Can you force authentication to certain server? 2

[SCLDTony]

We have a Server 2003 AD network consisting of one domain across a WAN to ten different locations. We have four domain controllers across located throughout these ten locations. We are curious as to whether or not we can force a group of computers (running XP pro) to request its login and group policies from a certain domain controller. Or can we set precedence for a group of computers? We are running our network on Cisco equipment, EIGRP protocol (not sure that makes any difference). The authentication process seems really random and at times puts a heavy load on some of our slowest links. Thanks in advance for any insight or advice!!

Tony

 

[Jpoandl]

Yes, you can. This is by design in Windows 2000/2003 networks, but the administrator must input information into Active Directory in order for it to work properly.

You need to use AD Sites and Services to tell AD how your network is setup.

In sites in services, you must define the subnets that exist in your network. After the subnets are defined, you need to create SITES (For example, create a site for each LAN network ie, New Jersey, California, Florida). Then, you simply associate the subnets with the site.

Finally, you should move the domain controllers that are physically in New Jersey to the New Jersey Site...the California DC to the California site...and so on.

Once this is done, AD will realize where your clients are (by using the subnet of the client related to the AD Site) and authenticate them using the appropriate (local) DC.

Some links for you (by the way, sites and services is very similar in both Windows 2000 and Windows 2003 domains):

http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/adsites.asp

http://www.microsoft.com/windows200...ndows2000/en/advanced/help/sag_ADdeploy_1.htm

http://www.eu.microsoft.com/windows...s2000/en/server/help/sag_ADsite_concept_4.htm

How to configure subnets in AD:

http://support.microsoft.com/default.aspx?scid=kb;EN-US;323349

Hope this helps...

Joseph L. Poandl
MCSE 2003

If your company is in need of experts to examine technical problems/solutions, please check out

http://www.NJCOMPUTERNETWORKS.com

(Sales@njcomputernetworks.com)

 

[SCLDTony]

THATS what sites and services are for. Duh!!

Thank you, Joseph. I think I am now heading in the right direction.

Too cool...

Thanks again!

Tony

 

[Jpoandl]

LOL...good luck, but I'm sure you find this very easy to setup...later

Joseph L. Poandl
MCSE 2003

If your company is in need of experts to examine technical problems/solutions, please check out

http://www.NJCOMPUTERNETWORKS.com

(Sales@njcomputernetworks.com)