Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have one domain controller (DC) in one location and a failover DC in another location. For some reason, there are a few computers in the first location when logining into the domain login into DC2 (the failover DC) rather than DC1 (the "main" DC). Anyone know why that is and how I can force these computers to login into DC1?

share|improve this question
Do you have active directory sites configured? – Shane Madden Aug 10 '11 at 16:34
up vote 2 down vote accepted

You have to configure Sites and Services in AD. You need to create your subnets, and associate them with sites. Then, when a machine tries to contact AD, it's subnet will tell it what site it's in, and it will start with the closest DC(s) to it, which would be in its site.

share|improve this answer

AD sites are meant to be used for this. Or you could mess with the SRV records and the respective priorities of the DCs.

share|improve this answer
You second suggestion isn't a good idea for most scenarios - if you make DC1 a higher priority, you're enforcing that most/all users at site 2 will try using it instead of their local, DC2. – mfinni Aug 10 '11 at 16:50
absolutely true! I was assuming that there's only one fail-over direction rather than crosswise fail-over which would be the better solution as is the case with properly set up AD sites. – pfo Aug 10 '11 at 16:53
Agreed. As you said first, AD Sites is where it's at. It's best to use the tools available, don't try to work around them. – mfinni Aug 10 '11 at 16:56

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.