Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have 2 different locations, and at both site we have multiple domain controllers (Win2008). In our application we use Serverless Binding to execute our LDAP queries

If we look at de DnsHostName of the LDAP://RootDse on site B we always get the default domain controller of site A. Therefor all LDAP queries go much slower.

Is there a way to change the default domain controller per site ?

share|improve this question
up vote 2 down vote accepted

This can occur if someone has adjusted the domain controller's DNS priority (or weight) so that lookups would prefer a dc over another. (LdapSrvPriority)

The _ldap values are observable in the dns zone.

This may also occur if someone has adjusted the Netlogon service so that the DNS mnemonics for the LDAP SRV record is not registered, or if one site is configured to register records for another site (Site Coverage).

How to optimize the location of a domain controller or global catalog that resides outside of a client's site


How DNS Support for Active Directory Works

share|improve this answer

Do you have the domain controllers setup to the correct site in Active Directory Sites and Services? It should be set to map based on the IP subnet that your site is on.

share|improve this answer
They are set up in the correct site. I do have to add that the calling server in other forest is. – Linefeed Jun 23 '11 at 11:50

There is no concept of "default domain controller for a site". In dssite.msc you'd move the DCs to certain sites. Based on this location, a DC's netlogons service will register site specific DNS records.

You can also get a DC to cover other sites than its own. Autosite coverage is where a DC would cover sites with no DC as long it has connectivity as per site links.

I'd recommend you use nslookup, set type to all and check where you replace as appropriate based on whats in dssite.msc. Make sure you have only the right DCs registered against each site.

Also note that if you have cross forest resource access the calling server will be doing _ldap SRV record lookup based on its own site. if that fails it will do generic queries for You should get DCs to cover sites from the other forest as applicable. So if forest1 has Site1, Site2 and so on while forest2 has SiteA, SiteB and so on based on where the calling server is youl should ensure the DC covers the relevant site. See Administrative Templates\System\Net Logon\ for group policies to control site coverage.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.