Domain Admin can access NETLOGON share from one site but not another

-

i have multiple domains , sites in environment.  the "domain admins" group of domain1 added "administrators" group of domain2.  if have domain admin (da) of domain1 login workstation @ site1, da able access netlogon folder(s) on dcs @ site1 , site2 domain1 , domain2.  if have same da login workstation @ site2, da able access netlogon folder(s) dcs @ site1 , site2 domain1 when da attempts access netlogon folders domain2 dc @ either site1 or site2, access denied , prompted credentials.  the da able access hidden administrative share system drive , navigate netlogon folders on dcs of both domains @ both sites, , da has read/write access folder via path.

why can't da access netlogon share of dcs 2 domains @ either site?

i'm not sure try next or google research further.  

any ideas?



hi,

thanks post.

i think try use dcdiag and repadmin commands check dcs health status , ad replication status. also, need make sure dcs have having netlogon share , not experiencing replication issues.

here article below may helpful troubleshoot problem.

active directory replication issues – basic troubleshooting steps (single ad domain in single ad forest)

http://social.technet.microsoft.com/wiki/contents/articles/18513.active-directory-replication-issues-basic-troubleshooting-steps-single-ad-domain-in-a-single-ad-forest.aspx

best regards,

jay

please remember mark replies answers if , un-mark them if provide no help. if have feedback technet subscriber support, contact tnmff@microsoft.com.



Windows Server  >  Directory Services



Comments

Post a Comment

Popular posts from this blog

Generating Event ID 91, 44 with CA (In Event Viewer with source as Certsvc)

-
hi we in process of migrating win 2003 ad win2008 r2. when noticed logs found many errors , warning alerts ca below --could not connect active directory. certificate services retry when processing requires active directory access. (event id 91)----certificate services sagia ca can not open certificate store @ cn=ntauthcertificates,cn=public key services,cn=services in active directory's configuration container. (event id 94, warning)--                                                                                            ...
Read more

Group policy default policy cannot be edited because network name not found

-
hey everyone, i have been having issues on , off domain. pdc crashed (the domain controller). started old server , made domain controller , forced roles over. repaired pdc , elevated back. although appeared work found cannot rid of other dc because pdc can no longer contact domain things group policy or else. start secondary , domain magically reachable. although while secondary down can ping domain , replies ip of pdc appears pdc has no control on anything. questions following. 1. gpos created before crash no longer work. rebuilt sysvol , default problem can't edit default domain policy. don't believe having replication problems new repairing domains setting them , maintaining them of education came from.  2. if pdc gpo management console can't access gpos can secondary not have installed? 3. why domain unreachable if no dcs online when shutdown secondary. thanks in advance , try edit dc diag log right there on fails want narrow of out guys concentrate on...
Read more

Windows server 2012 r2 inplace upgrade failed

-
trying upgrade windows server 2012 2012r2 on physical box/nas (hosting vm's). this failed due "unknown error"? there several error logs, first few lines of 1 attached: setuperr.og (from c:\$windows.~bt\windows) 2013-10-06 14:22:55, error      [0x0803b6] mig    can't retrieve group information user nt service\mssql$microsoft##wid. netusergetlocalgroups failed 0x000008ad 2013-10-06 14:22:55, error      [0x0803b6] mig    can't retrieve group information user iis apppool\classic .net apppool. netusergetlocalgroups failed 0x000008ad 2013-10-06 14:26:23, error      [0x0808fe] mig    plugin {0b23c863-4410-4153-8733-a60c9b1990fb}: loadlibraryex error (c:\$windows.~bt\sources\replacementmanifests\microsoft-windows-textservicesframework-migration\imjpmig.dll) gle=126 2013-10-06 14:26:23, error      [0x0808fe] mig  ...
Read more