Networks

Ask something
Discussion Locked

Prefered DC

0 helpful
5 replies

by rovac

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi I got two DC on segment 10.52.0.1
one Dc on segment 10.52.1.2 and all the clients machine are on the segments 10.52.1.xx

My two segment communique by a microwave

ok what I want too know is can I force the client too be authenticated by the Dc on the same segment 10.52.1.2 (prefered DC) if yes where and How.

second question what's the command to see which Dc authenticated the client

5 replies

by joseph moore

I take it you are running Win2K Server with Active Directory.
Ok. There are a few ways to do this. The recommended Microsoft way is to set up your Domain Controllers and clients you want to authenticate against these same domain controllers by putting all of them in the same Site. With Win2k, clients are supposed to authentiate to the domain controllers in their own Site first, then they will go to other DCs in other Sites in their Domain. That is how it is supposed to work.

As for determining the DC that did the authentication, an easy way is to open a Command Prompt and type in SET

That will give you a list of all environment variables on the cilent workstation. One of those variables is %LOGONSERVER%. This is the DC that did the authentication for that logon. So, look for:
LOGONSERVER=\\domain_controller_name

hope this helps

by maelgwyn

You obviously have a router b'tween the two.

DC --------- (- ~~~~~~~~ -) -----------DC
|- Clients

(That looks soooo cool ;) )

The client machines should never go across the WAN as they should be on a different subnet

(10.52.x.x/8) Therefore the machines should be only going across the WAN for data, not authentication.

In the logon policies, theres a checkbox tyo display which server is authentication the machine.

This discussion is closed to new replies.