Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We are experiencing some intermittent problems with Authentication on a Windows 2008 Standard Server. The Active Directory Store is on a separate Windows 2003 Server. Sometimes, when we try to access the server via a file Share or via an RDP Session, we will get authentication failures, but after a number of re-tries it will go through as if there never was a problem. There doesnt appear to be any activity in the Event Logs either showing errors happening at this time. Any advice on how we should go about investigating this would be helpful.

share|improve this question
Is there anything in the security log on the domain controller? – mrdenny Jul 9 '10 at 23:55
Nothing, in fact its probably the cleanest security log I have ever seen. – Goblyn27 Jul 11 '10 at 17:09

I would check event logs, especially the security logs, on both the 08 server and all DCs. You didn't specify which logs you checked.

If none of the logs still show nothing, I would also run a packet sniffer like WireShark and monitor the traffic on the 08 server. I would compare what a successful authentication looks like to an unsuccessful authentication. Maybe this will show you something not otherwise seen.

I would also check firewall logs, too.

share|improve this answer

Time is in sync, right?

share|improve this answer
I didnt think to check, thanks. But I checked right now, and yes they are both in synch – Goblyn27 Jul 11 '10 at 17:10

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.