No announcement yet.

accounts from different domain controllers

  • Filter
  • Time
  • Show
Clear All
new posts

  • accounts from different domain controllers

    Hi folks.

    We have a multi-site set up with member DC's in various branch locations. Those locations primarily use W2K3R2 while at the head office, we use a combination of W2k8R2 and W2k3R2.

    The issue arises when a user get him/herself locked out. On some of the servers in the branches I have noticed that I cannot unlock the account - even as the domain admin. I can unlock the account from my location on the W2K8R2 AD box.

    I don't understand why that would be. Anyone seen that before and if so, what was the cause or corrective action to take?


  • #2
    Re: accounts from different domain controllers

    What happens when you try to unlock an account and it fails? Do you get an error?

    Ensure that replication is working ok.
    Gareth Howells

    BSc (Hons), MBCS, MCP, MCDST, ICCE

    Any advice is given in good faith and without warranty.

    Please give reputation points if somebody has helped you.

    "For by now I could have stretched out my hand and struck you and your people with a plague that would have wiped you off the Earth." (Exodus 9:15) - I could kill you with my thumb.

    "Everything that lives and moves will be food for you." (Genesis 9:3) - For every animal you don't eat, I'm going to eat three.


    • #3
      Re: accounts from different domain controllers

      WHich DC holds the FSMOs?
      Tom Jones
      MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
      PhD, MSc, FIAP, MIITT
      IT Trainer / Consultant
      Ossian Ltd

      ** Remember to give credit where credit is due and leave reputation points where appropriate **