Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have multiple sites with a global catalog AD DC at each location with VPN tunnels
VPN tunnels work as needed nothing wrong there ..

When clients at site B attempt to login and then run the set command it states that the logon server is the Domain Controller at Site A which over a small broadband link is bad any ideas how we can set it so that Site B "logs onto" DC B etc ?

Any help would be greatly appreciated

I was looking at; which may provide a workaround?

share|improve this question
Are your sites setup correctly in sites and services? – Zypher Oct 7 '10 at 13:49
Yep with full replication working fine – Aceth Oct 7 '10 at 13:50
Do you have subnets set up in each AD site? – Christopher Oct 20 '10 at 20:40

You need to properly configure Active Directory Sites and Services.

Things that you should be configuring in Sites & Services:

  • Subnets
  • Inter-site Links
  • What Domain Controllers belong to what site
  • Make sure that there is at least 1 GC at each site.

If you have this all configured, then chances are there are connectivity issues at the sites mentioned. If the appropriate DCs for a defined site are unreachable, the clients will attempt to authenticate over the lowest-cost link available.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.