DC authentication

  • Thread starter Thread starter Jay
  • Start date Start date
J

Jay

Is there a way i can have certain PC or users auth through certain DC on the
same Domain which have trust?

Jay
 
-----Original Message-----
Is there a way i can have certain PC or users auth through certain DC on the
same Domain which have trust?

Jay


.
Jay,

There is no way that you can 'force' any particular client
pc to authenticate against a specific DC. What you could
do is make sure that you have Sites ( and the associated
Subnets ) correctly set up if you have multiple physical
locations.

I am not sure that I understand what the last part of your
question means. Are you talking about child domains?

HTH,

Cary
 
This is just an idea I haven't tested yet.

If you have multiple DCs in a site, shouldn't you be able to configure the
priority field on the SRV record to have the client use the DC with the
lowest priority?
I know it works for Web servers...

Regards,
/Jimmy
--
Jimmy Andersson, Q Advice AB
Microsoft MVP - Active Directory
---------- www.qadvice.com ----------
 
Jimmy,

I have thought of this as well but have not tested it. If you gave one DC a
priority of, say, 10 and you gave the other DC a priority of, say, 30 then
the DC with the priority of 10 would be used most. Three times as much,
correct?

Cary
 
Yes, that sounds correct. Another thing that might be of interest is the
weight field since it's a load balancing mechanism. If the priority field is
the same for two or more records in the same domain, clients should try
records with higher weights more often.

But again, I haven't tried it yet... I hope to get some time to test it in
my lab during the holidays though.

Regards,
/Jimmy
--
Jimmy Andersson, Q Advice AB
Microsoft MVP - Active Directory
---------- www.qadvice.com ----------
 
Exactly, we are on the same page. As you well know, all DCs are - by
default - set at '0' and '100', respectively. I know that I have read an
article on this about two months ago but I can not remember exactly and have
not really had the time to look for it....

I also have not had the time lately to do any testing. But I will.

Thank you for adding on about the weight field.

Cary
 
Back
Top