Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have an AD Domain with two sites and 6 domain controllers. Four of the DCs are in our primary site and 2 are in our secondary site and they are a mixture of 2003 and 2008 machines. As far as I can tell our sites are setup properly with the correct subnets associations an all that.

Our problem is that we constantly have users in our main site that wind up authenticating against the DCs in the remote site which slows things down quite a bit. I thought proper site configuration was supposed to prevent this. Am I missing something? Do we have something configured wrong?

share|improve this question
Check and be sure that both server AND client subnetworks are in the right sites. That should be all there is to it. – SpacemanSpiff Jun 23 '11 at 18:43
Somewhere in AD or maybe from the CLI from a host you can actually check what site the client thinks they are in. I'd do this from bother client and server to verify. The initial lookup for a DC is done via DNS, not sure where on the chain it makes a decision. Perhaps also check to see which DC's are global catalog servers. – SpacemanSpiff Jun 23 '11 at 19:41

It's possible that your local DCs aren't responding fast enough. Try running KCC, dcdiag, netdiag, nltest on your local DCs and see if something is bad.

It's also possible that the Sites and Subnets config isn't correct, which would cause what you're seeing. You say you think they're correct though; since we can't see it, I couldn't say.

Edit - Spiff gets to the point. The subnet(s) that contain the HQ clients have to be associated with the site that is also associated with subnet(s) that contain the HQ DCs. If they are in the same subnet, then there's something weird going on.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.