You can't. If you configure Sites in AD correctly, then the clients will
automatically select their closest DC in the site and thus not authenticate
over WAN. Can you describe your issue more in detail ?
--
Regards
Matjaz Ladava, MCSE, MCSA, MCT, MVP
Microsoft MVP - Active Directory
(e-mail address removed), (e-mail address removed) http://ladava.com
