Not enough information. Where is your DNS? Do you have an entry for a GC that points to your remaining DC?
You need a GC to populate Universal Group membership (or you need Universal Group membership caching enabled). No GC = no logon (except using cached credentials) Cheers Ken From: RM [mailto:[EMAIL PROTECTED] Sent: Friday, 16 May 2008 10:26 AM To: NT System Admin Issues Subject: Missing dedicated forest root DC Guys, quick question... We're doing a mock disaster recovery here. Can we spin up a child dc without also spinning up a DFR dc and get it to work well enough to start AD, authenticate users, etc? We've tried it already and it hasn't worked so far. I suspect it's due to the lack of an accessible _msdcs zone. Thanks! ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
