????

by Viperian In reply to Clients can't validate to ...

You can stop the server service on the PDC and try to logon with a client, look if they get validated. Its also possible that the server service is not working properly on the bdc. Question: what operating system are using the clients. You can also check the event log after manualy try to sync the domain.

Good luck.

Collapse -

Clients can't validate to BDC????

by MCSE75 In reply to Clients can't validate to ...
Collapse -

Clients can't validate to BDC????

by dft3 In reply to Clients can't validate to ...

You may want to make sure that the PDC is reachable by the BDC and vice versa.

To add a BDC to a domain, the PDC has to be contactable. Therefore the first task is to check that communications are working.

If you are using TCP/IP then ensure you can PING the PDC,

ping <ip address of the PDC>

If this is OK then the problem is at the NetBIOS level. If you have WINS on the network ensure the BDC is configured to use the WINS server as when the PDC starts it will register the WINS name <domain><1Bh> which is used to identify the domain controller.

Alternatively the LMHOSTS file can be updated.

Start Notepad
Open the file <systemroot>\system32\drivers\etc\lmhosts
Add a line with the following syntax
<IP address> <machine name> #PRE #DOM:<domain name>
Save the file
To use the lmhosts file during installation you should create the file on another machine and copy it over when the BDC is being installed.

Try this and we'll take it from there. . .

Collapse -

Clients can't validate to BDC????

by MCSE75 In reply to Clients can't validate to ...
Collapse -

Clients can't validate to BDC????

by curlergirl In reply to Clients can't validate to ...

You don't say how you are doing NetBIOS name resolution. If you're using a WINS server and WINS is on the PDC only, this may be why the clients are always contacting the PDC first and logging on there. They have to get to the PDC for name resolution anyway, and then since they've already found the PDC they will use it as their logon server. One thing to try would be to set up WINS on the BDC as a replication partner with the PDC. Then, set your clients in location 2 to use the BDC as their primary WINS server instead of going to the PDC directly for name resolution. You could also solve this with an LMHOSTS file, as suggested by others, but I'm not a fan of static name resolution unless you have to. Hope this helps!

Collapse -

Clients can't validate to BDC????

by MCSE75 In reply to Clients can't validate to ...
Collapse -

Clients can't validate to BDC????

by Jacky Chin In reply to Clients can't validate to ...

Is the BDC able to synchronize with PDC via WAN ?
One thing you should check on this is the NetBIOS Scope ID on the BDC.

Let me know.

Collapse -

Clients can't validate to BDC????

by MCSE75 In reply to Clients can't validate to ...
Back to Windows Forum
16 total posts (Page 1 of 2)   01 | 02   Next

Related Discussions

Related Forums