{"id":42,"date":"2008-09-23T01:01:00","date_gmt":"2008-09-23T01:01:00","guid":{"rendered":"http:\/\/web03.partners.extranet.chrisse.com\/wordpress\/?p=42"},"modified":"2008-09-23T01:01:00","modified_gmt":"2008-09-23T01:01:00","slug":"windows-server-2003-domain-controllers-may-perform-automatic-site-coverage-for-rodcs","status":"publish","type":"post","link":"https:\/\/blog.chrisse.se\/?p=42","title":{"rendered":"Windows Server 2003 Domain Controllers may perform Automatic Site Coverage for RODCs"},"content":{"rendered":"

Note: <\/strong>Domain controllers running Windows Server 2003 do not consider RODCs when they evaluate site coverage requirements and may register its Domain Name System (DNS) service (SRV) resource records for a site that contains an RODC. As a result, they perform automatic site coverage for any site regardless of the presence of an RODC for the same domain. Consequently, client computers that attempt to discover a domain controller in the RODC site can also find the domain controller that is running Windows Server 2003 and may not authenticate to the RODC. <\/span><\/p>\n

 <\/p>\n

There are a few possible solutions for this problem: <\/span><\/p>\n

 <\/p>\n

 <\/p>\n

    \n
      \n
    1. Apply the Windows Server 2008 read-only domain controller compatibility pack for Windows Server 2003 clients and for Windows XP clients (http:\/\/support.microsoft.com\/kb\/944043\/en-us)
      \n(This hotfix has to be applied to all Windows Server 2003 DCs that may perform automatic site Coverage)
      \n<\/span><\/li>\n<\/ol>\n<\/ol>\n

       <\/p>\n

        \n
          \n
        1. Ensure that only domain controllers running Windows Server 2008 are present in the site closest to the RODC site.
          \n<\/span><\/li>\n<\/ol>\n<\/ol>\n

           <\/p>\n

            \n
              \n
            1. Configure the weight or the priority of the DNS SRV records so that clients are more likely to authenticate with the RODC than with a remote Windows Server 2003 domain controller.
              \n<\/span><\/li>\n<\/ol>\n<\/ol>\n

               <\/p>\n

                \n
              1. Disable automatic site coverage on domain controllers running Windows Server 2003 present in the site closest to the RODC site. <\/span><\/li>\n<\/ol>\n

                 <\/p>\n

                How to disable automatic site coverage: <\/span><\/p>\n

                 <\/p>\n

                 <\/p>\n

                  \n
                    \n
                  1. Click Start, click Run, type regedit<\/strong>, and then click OK. <\/span><\/li>\n<\/ol>\n<\/ol>\n

                     <\/p>\n

                      \n
                        \n
                      1. Navigate to the following registry subkey HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesNetlogonParameters<\/strong> <\/span><\/li>\n<\/ol>\n<\/ol>\n

                         <\/p>\n

                          \n
                            \n
                          1. Click Edit, point to New, and then click DWORD<\/strong> Value. <\/span><\/li>\n<\/ol>\n<\/ol>\n

                             <\/p>\n

                              \n
                                \n
                              1. Type AutoSiteCoverage<\/strong> as the name of the new entry, and then press ENTER<\/strong>. <\/span><\/li>\n<\/ol>\n<\/ol>\n

                                 <\/p>\n

                                  \n
                                    \n
                                  1. Double-click the new AutoSiteCoverage<\/strong> registry entry <\/span><\/li>\n<\/ol>\n<\/ol>\n

                                     <\/p>\n

                                      \n
                                        \n
                                      1. Under Value data, type 0<\/strong> to disable automatic site coverage. 1 = to enable it. <\/span><\/li>\n<\/ol>\n<\/ol>\n

                                         <\/p>\n

                                          \n
                                            \n
                                          1. Click Start, Click Run, type cmd<\/strong> and then click OK. <\/span><\/li>\n<\/ol>\n<\/ol>\n

                                             <\/p>\n

                                              \n
                                            1. In the Command Prompt, type the following command:
                                              \nnltest \/dsregdns <\/strong>or restart the netlogon<\/strong> service <\/span><\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"

                                              Note: Domain controllers running Windows Server 2003 do not consider RODCs when they evaluate site coverage requirements and may register its Domain Name System (DNS) service (SRV) resource records for a site that contains an RODC. As a result, they perform automatic site coverage for any site regardless of the presence of an RODC for … <\/p>\n

                                              Continue reading “Windows Server 2003 Domain Controllers may perform Automatic Site Coverage for RODCs”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"categories":[1],"tags":[6],"class_list":["post-42","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-active-directory"],"_links":{"self":[{"href":"https:\/\/blog.chrisse.se\/index.php?rest_route=\/wp\/v2\/posts\/42","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.chrisse.se\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.chrisse.se\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.chrisse.se\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.chrisse.se\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=42"}],"version-history":[{"count":0,"href":"https:\/\/blog.chrisse.se\/index.php?rest_route=\/wp\/v2\/posts\/42\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.chrisse.se\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=42"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.chrisse.se\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=42"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.chrisse.se\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=42"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}