Answered by:
Serious problem with Windows Server 2008 based domain controllers in a parent and child domain environment

Question
-
Hi, i've a problem with Windows Server 2008 based domain controllers in a parent and child domain environment.
This is my situation:
SRV08SEDE is Windows Server 2008 parent DC and Global Catalog
(is owner of 5 roles) of domain PIPPO.LOCALE:
C:\>netdom query fsmo
Master schema SRV08SEDE.PIPPO.LOCALE
Master denominazione domini SRV08SEDE.PIPPO.LOCALE
PDC SRV08SEDE.PIPPO.LOCALE
Gestione pool RID SRV08SEDE.PIPPO.LOCALE
Master infrastrutture SRV08SEDE.PIPPO.LOCALE
SRV08FIL1 is Windows Server 2008 child DC of domain FIL1 and isn’t GC
C:\>netdom query fsmo
Master schema SRV08SEDE.PIPPO.LOCALE
Master denominazione domini SRV08SEDE.PIPPO.LOCALE
PDC SRV08FIL1.FIL1.PIPPO.LOCALE
Gestione pool RID SRV08FIL1.FIL1.PIPPO.LOCALE
Master infrastrutture SRV08FIL1.FIL1.PIPPO.LOCALE
SRV08FIL2 is Windows Server 2008 child DC of domain FIL2 and isn’t GC
C:\>netdom query fsmo
Master schema SRV08SEDE.PIPPO.LOCALE
Master denominazione domini SRV08SEDE.PIPPO.LOCALE
PDC SRV08FIL2.FIL2.PIPPO.LOCALE
Gestione pool RID SRV08FIL2.FIL2.PIPPO.LOCALE
Master infrastrutture SRV08FIL2.FIL2.PIPPO.LOCALE
PC1FIL1 is Windows XP prof. SP3 PC domain client of FIL1
PC1FIL2 is Windows XP prof. SP3 PC domain client of FIL2
and all is ok when the Server 2008 parent (SRV08SEDE) is up (i.e. the changes are replicate correctly from and to all Servers) but when SRV08SEDE is down, all PC domain client cannot establish a connection with your DC (SRV08FIL1 or SRV08FIL2 are up) and in event application viewer of PC Windows XP receive the id event 1053 of Userenv and in system viewer the events id 40960 and 40961 of LSASRV (and when I try to access of network shares of my DC, i receive the windows of authentication to digit my username and password).
Anyone can help me?
Thanks in advance.Thursday, April 16, 2009 10:15 AM
Answers
-
Maxim,
Any reasons why the SRV08FIL1 DC (fil1.pippo.locale) and SRV08FIL2 DC (fil2.pippo.locale) are not Global Catalogs? If the Parent Domain is down then there's no global catalogs in your forest for logon purposes.
Regards,
Mylo- Proposed as answer by GlennExpert Wednesday, November 18, 2009 1:23 PM
- Marked as answer by Brent Hu Friday, May 27, 2011 4:47 AM
Saturday, April 18, 2009 9:28 PM
All replies
-
Maxim,
Any reasons why the SRV08FIL1 DC (fil1.pippo.locale) and SRV08FIL2 DC (fil2.pippo.locale) are not Global Catalogs? If the Parent Domain is down then there's no global catalogs in your forest for logon purposes.
Regards,
Mylo- Proposed as answer by GlennExpert Wednesday, November 18, 2009 1:23 PM
- Marked as answer by Brent Hu Friday, May 27, 2011 4:47 AM
Saturday, April 18, 2009 9:28 PM -
Thanks Mylo, you have really reason!
I've raised the 2 child DC to GC and now all works correctly!
Regards, MaximTuesday, April 21, 2009 6:10 AM