Users cant login to windows...

[Guest]

I have a domain controller that I cannot log into locally or get
authenticated from a workstation. I wanted to format the machine and
reinstall windows and run dcpromo on it agian, but I cant remove it from the
domain because I cant login. I had another DC I wanted to demote so I put the
good DC and the bad DC on a switch in our lab to try and force replication of
the sam database (the bad DC was accros a WAN link). Once I put the good DC
on the switch I found out it couldn't log into the domain either. Once I
moved it back to the network it can login and authintcate users again. So now
I am thinking it is not a server problem but a Domain replication issue. Has
anyone had this problem or know an article about this? I don't see any errors
in the event logs that jump out. In the security log it doesn't even show the
bad username password entries.

 

[Tomasz Onyszko [MVP]]

I have a domain controller that I cannot log into locally or get
authenticated from a workstation. I wanted to format the machine and
reinstall windows and run dcpromo on it agian, but I cant remove it from the
domain because I cant login. I had another DC I wanted to demote so I put the
good DC and the bad DC on a switch in our lab to try and force replication of
the sam database (the bad DC was accros a WAN link). Once I put the good DC
on the switch I found out it couldn't log into the domain either. Once I
moved it back to the network it can login and authintcate users again. So now
I am thinking it is not a server problem but a Domain replication issue. Has
anyone had this problem or know an article about this? I don't see any errors
in the event logs that jump out. In the security log it doesn't even show the
bad username password entries.

I think this can be a DNS issue - are any of this DCs holding a DNS
server for a domain

 

[Guest]

I think this can be a DNS issue - are any of this DCs holding a DNS
server for a domain

The two servers in question are not running DNS. Why would it prevent me
from logging in locally? should all domain controllers run DNS? thanks

Ben

 

[Tomasz Onyszko [MVP]]

The two servers in question are not running DNS. Why would it prevent me
from logging in locally? should all domain controllers run DNS? thanks

DNS lays under whole AD infrastrucure - without DNS AD can't find any
server which are playing as LDAP , KDC, GC etc. So if any of this server
is not an DNS server, and only his two servers are on the network, even
they are DCs they can not locate domain.