Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We are experiencing some intermittent problems with Authentication on a Windows 2008 Standard Server. The Active Directory Store is on a separate Windows 2003 Server. Sometimes, when we try to access the server via a file Share or via an RDP Session, we will get authentication failures, but after a number of re-tries it will go through as if there never was a problem. There doesnt appear to be any activity in the Event Logs either showing errors happening at this time. Any advice on how we should go about investigating this would be helpful.

share|improve this question
    
Is there anything in the security log on the domain controller? –  mrdenny Jul 9 '10 at 23:55
    
Nothing, in fact its probably the cleanest security log I have ever seen. –  Goblyn27 Jul 11 '10 at 17:09
add comment

2 Answers

Time is in sync, right?

share|improve this answer
    
I didnt think to check, thanks. But I checked right now, and yes they are both in synch –  Goblyn27 Jul 11 '10 at 17:10
add comment

I would check event logs, especially the security logs, on both the 08 server and all DCs. You didn't specify which logs you checked.

If none of the logs still show nothing, I would also run a packet sniffer like WireShark and monitor the traffic on the 08 server. I would compare what a successful authentication looks like to an unsuccessful authentication. Maybe this will show you something not otherwise seen.

I would also check firewall logs, too.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.