Windows 2003 native mode. One domain controller on-site, read-write, no RODCs. DNS is running on the DC onsite. Servers would be pointing to the DC for DNS and authentication.

How long would the child domain remain functional without it's ability to contact the forest level domain controllers? Could users still log in, up to several weeks after the disconnect, or would they experience Kerberos authentication issues?


Is this server a Global Catalog server? Is it the only domain controller in the child domain?

If those two are yes, it can be left like that for a while without any adverse effects. However, if it is a no to either than you could see issues really quick.

  • Yeah, the remaining DC, (there's only one) for the child domain in question, is a global catalog. What kind of issues would I see, if it weren't? – Greg Meehan Jan 10 '14 at 13:46

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.