DC fault tolerance

FREE Tech Support
Ask your questions in
http://chicagotech.net/forum1.htm

DC Fault Tolerance

Situation: A small company has a Windows 2003 domain controller with DNS server and is planning to add another Windows 2003 server as another DC with secondary DNS for Fault Tolerance. After adding the secondary DC and stopping net logon service on the first DC for the test, some users can’t logon with “No domain available” message. Some users can logon but can’t run logon script and set command displays logonserver is the first DC (that means they are logon using credentials).

Analysis: a domain user authentication starts with access to a global catalog server. If it is successful, then GC refers the user to an active domain controller for logon. Therefore, for making the DC Fault Tolerance work, both domain controllers must be GC. We think he should also enable GC on the second DC. It works after they enable GC on the secondary DC.

Your comment