Backup Domain Controller 1

[Excalibur1701]

We had a power outage, and our Primary Domain controller shut down. When power was restored, our PDC did not come up immediately because of a hardware issue.

Users were not able to log on our domain.

My question is this: Shouldn't the users be allowed to log on using our Backup Domain Controller? This server was up the entire time. Do you have to promote a BDC to be primary, in order to use it?

All servers are Windows Server 2003, SP1

 

[Davetoo]

Is your second DC a GC server? In Sites and Services, check to ensure both DC's are Global Catalog servers.

BTW, with 2000 and beyond, there are no more PDC's and BDC's.

I'm Certifiable, not cert-ified.
It just means my answers are from experience, not a book.
The poster formerly known as lander215

 

[Andreh]

If you first DC has been lost and users can't authenticate, then you had lost your FSMO roles. In particular the PDC Emulator role which is important to the authentication process. If I understand correctly though, this server is back up again?

In cases where you lose the first DC in a domain/forest, you will need to seize the FSMO roles related to this. It sounds pretty serious (which it is) but it is quite strait forward.

http://support.microsoft.com/kb/255504

http://www.petri.co.il/seizing_fsmo_roles.htm

A real important piece of information is that if you do seize these roles, the original server that managed these roles should probably not be recovered. It may be wise to restore it without a network cable connected and demote it via DCPromo to a member server and then connect the cable and DCPromo it to be a DC that does not hold the FSMO roles.

Good luck




"Assumption is the mother of all f#%kups!

 

[Excalibur1701]

Thanks for the suggestions.

Davetoo,

I looked at Sites and Services on our "backup" controller, and under the NTDS settings, there is not a check mark on the Global Catalog option. Do I need to click that? Our "primary" one has it checked.

 

[pagy]

Excalibur1701,
yes check the Global Catalog option for the "backup" DC. This should enable users to log in even if the server holding all FSMO roles is offline.

Check here for more info on FSMO roles

http://www.petri.co.il/understanding_fsmo_roles_in_ad.htm

All you need in this life is ignorance and confidence; then success is sure.
- Mark Twain

 

[Davetoo]

Yes, enable your second DC as a GC. This way if/when you perform routine maintenance (i.e. reboot Tuesday from Microsoft), your users can still login/out while one of the DC's is down.

I'm Certifiable, not cert-ified.
It just means my answers are from experience, not a book.
The poster formerly known as lander215