That is one ugly way do deal with that small issue though. The additional administrative overhead involved in having that many subdomains (I am guess it is a number of locations based on 90 DCs) would far outweigh the slight gain in time saved for the helpdesk staff. I'd much prefer to spend a little time educating the helpdesk and let them spend a few minutes tracking down the right location than have a higher paid admin have to deal with the extra overhead of that many subdomains.
Phil -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Paul Sent: Wednesday, September 22, 2004 10:28 AM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Account Lockout resets in large companies The first thing that comes to mind is using subdomains for the physical sites, that should fix that specific problem.. but of course that'd have to fit in with your network design. Regards, Paul. ----- Original Message ----- From: "Snyder, Robert W." <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, September 22, 2004 4:02 PM Subject: [ActiveDir] Account Lockout resets in large companies > We are in the midst of rolling out our AD implementation world-wide > with about 90 DC's globally. One of the issues we are wrestling with > is how to ensure that Account unlocks happen on the users local DC so > that they aren't > forced to wait on replication. We've looked at the Acctinfo.DLL but it > doesn't seem to give the correct site info unless you know the machine name > and most users probably don't know this nor can they find it if they > are currently locked out. We also tried Lockoutstatus.exe tool. > Account unlocks > seemed to work here, but the password changes aren't working. We'd > like one > method for doing both. Obviously, we can try to train our help desk to > try to determine what the correct DC is and then point their ADUC to > the right DC when making the change. We'd like to find a simpler solution though. > > We were wondering how other large international companies with central help > desks may have resolved this problem. Anyone have any suggestions. > Thanks in > advance for your help. > > Bob Snyder > Sr. Technical Programmer/Analyst > Global Software Support > [EMAIL PROTECTED] > List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
