No, although it is recommended to have at least one GC for each AD Site. A GC is contacted during logon by the authenticating DC to enumerate Universal Group membership. If the DC fails to contact a GC (because of DNS problems, for example), then unless the user has locally cached credentials or is an Administrator then the logon will be denied.
On which of your DCs do you have GCs configured at present? Bear in mind that the DC holding the Infrastructure Master FSMO role must not be configured as a GC (in a multi domain environment). Tony -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Marvin Cummings Sent: Sunday, May 19, 2002 3:53 AM To: NT 2000 Discussions; ActiveDir Subject: [ActiveDir] Global Catalog question. Question Is it necessary to have a Global Catalog on each child domain? I have a test lab with 2 child domains that I'm having trouble logging in to and I'm trying to eliminate the GC as the potential cause. Any feedback is appreciated. List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
