Title: Set Preferred DC
Ok Guys,
I am about to ask a question that may stir up a great deal of conversation about Good Practice and Avoiding Hard Coded Entries, If we could just skip over that whole bit it would be great. That being said, I need to control the logonserver of individual
.
If we could just
skip over that whole bit it would be great.
That was pretty hard, but I did it!
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Brent Westmoreland
Sent: Tuesday, September 07, 2004
5:24 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Set Preferred
DC
so
setting lmhosts is as good as it gets IMHO.
Al
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Willem
KasdorpSent: Tuesday, September 07, 2004 2:18 PMTo:
[EMAIL PROTECTED]Subject: RE: [ActiveDir] Set Preferred
DC
That's easy. On W2000
and XP, remove the DNS servers from
Title: Re: [ActiveDir] Set Preferred DC
Thats Brilliant! Then we could just stop resolving DNS names except for DCs. We could break file print, internet everything else, but the client would be authenticated right where we want them
From: Willem Kasdorp [EMAIL PROTECTED]
Reply
Title: Re: [ActiveDir] Set Preferred DC
All right, seriously then. If you really
insist on hacking it instead of fixing nameresolution you can use nltest to reset
the secure channel to the DC you want. That sound better?
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED
Title: Re: [ActiveDir] Set Preferred DC
You acquiesced too quickly ;-)
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Willem
KasdorpSent: Tuesday, September 07, 2004 3:08 PMTo:
[EMAIL PROTECTED]Subject: RE: [ActiveDir] Set Preferred
DC
All right, seriously
then. If you
Title: Re: [ActiveDir] Set Preferred DC
Isn't that a setting that you can push via DHCP? I
want to say you can put a "tag" on your clients so that they can receive
different info via DHCP without having to be on a different
subnet.
For the life of me, I can't remember what MS calls
Title: Re: [ActiveDir] Set Preferred DC
I am familiar with open source DHCP products publishing an OpenLdap server and searchbase, but havent really looked to the MS product for that. To my knowledge, the client will perform an rpc call to the local netlogon service thereby calling DSGetDCName
Title: Re: [ActiveDir] Set Preferred DC
simplified
Actually the client tries to connect to the DC where he
last logged on first, then recieves the name of the site, queries the DCs in
that Site and performs a RPC-Ping to see who's resonding fast
enough.
/simplified
The feature Dave