Announcement

Collapse
No announcement yet.

Outlook client requires credentials, when PDC is down.

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Outlook client requires credentials, when PDC is down.

    Hi All.

    I got an environment, where the Exchange 2k3, which was running on the primary DC, (all fsmo roles) was migrated to other machine, to exchange 2k7.

    A secondary Dc was added. Now, when the primary DC is down, or being rebooted, outlook is requesting credentials, even when the secondary DC is running.

    I believe something wasn't finalized in the migration, and the new exchange is somehow still linked to the primary DC.

    I would like to remove the PDC soon, and move the roles to the secondary server, but until this is not solved, i am afraid to go ahead.

    Do you have any suggestions? What should I look for?

    Thanks,

    TaTa

  • #2
    Re: Outlook client requires credentials, when PDC is down.

    silly question, but you did enable the other server to be a global catalog didn't you?

    Are you running exchange 2007 on a domain controller? this isnt really recommended.

    Does exchange see your new domain controller in its search list?

    Comment


    • #3
      Re: Outlook client requires credentials, when PDC is down.

      Sure, both DC's are GC.

      No, now, the Exchange 2007 is running on a separate machine.

      And yes, exchange see both domain controllers.

      Old scenario was, Domain contorller with Exchange 2k3. This was migrated to the other machine, and upgraded to 2k7.

      Comment


      • #4
        Re: Outlook client requires credentials, when PDC is down.

        what is your primary dns set to on clients, is it the PDC first and then the Secondary GC?

        Sounds very odd.

        Almost as if the second DC doesnt have a copy of the Global Catalog yet?

        Comment


        • #5
          Re: Outlook client requires credentials, when PDC is down.

          Everything is in LAN, so GC was done in 5 mins or less.

          tried it with both DNS sets. Primary with PDC, secondary with second DC and vice versa, but still same.

          I am really out of any ideas.


          However, I've checked the old server, the guys told me everything was migrated.
          I found there the old exchange, there is the First Administrative Group, and inside is the old exchange server (PDC). There is a Member tag, and server is set as Master.

          But cannot see the original exchange there, which is currently the active one. I suppose it is the old database, which is inactive, but probably causing the issues?

          Thx,

          TaTa

          Comment


          • #6
            Re: Outlook client requires credentials, when PDC is down.

            Uhm,

            checking the configuration on the old server now (PDC) old 2k3 exchange.

            There are 2 Administrative Groups:

            Exchange Administrative Group, with the current server 2k7 Exchange, running on 2k8 Srv, only 1 member is there, the current Exchange.

            First Administrative Group, there is the old 2k3 exchange (PDC), running on 2k3 server, only member is the PDC, old exchange. All the exchange services are stopped there.

            Still somehow it is affecting the current configuration, and when PDC goes down, all mails need credentials, when sending/receiving.

            Comment


            • #7
              Re: Outlook client requires credentials, when PDC is down.

              You need to remove Exchange from that machine.
              When Exchange is installed on a domain controller, Exchange will only use that domain controller. That includes all other Exchange servers. Therefore to remove the dependency on that machine, you need to remove Exchange completely, using add/remove programs. Then reboot both Exchange servers.

              However, Exchange will still connect to a specific domain controller and will not use another one for at least 15 minutes (usually more like 30) when the DC it was using goes away. That behaviour cannot be changed.

              Simon.
              --
              Simon Butler
              Exchange MVP

              Blog: http://blog.sembee.co.uk/
              More Exchange Content: http://exchange.sembee.info/
              Exchange Resources List: http://exbpa.com/
              In the UK? Hire me: http://www.sembee.co.uk/

              Sembee is a registered trademark, used here with permission.

              Comment


              • #8
                Re: Outlook client requires credentials, when PDC is down.

                Hey, brilliant.

                I was sure, this will be the issue, but you know, better safe than sorry

                I will remove the exchange completely from that DC. Do you have any references from MS, or other pages, I should check?

                Thx,

                TaTa

                Comment


                • #9
                  Re: Outlook client requires credentials, when PDC is down.

                  Follow the Microsoft guide on removing the last legacy server.
                  http://technet.microsoft.com/en-us/l.../bb288905.aspx

                  Simon.
                  --
                  Simon Butler
                  Exchange MVP

                  Blog: http://blog.sembee.co.uk/
                  More Exchange Content: http://exchange.sembee.info/
                  Exchange Resources List: http://exbpa.com/
                  In the UK? Hire me: http://www.sembee.co.uk/

                  Sembee is a registered trademark, used here with permission.

                  Comment


                  • #10
                    Re: Outlook client requires credentials, when PDC is down.

                    I have the same issue as you TaTa, with the same setup

                    I do not have exchange 2k3 left on another DC though, it was uninstalled, demoted, then flattened, and rebuilt as a PDC. so for us its purely down to replication as all traces of 2k3 were deleted.

                    When our PDC is rebooted, exchange 2k7 requires credentials.
                    Our I.T. support company told me that it was dependent on replication times to the secondary DC, and our PDC was down for about 30 mins.

                    Hope that helps confirm a few things.

                    Comment


                    • #11
                      Re: Outlook client requires credentials, when PDC is down.

                      Has nothing to do with replication. That was complete hogwash.

                      It is simply down to the behaviour of Exchange. Exchange does not go looking for another domain controller for 15 minutes (according to Microsoft) 35 minutes in real life experience. Therefore if the domain controller (no such thing as a PDC in AD world) that Exchange was using was down for 30 minutes then I would expect Exchange to be dead in the water for that time.

                      Simon.
                      --
                      Simon Butler
                      Exchange MVP

                      Blog: http://blog.sembee.co.uk/
                      More Exchange Content: http://exchange.sembee.info/
                      Exchange Resources List: http://exbpa.com/
                      In the UK? Hire me: http://www.sembee.co.uk/

                      Sembee is a registered trademark, used here with permission.

                      Comment


                      • #12
                        Re: Outlook client requires credentials, when PDC is down.

                        Hmm, ok, so whats the behavior in this case.
                        Exchange tries to connect to his last domain controller. The domain controller is down. Exchange should try to connect to another domain controller.

                        This is being done after 35 minutes?

                        Are you telling, that after 35 minutes, the outlook clients will not require password authentication?

                        Sounds weird to me, I've never experienced something like that in other environments. When a DC went down, none of the user was asked to enter credentials in outlook interface.

                        Thx,

                        TaTa

                        Comment


                        • #13
                          Re: Outlook client requires credentials, when PDC is down.

                          I cannot say what is happening with other environments.
                          All I can tell you is that when the DC that Exchange is using goes down, Exchange is dead in the water for that time. Clients will not work correctly. That may well be seen by the client machines as a password prompt, with some versions of Outlook they simply go offline.

                          Simon.
                          --
                          Simon Butler
                          Exchange MVP

                          Blog: http://blog.sembee.co.uk/
                          More Exchange Content: http://exchange.sembee.info/
                          Exchange Resources List: http://exbpa.com/
                          In the UK? Hire me: http://www.sembee.co.uk/

                          Sembee is a registered trademark, used here with permission.

                          Comment


                          • #14
                            Re: Outlook client requires credentials, when PDC is down.

                            There must be some way, how to ensure that clients will not prompt password, or isnt?

                            If I am clear with this, after 35 minutes, they will not be prompted for password, but the Exchange will connect to another DC, right?

                            T.

                            Comment


                            • #15
                              Re: Outlook client requires credentials, when PDC is down.

                              It is highly unlikely that any site is going to be down for the full 35 minutes. If the domain controller fails you should know about it. If you have other domain controllers then simply restart System Attendant and Information Store services which will force Exchange to find another domain controller to use.

                              With regards to the authentication prompt, when a domain controller goes down, nothing on the client can be guaranteed. If users are getting prompts I would tell them to reboot.

                              There is no single answer to these issues, it is just something that has to be worked with, because of the nature of AD clients and how they attach themselves to a specific domain controller and what happens when it goes down.

                              Simon.
                              --
                              Simon Butler
                              Exchange MVP

                              Blog: http://blog.sembee.co.uk/
                              More Exchange Content: http://exchange.sembee.info/
                              Exchange Resources List: http://exbpa.com/
                              In the UK? Hire me: http://www.sembee.co.uk/

                              Sembee is a registered trademark, used here with permission.

                              Comment

                              Working...
                              X