Client Affinity and password changes

[rav]

Hi,

My question is about client affinity and password changes.

I setup a 2003 domain with 2 sites with 2 DC's in each site. Put an
additional subnet in which my clients were on and placed the subnet in site
1 for example. So when any client logs on they validate against a DC in site
1, so all is well there. No clients are set to validate to a DC in site 2.

Now if I reset a users password on a DC in site 2 and there affinity is set
to site 1 their logon server becomes the PDC emulator (which is in site 2).
So basically the clients lose their affinity for a password change.

Whats happening? Is the DC in site 1 not recognising the password and
forwarding the request to the PDC emulator in site 2. But the problem is
that I am basically losing my client affinity.

I would have though that the PDC emulator would replicate the password back
to the DC in the proper site and the clients would retain the proper
affinity.

Any thoughts?

 

[Chriss3]

If you familiar with repadmin run it to make sure there is no replication
errors, are the clients WindowsXP or Windows2000, have them been upgraded
from WindowsNT4.0?

 

[rav]

Hi,

Thanks for the reply. The Clients are all XP.

 

[Chriss3]

And have not been upgraded or existed in a WindowsNT4.0 Domain before? Do
you running last Service Packs both at client and Domain Controllers? (Have
to ask some questions to start debugging this.)