Networks

Ask something
Question Locked

WIN2003 ACTIVE DIRECTORY confusion

0 helpful
2 replies

by zaidumer

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

a slight confusion...

i have a domain controller at siteA. Also i have 2 additional domain controllers at siteB & siteC

all of them are GC holders.
operation,PDU and infrastructure master is the DC at site A.

now many times a bunch of users at siteA often get authenticated by the additional DCs at site B & C..

when i run "set logonserver" at their command prompts it shows the name of the DC servers of site B & C

why ?? whats the reason that user go all the way across a wan link to get authenticated from additional dc while they can do the same from the local DC at siteA

i dont have any sites configured... they all replicate with each other via RPC ..

what can i do to prevent this

2 replies

by p.j.hutchison

AD is assuming that all three DCs are all high speed (100bps or better) connectivity, so clients should be authenticate using any Global Catalog or DC server.

Now if you set up 'Sites' and configure which network subnet is applied to each site, you can then control which DC clients can authenticate against and control when replication occurs between the DCs.

This discussion is closed to new replies.