Is it best practice to store logon scripts centrally in \\DOMAIN\Netlogon or in the policy folder they get put in by default, eg. \\DOMAIN\SysVol\DOMAIN\Policies\{DE22B6FB-315E-4C55-BF06-A7709913CD9E}\User\Scripts\Logon?
What are the implications (if any) of choosing one location over the other?
I'm inclined to just keep them all in Netlogon for ease of access /review...
On my main 2008 R2 domain controller:
When I boot, the screen goes black (monitor light goes amber)
RDP logon to the server says "An attempt was made to logon, but the network logon service was not started"
Trying to logon to the local admin account on the domain controller via RDP gives the same problem.
It's a really big mess..
EDIT: After playing around with some remote management tools, it seems neither netlogon nor RPC server are running.. tried starting them but they won't start..
So I have a weird bug that pauses the netlogon service periodically on my primary domain controller. When this happens users cannot log in to the domain. I have a secondary DC offsite that is a Global Catalog and DNS server but it is reachable through an MPLS connection.
DC1 has all FSMO roles and is located with most client PCs in the 192.168.1.0/24 network. The offsite DC is fully reachable through its dns name and sits with a few clients in the 192.168.2.0/24 network.
Why wont DC2 take over log on responsibilities when DC1 is unavailable?
Our Active Directory domain is installed on a subdomain (us.example.com). The parent domain (example.com) is for mostly linux servers located at our datacenter - for our website and other public facing services. On the primary domain controller, I am getting errors in the event viewer from NETLOGON saying the dynamic registration of various SRV records failed. It was trying to register them on the DNS SOA for the parent domain, example.com. This zone is hosted by a our domain registrar's DNS server and does not allow dynamic registration.
--
For reference, here is an example of one of the errors being logged:
The dynamic registration of the DNS record '_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.example.com. 600 IN SRV 0 100 389 SERVER01DC.us.example.com.' failed on the following DNS server:
DNS server IP address: x.x.x.x
Returned Response Code (RCODE): 1
Returned Status Code: 9001
Where will I find the netlogon diretory on a Window 2003 domain controller?