Logon denied while DC is shutting down...

[sverx.tk]

Hi there,
being almost a complete newby, I'm sorry if my question will sound
stupid...
We've got a quite big LAN with 3 DCs. Sometimes it happens we have to
reboot the DCs (for instance we've had upgrade or security fix...) ...
and, of course, we do it one DC at time.
Ok, the question, finally, is: why we've got a lot of "logon denied"
errors when 1 DC is shutting down (the other being still live) ???
It seems to me something is wrong... or is it supposed to be that
way? :|
Thanks in advance

Cla "Sverx"

 

[Paul Bergson [MVP-DS]]

Two things to check for

How many GC's do you have in your environment? Is the dc that is shut down
the only one?

How about dns? Do you have more than one dns server? Do the clients point
to more than one of the dns servers? Is the only dns server the one that
you are rebooting?

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Herb Martin]

Hi there,
being almost a complete newby, I'm sorry if my question will sound
stupid...
We've got a quite big LAN with 3 DCs. Sometimes it happens we have to
reboot the DCs (for instance we've had upgrade or security fix...) ...
and, of course, we do it one DC at time.
Ok, the question, finally, is: why we've got a lot of "logon denied"
errors when 1 DC is shutting down (the other being still live) ???
It seems to me something is wrong... or is it supposed to be that
way? :|

No, it is NOT supposed to be that way.

You need all of the DCs in a single domain forest to be GCs and this
might help.

After than run "DCDiag /c" on each DC and search the output for
FAIL or WARN messages and fix these.