The digitally signed Privilege Attribute Certificate (PAC) that contains the authorization
Hi Chad, So the credentials prompted after you demoted the server from GC to DC, is that correct? Do you have any other GC server in your domain right now? Based on my research, the issue occurs if the DC cannot be found over the network. Besides, it is recommended to have at least one GC in a AD site. I would suggest you check the DC in EMC/Organization Configuration/Properties, and make sure the DC is setup correctly. Fiona Liao TechNet Community Support
December 16th, 2011 9:10am

We have an exchange 2007 server running a Windows server enterprise 2008 64bit. We had a 2003 domain controller that we recenelty demoted. Once we demoted the 2003 domain contoller users started getting prompted for their username and passwords in outlook. This seems to be random but it does through an error in the Exchange server system log. The digitally signed Privilege Attribute Certificate (PAC) that contains the authorization information for client username in realm DOMAIN.LOCAL could not be validated. We have verifed we have ipv6 enabled. We have verifed the time on both the 2008 dc and the Exchange server are synced or are within 1 minute of each other We only have a single domain so this is not a trust issue. I have researched this issue and have had not luck. Any help would be great. Thanks, Chad
Free Windows Admin Tool Kit Click here and download it now
December 24th, 2011 11:11am

Hello, Is there any update?Fiona Liao TechNet Community Support
December 25th, 2011 12:21am

Hi Chad, So the credentials prompted after you demoted the server from GC to DC, is that correct? Do you have any other GC server in your domain right now? Based on my research, the issue occurs if the DC cannot be found over the network. Besides, it is recommended to have at least one GC in a AD site. I would suggest you check the DC in EMC/Organization Configuration/Properties, and make sure the DC is setup correctly. Fiona Liao TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
December 25th, 2011 1:20am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics