DC Logon.

[ianglynn]

Can anyone explain to me how a workstation contacts a Domain Controller to logon.

We have a single domain with various sites located around the world. We have a DC locally but when I try to logon I get authenticated somewhere else such as in a different country instead of at our own DC.

How can I make it so that we get authenticated locally by our own DC which will speed up our logon times.

At the same time if our DC goes offline we still need to be authenticated elsewhere.

I really need to understand this quickly as we are in a testing stage of moving over to Active Directory.

Thanks.

 

[SelbyGlenn]

If your workstations are not 2000 or XP then they are not aware of AD. You must install the AD Client on these machines so they become aware of sites etc. This will stop them logging onto the wrong DC. Make sure you add the AD Client (downloadable free from Microsoft web site) after the DC on that site has been promoted. I made the mistake once of installing the client on a load of PCs on one site before the local DC had finished building and they ended up logging on all over the country!!!

Also make sure that every DC is a Catalog Server. If it's not and the link goes down you may not be able to log on.

Hope this helps.
Glenn
BEng A+ MCSE CCA

 

[GrnEyedLdy]

Ianglynn,

Is your 'local' DC acting as a Global Catalog server?

Is it running DNS? If so, how is it configured, i.e., A/D intergrated or as a Secondary?

This link may help,

http://www.microsoft.com/windows2000/docs/addnsgc.doc

Just a thought,

Patty