up vote 0 down vote favorite
share [g+] share [fb]

We have multiple sites with a global catalog AD DC at each location with VPN tunnels
VPN tunnels work as needed nothing wrong there ..

When clients at site B attempt to login and then run the set command it states that the logon server is the Domain Controller at Site A which over a small broadband link is bad any ideas how we can set it so that Site B "logs onto" DC B etc ?

Any help would be greatly appreciated

I was looking at; http://support.microsoft.com/kb/192064 which may provide a workaround?

link|improve this question
47% accept rate
Are your sites setup correctly in sites and services? – Zypher♦ Oct 7 '10 at 13:49
Yep with full replication working fine – Aceth Oct 7 '10 at 13:50
Do you have subnets set up in each AD site? – Christopher Oct 20 '10 at 20:40
feedback

1 Answer

up vote 2 down vote

You need to properly configure Active Directory Sites and Services.

Things that you should be configuring in Sites & Services:

  • Subnets
  • Inter-site Links
  • What Domain Controllers belong to what site
  • Make sure that there is at least 1 GC at each site.

If you have this all configured, then chances are there are connectivity issues at the sites mentioned. If the appropriate DCs for a defined site are unreachable, the clients will attempt to authenticate over the lowest-cost link available.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.