Authentication Problem

[Guest TagaR]

I have a remote site with Cisco router and 2 ports were configured for two

subnets. The first subnet was for DRP and the second subnet was for CLIENTS.

The DRP has W2003 SP2 DC and is configured to provide IP to the CLIENTS

subnet using the Cisco router IP Helper. This configuration works ok.

 

The problem is the clients on CLIENTS subnet are authenticated not by the

DRP DC subnet but by the MAINHO DC remotely. How is this authentication

really works? What should I do that CLIENTS subnet will authenticate on DRP

DC if the DC is available?

 

Thanks

TagaR

[Guest Ryan Hanisco]

RE: Authentication Problem

 

Hi TagaR,

 

You will need to create a subnet object in AD Sites and Services that

matches the workstation subnet that you have configured on the router. Then

you'll need to make sure that that subnet is bound to the site that the

desired DC is in. Then the workstations will use the DC in the designated

site before querying to find a DC outside of their site.

--

Ryan Hanisco

MCSE, MCTS: SQL 2005, Project+

http://www.techsterity.com

Chicago, IL

 

Remember: Marking helpful answers helps everyone find the info they need

quickly.

 

 

"TagaR" wrote:

> I have a remote site with Cisco router and 2 ports were configured for two

> subnets. The first subnet was for DRP and the second subnet was for CLIENTS.

> The DRP has W2003 SP2 DC and is configured to provide IP to the CLIENTS

> subnet using the Cisco router IP Helper. This configuration works ok.

>

> The problem is the clients on CLIENTS subnet are authenticated not by the

> DRP DC subnet but by the MAINHO DC remotely. How is this authentication

> really works? What should I do that CLIENTS subnet will authenticate on DRP

> DC if the DC is available?

>

> Thanks

> TagaR

>

>

>

[Guest TagaR]

Re: Authentication Problem

 

Hi Ryan,

 

Thanks for your reply.

 

I tried what you described below by creating a subnet for the workstations

and assign them to the site where the DC is located but I can still see that

the logon server is from the DC in the Head Office and not on the local

branch. I use the SET command from the command prompt to check the

logonserver.

 

Any other thoughts?

 

Thanks

TagaR

 

 

"Ryan Hanisco" <RyanHanisco@discussions.microsoft.com> wrote in message

news:0E793905-FF38-41DA-8ADD-786A997FBC10@microsoft.com...

> Hi TagaR,

>

> You will need to create a subnet object in AD Sites and Services that

> matches the workstation subnet that you have configured on the router.

> Then

> you'll need to make sure that that subnet is bound to the site that the

> desired DC is in. Then the workstations will use the DC in the designated

> site before querying to find a DC outside of their site.

> --

> Ryan Hanisco

> MCSE, MCTS: SQL 2005, Project+

> http://www.techsterity.com

> Chicago, IL

>

> Remember: Marking helpful answers helps everyone find the info they need

> quickly.

>

>

> "TagaR" wrote:

>

>> I have a remote site with Cisco router and 2 ports were configured for

>> two

>> subnets. The first subnet was for DRP and the second subnet was for

>> CLIENTS.

>> The DRP has W2003 SP2 DC and is configured to provide IP to the CLIENTS

>> subnet using the Cisco router IP Helper. This configuration works ok.

>>

>> The problem is the clients on CLIENTS subnet are authenticated not by the

>> DRP DC subnet but by the MAINHO DC remotely. How is this authentication

>> really works? What should I do that CLIENTS subnet will authenticate on

>> DRP

>> DC if the DC is available?

>>

>> Thanks

>> TagaR

>>

>>

>>