Two Passwords for Admin ?

[garpal]

I know that we have some File Replication problems, but if anyone has a clue about this and/or if this would be related, I'm looking for ideas.

Our simplified setup is:
(all machines are Win2000 Server, SP3, single domain)

Location 1
Machine A1-Domain Controller
Machine B1-ISA Firewall
Machine C1-Email/Web (published thru B1)
Machine D1-Backup Server

Location 2
Machine A2-Domain Controller
Machine B2-ISA Firewall

B1 and B2 connected by VPN Tunnel, A1 and A2 are paired domain controllers behind B1-B2 Firewall tunnel. C1 is separeate box for email and web, published thru B1.

We have some known problems with Location 2 not being able to log into or map drive letters on A1 or B1 by name, but able to by IP address. Still working on that, may or may not be related.

Today we changed our administrator password. The new password works on all machines in both locations. The OLD PASSWORD STILL WORKS on both location 2 machines.

Replication had to work to pass the new password to location 2, but it didn't work to remove the old password.

Any ideas, TIA
Marv

 

[Seaspray0]

Do you have a firewall between them? You may be blocking port 389 used for LDAP (Lightweight Directory Access Protocol).

 

[garpal]

Yes, ISA Firewall running on B1 and B2, with 389 TCP open. Everything there looks normal. And the initial password change did go thru the system as expected.

 

[Seaspray0]

Check the port used for the RPC protocol. It should be open.

 

[garpal]

Seaspray0

We got the problem solved --

It turned out to be corrupted Kerberos info. Used "netdom" to reset passwords on all six servers, got past the "access denied" status and extra password access and then was able to get the replication to work. Ports in firewall were all okay.

Thanks for the input.