Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations wOOdy-Soft on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Incorrect AD site membership and logon server

Status
Not open for further replies.

MattJpopo

MIS
Jul 24, 2002
42
US
I have a problem that started after the addition of a new site in active directory. My original AD consisted of 3 sites with one DC/GC at each site. Each site has specific logon scripts associated with it. I added a fourth site, all seemed fine with the install but I noticed logon problems the next business day. When a workstation would attempt to logon it was going outside of it's original site to authenticate with the server located at the newly created site. Following are the steps I took to create the 4th site.


Ran DCPROMO on the new Windows 2000 server.
DCPROMO was completed and I was notified that my DC was added to the site1 site.
I opened the AD Sites & Services MMC and created a site4 with the appropriate subnet value.
Added the newly promoted DC to site4 and created a site link to site1 DC.
Granted the DC in site4 Licensing Server status and made it a GC.

What steps did I miss? When I run the following VBS script on a workstation from site1 it tells me it belongs to site4 and the site4 DC is it's logon server. What could be causing this problem?

------------------------------------------------------------
Option Explicit

Dim objSystemInfo
Dim objWSHShell
Dim strLogonServer

Set objWSHShell = Wscript.CreateObject("Wscript.Shell")

strLogonServer = objWSHShell.ExpandEnvironmentStrings("%LOGONSERVER%")

WScript.Echo "AD Logon Server: " & strLogonServer

Set objSystemInfo = CreateObject("ADSystemInfo")

WScript.Echo "AD Sitename: " & objSystemInfo.SiteName
------------------------------------------------------------
 
Check the nameservers list in DNS and make sure the new server is not at the top of the list.....
 

Please ignore the previous post I made a boo boo...


You can check the srv records in dns under the various sites and see which server is handling password and kerberos authentication for each site .....

[glasses]
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top