Matt, I agree with Freddy, the stopping of the NETLOGON service is the best bet in stopping DC authentication while maintaining the box online. That seems to be the most simple answer.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, June 02, 2005 11:14 PM To: [email protected] Subject: RE: [ActiveDir] Stop a DC from authenticating? Hi Matt Creating a site without any subnets, will not prevent users from logging on to there - (those machines without a subnet defined in AD) will find its fastest responding DC, which could mean that DC. Stopping netlogon like Jose mentioned (or unplugging :) Or remove dns srv records, DC cname and its glue records (now we are finding ways to screwup DCs instead of fixing it hey?) Thank you and have a splendid day! Kind Regards, Freddy Hartono Windows Administrator (ADSM/NT Security) Spherion Technology Group, Singapore For Agilent Technologies E-mail: [EMAIL PROTECTED] -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Medeiros, Jose Sent: Friday, June 03, 2005 2:45 AM To: [email protected] Subject: RE: [ActiveDir] Stop a DC from authenticating? Hi Matt, Easy one... unplug it's network conection... Just Kidding!! But seriously that would work, the other option is turn off the netlogon service and stop the sysvol share by turning off the server service. Jose -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Matt Brown Sent: Thursday, June 02, 2005 11:38 AM To: [email protected] Subject: [ActiveDir] Stop a DC from authenticating? How can I stop a DC from processing Authentication. If I build another site that is not hooked to any of the Subnets will the computers stop authenticating to the DC? I just want to stop it temporarily but don't want to turn the DC off. Thanks, -- Matt Brown [ SELECT * FROM IT WHERE EyeContact=True ] Information Technology System Specialist Eastern Washington University List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
