We have some apps <groan> that did. What we did was establish a CNAME imaginatively named AD :-)
We tell the developers that want to point to a DC for such things to use the CNAME instead of hardcoding a DC and flip it to a different DC before we reboot the one it is usually pointed to. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jose Medeiros Sent: Wednesday, August 24, 2005 12:24 PM To: [email protected] Subject: Re: [ActiveDir] Win2k3 SP1 vs. W32Time Point well taken.. come to think of it, I did work at a startup several years back that had a Java based web app using a specific DC for user authentication via LDAP. Thanks for pointing that out. Jose ----- Original Message ----- From: "Phil Renouf" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Wednesday, August 24, 2005 11:09 AM Subject: Re: [ActiveDir] Win2k3 SP1 vs. W32Time If you do something like this then you want to be 100% sure that there are no applications out there using your DC name specifically for authentication or LDAP queries and that there are no clients with LMHOSTS file entries etc. Phil On 8/24/05, Jose Medeiros <[EMAIL PROTECTED]> wrote: > Hi David, > > I just wanted to let you know that we upgraded one of our domain's to AD > 2003 with sp1 several month's ago and have not seen the issue that you are > having. > > Also the reason why you have multiple DC's is so if one goes down, the > other's can still authenticate the clients, so unless you are also using > your DC's as file and print servers, rebooting one during the day would > hardly be noticeable ( rebooting them during a lunch break is probably > best ). I am sure that others on the list may have an argument to > challenge > what I just stated, however I would love to hear it. > > Jose :-) > > > ----- Original Message ----- > From: "David Aragon" <[EMAIL PROTECTED]> > To: <[email protected]> > Sent: Tuesday, August 23, 2005 7:26 PM > Subject: RE: [ActiveDir] Win2k3 SP1 vs. W32Time > > > > David, > > > > Yes, I tried them both, step by step, exactly as the KB described the > > first > > on DC1, the second on DC2, and both on DC3. Each time with no joy). > > There > > was nothing about rebooting in the article, but I did restart Net Logon > > Service after each workaround was attempted. I won't be able to reboot > > any > > of the DC's for several more hours. > > > > David Aragon > > > >> -----Original Message----- > >> From: [EMAIL PROTECTED] > >> [mailto:[EMAIL PROTECTED] On Behalf Of David Adner > >> Sent: Tuesday, August 23, 2005 6:02 PM > >> To: [email protected] > >> Subject: RE: [ActiveDir] Win2k3 SP1 vs. W32Time > >> > >> *cough* That's the KB he referenced. :) > >> > >> David, did you try both workarounds or just one of them? Did > >> you try rebooting after making the changes? Can you > >> described the exact things you did? > >> > >> -----Original Message----- > >> From: [EMAIL PROTECTED] > >> [mailto:[EMAIL PROTECTED] On Behalf Of > >> Thommes, Michael M. > >> Sent: Tuesday, August 23, 2005 7:29 PM > >> To: [email protected] > >> Subject: RE: [ActiveDir] Win2k3 SP1 vs. W32Time > >> > >> see http://support.microsoft.com/?kbid=892501&SD=tech > >> > >> Mike Thommes > >> > >> ________________________________ > >> > >> From: [EMAIL PROTECTED] on behalf of David Aragon > >> Sent: Tue 8/23/2005 6:40 PM > >> To: [email protected] > >> Subject: [ActiveDir] Win2k3 SP1 vs. W32Time > >> > >> > >> > >> We just upgraded our 2k3 DC's to SP1 this last weekend after > >> several months of testing and re-testing. Shortly afterwards > >> I noticed that the time service was stopped with error ID > >> 7023 & 46 (see below). I went through the steps listed in > >> kb892501 but to no avail. This issue did not appear in any > >> of our test setups, however all our production DC's exhibit > >> the behavior. > >> Does anyone have any suggestions or ideas? > >> > >> David Aragon > >> > >> Event Type: Error > >> Event Source: Service Control Manager > >> Event Category: None > >> Event ID: 7023 > >> Date: 8/23/2005 > >> Time: 3:58:47 PM > >> User: N/A > >> Description: > >> The Windows Time service terminated with the following error: > >> Not all privileges referenced are assigned to the caller. > >> > >> Event Type: Error > >> Event Source: W32Time > >> Event Category: None > >> Event ID: 46 > >> Date: 8/23/2005 > >> Time: 3:58:47 PM > >> User: N/A > >> Description: > >> The time service encountered an error and was forced to shut down. > >> The error was: 0x80070514: Not all privileges referenced are > >> assigned to the caller. > >> > >> List info : http://www.activedir.org/List.aspx > >> List FAQ : http://www.activedir.org/ListFAQ.aspx > >> List archive: > >> http://www.mail-archive.com/activedir%40mail.activedir.org/ > >> > >> > >> > >> List info : http://www.activedir.org/List.aspx > >> List FAQ : http://www.activedir.org/ListFAQ.aspx > >> List archive: > >> http://www.mail-archive.com/activedir%40mail.activedir.org/ > >> > >> List info : http://www.activedir.org/List.aspx > >> List FAQ : http://www.activedir.org/ListFAQ.aspx > >> List archive: > >> http://www.mail-archive.com/activedir%40mail.activedir.org/ > >> > > > > List info : http://www.activedir.org/List.aspx > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > List archive: > > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
