Windows Forum

Ask something
Discussion Locked

Policy help on WAN

0 helpful
3 replies

by qultptry 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
1 PDC, 2 BDC's to authentic users locally. Use both config.pol and ntconfig.pol, saved in ...repl/import/scripts. Can't I have one on each server? It seems that config.pol users get policy from pdc only which causes additional traffic across wan, however they do get authenticated locally. Can this be done, if so how. I could share netlogon with a different name, but then how does win95/98, NT see the netlogon? It would make sense to have a smaller policy to maintain on each server and reduce traffic. Need help ASAP 1,000 + users are affected. Thank you!!!!!!

3 replies

by tschmuki

Windows NT WS will load the ntconfig.pol file from the authentication server, however Windows 9x Client will always contact the PDC. You can change this in the Computer Policies - Network - System policies update - Remote Update - check the "Load balancing" Checkbox. Concerning the question to have smaller policy: the answer therefore really depense on the overall policy configuration. I never had a case where I could speed-up the logon process by splitting of the policy files, it was always anissue, which could be solved with changes to the logon-scripts.

This discussion is closed to new replies.