demoted server logon/off events

  • Thread starter Thread starter Si
  • Start date Start date
S

Si

A server which has been demoted using DCPromo is still
handling the majority of logon/off events for the network.

I have checked that the server is not part of AD and even
stopped the netlogon service.

Is there a way of configuring certain servers to handle
Kerberos tickets/requests?

All ideas are appreciated,

Rgds, Si.
 
I don't even see how that is possible since it does not contain the user database for
the domain if it has truly been demoted. Where are you seeing these events? Only a
domain controller will record "account logon events" for domain users. "Logon events"
can be recorded on any computer in the domain and will show a logon event when a
domain user accesses a share though the domain account is actually being
authenticated by a domain controller referral. If you look in system
properties/network identification it will tell you if the computer is still a domain
controller.--- Steve
 
Okay the computer is definitely not a domain controller.

The logon/logoff events appear in the security log and
relate to users logging into sql not the network.

Can a non-DC server handle Kerberos authentication?
 
Back
Top