Authenticating Domain Controller

What is the best way to control which Domain Controller a set of PC's
authenticate/get group policy from in Active Directory? I have a group
of PC's that rely on a specific policy to function, and they are
currently authenticating to a DC at a different site (over a point to
point connection). This is causing a loss of service at some times.

Also, I have new AD sites (subnets) which have no DC on it. How do I
tell these sites which Domain Controllers to authenticate/get group
policy from? There are currently two sites with DC's on them.

Thanks in advance,
nebj00la

Define sites: Geographic locations, or Active Directory sites?

Ideally all AD sites should have domain controllers as well as a global
catalog server if there are 100 users or more at the site, or at a minimum
Universal Group Membership Caching at the site level (requires a DC at the
site though). Are your users performing UPN authentication?

Jas



"nebj00la" wrote:

> What is the best way to control which Domain Controller a set of PC's
> authenticate/get group policy from in Active Directory? I have a group
> of PC's that rely on a specific policy to function, and they are
> currently authenticating to a DC at a different site (over a point to
> point connection). This is causing a loss of service at some times.
>
> Also, I have new AD sites (subnets) which have no DC on it. How do I
> tell these sites which Domain Controllers to authenticate/get group
> policy from? There are currently two sites with DC's on them.
>
> Thanks in advance,
> nebj00la
>
>

Sites and Services fixed the issue. Thanks for the reply.

nebj00la


jasonboche wrote:
> Define sites: Geographic locations, or Active Directory sites?
>
> Ideally all AD sites should have domain controllers as well as a global
> catalog server if there are 100 users or more at the site, or at a minimum
> Universal Group Membership Caching at the site level (requires a DC at the
> site though). Are your users performing UPN authentication?
>
> Jas
>
>
>
> "nebj00la" wrote:
>
> > What is the best way to control which Domain Controller a set of PC's
> > authenticate/get group policy from in Active Directory? I have a group
> > of PC's that rely on a specific policy to function, and they are
> > currently authenticating to a DC at a different site (over a point to
> > point connection). This is causing a loss of service at some times.
> >
> > Also, I have new AD sites (subnets) which have no DC on it. How do I
> > tell these sites which Domain Controllers to authenticate/get group
> > policy from? There are currently two sites with DC's on them.
> >
> > Thanks in advance,
> > nebj00la
> >
> >