AD and occasional lockout on shares

JUST AN UPDATE FOR ANYONE INTERESTED :-)

I was performing some minor maintenance on the domain which basically entailed shutting down the backup secondary AD server.

I noticed that during this downtime the READYNAS locked me out of the shares despite the primary AD server still up and running. [As a reminder the Readynas was pointing to both primary for AD Sync and Time Sync and the secondary not even reference in the NAS admin]

From a server I typed in NET TIME and then I realised the the domain time was pulling from the secondary and not the primary DC.

As as short-term remedy (trial) I've pointrf the READYNAS to the secondary AD for both sync and time. So far it's held well and I think I might have stumbled across the answer.

I am by no-means an ADS guru but I need to understand how ADS roles differ and how a time drift can occur.

During a lock-out I'd even got the point of watching READYNAS time and Windows time and it seemed to be exactly the same. So not entirely sure how this might be the fix, but I suggest it an avenue to look at if anyone else is in a similar boat.

Cheers

Chris