Domain Netlogon Issue

Question

We have 4 writable DCs all of which are 2008 R2.  We also have an 2008 R2 RODC which is in the DMZ (used for external LDAP authentication).  All 5 are in
the Main site in Active directory sites and services.  I realize that the RODC should be in its own "site" but that can't happen right now as it is heavily used(I inherited this configuration). We have all of the Microsoft recommended ports
open on the firewall between the DMZ and internal LAN.  <o:p></o:p>
The problem I have is when copying a file to \\domainname.local\netlogon when logged into certain DCs it will add the file to the netlogon share
of the RODC.  Obviously at this point will not replicate out to the other DCs because an RODC only pulls it's replication from a writable DC.  BUT if I browse using \\dcname\netlogon and add the file it replicates to all of the DCs just fine.
Any suggestions would be appreciated.

Answer 1

> realize that the RODC should be in its own "site" but that can't happen
> right now as it is heavily used(I inherited this configuration).
You can do this on the fly...
> The problem I have is when copying a file to \\domainname.local\netlogon
> when logged into certain DCs it will add the file to the netlogon share
> of the RODC.
As a temporary workaround, change share permissions on the RODC and
remove administrators.
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))