Windows 2003 native mode. One domain controller on-site, read-write, no RODCs. DNS is running on the DC onsite. Servers would be pointing to the DC for DNS and authentication.
How long would the child domain remain functional without it's ability to contact the forest level domain controllers? Could users still log in, up to several weeks after the disconnect, or would they experience Kerberos authentication issues?
I mean, it's being awfully nice about it and all. Each and every time it seems like it's a graceful shutdown.
Windows 2003 R2 server. (SP2)
HP Proliant DL380 G4. (BIOS current as of 2007.)
Xeon dual-core proc (3.2 G)
4 GB RAM.
Running:
* Altiris NS and management server
* SQL Server 2000 SE (SP4)
* IIS
According to the security and system log, a domain service account with local admin privs is rebooting the box, with this entry in the log. (It even gives a reason, that nice little account! :)
(And not only that, but the only other account that's logged in/connected happens to.. ahem, be my admin account.)
Event Type: Information
Event Source: Application Popup
Event Category: None
Event ID: 26
Date: 6/3/2009
Time: 11:34:48 AM
User: N/A
Computer: altiris-server
Description:
Application popup: System Shutdown : The system is shutting down. Please save all work in progress and log off. Any unsaved changes will be lost. This shutdown was initiated by mydomain\altiris-server-account. Shutdown will begin in 1 seconds. Shutdown message: Performing System Maintenance.
(WTF? `Performing System Maintenance'? What system maintenance would that be, little service account?)
The domain service account, (mydomain/altiris-server-account) is local admin on the box, and running the following Altiris services:
Altiris Client Message Dispatcher
Altiris Client Task Data Loader
Altiris Deployment Server Data Manager
Altiris Deployment Server DB Management
Altiris eXpress Server
Altiris NS Receiver
Altiris Object Host Service
Altiris PXE Manager
Altiris Service
...as well as the following SQL services:
MSSQLSERVER
SQLSERVERAGENT
I'm completely stymied. No scheduled tasks are performing any obvious reboots, nothing shows in displaying "at" on the local box.. Nothing else appears to be scheduled in an application, other than some Altiris stuff.
Here's what does not work so far;
(&(objectCategory=Person)(objectClass=Group)(CN=group_in_question))
(&(objectClass=Group)(objectCategory=Group)(member=CN=group_in_question))
(&(samAccountName=%USERNAME%)(memberof=CN=group_in_question))
(&(objectCategory=person)(objectClass=user)(memberOf=cn=group_in_question,ou=Groups,dc=mydomain,dc=com))