I have two domain controllers (Windows 2003) in one site where most of the department I support resides. There is another building (at another site) where my department resides as well, but they have no DC.
This probably a classic question of whether to install an additional DC when a company is spread out over multiple sites.
We've been experiencing various issues like login scripts not mapping drives and users failing to login several times before being let in (even though they're typing the right password).
I'm getting different errors on the clients. Some of them are :
Netlogon, 5719, This computer was not able to set up a secure session with a domain controller in domain domain.com due to the following: There are currently no logon servers available to service the logon request. This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator.
GroupPolicy, 1055, The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following: a) Name Resolution failure on the current domain controller. b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller).
On the servers I keep getting these errors:
Netlogon, 5722, The session setup from the computer SOMEPCNAME failed to authenticate. The name(s) of the account(s) referenced in the security database is SOMEPCNAME$. The following error occurred: Access is denied.
*(this above error keeps repeating for the same computer. Probably just need to re-add this to domain. ) *
NTDS Replication, 1864, This is the replication status for the following directory partition on the local domain controller. Directory partition: CN=Schema,CN=Configuration,DC=domain,DC=com
This last one looks like it has to do with a DC that wasn't completely removed. When I ran dcdiag, it showed that we are trying to replicate with a server that doesn't exist anymore. I don't think this would cause us to have all these logon problems though.
I'm wondering if we should install another DC or try something else. Our clients run mostly windows 7, but there some XP and Vista clients as well.
The bandwidth looks to be 37.4 Mbs between PCs on the different sites (just verified with this utility iperf).
Any help is appreciated.