Same DC

Hello -

I'm looking to have my users authenticate to their local
subnet DC's when logging on first, then other DC's if
their's isn't available. I need to do this for auditing
purposes.

I think I've seen something on this before but I haven't
been able to find it again.

Single domain, 3 physical sites, one AD site, Win2K3
functional mode (they really need to get a better name
for that), 3 DC's/GC's.

TIA.

Generally you can control this by configuring separate AD Sites. See:

http://support.microsoft.com/default...b;en-us;314861

http://support.microsoft.com/default...b;en-us;889031

http://www.microsoft.com/technet/pro...400da1379.mspx

Doug Sherman
MCSE, MCSA, MCP+I, MVP

"Tim" <(E-Mail Removed)> wrote in message
news:09bf01c539e8$845a3f30$(E-Mail Removed)...
> Hello -
>
> I'm looking to have my users authenticate to their local
> subnet DC's when logging on first, then other DC's if
> their's isn't available. I need to do this for auditing
> purposes.
>
> I think I've seen something on this before but I haven't
> been able to find it again.
>
> Single domain, 3 physical sites, one AD site, Win2K3
> functional mode (they really need to get a better name
> for that), 3 DC's/GC's.
>
> TIA.
>
>

Thanks - that was what I was thinking also, just hoping
to avoid the sep sites.

Thanks for the quick reply.


>-----Original Message-----
>Generally you can control this by configuring separate
AD Sites. See:
>
>http://support.microsoft.com/default.aspx?scid=kb;en-
us;314861
>
>http://support.microsoft.com/default.aspx?scid=kb;en-
us;889031
>
>http://www.microsoft.com/technet/pro...l/windowsserve
r2003/library/DepKit/e068d7d7-5187-4e4c-96dd-
5db400da1379.mspx
>
>Doug Sherman
>MCSE, MCSA, MCP+I, MVP
>
>"Tim" <(E-Mail Removed)> wrote in
message
>news:09bf01c539e8$845a3f30$(E-Mail Removed)...
>> Hello -
>>
>> I'm looking to have my users authenticate to their
local
>> subnet DC's when logging on first, then other DC's if
>> their's isn't available. I need to do this for
auditing
>> purposes.
>>
>> I think I've seen something on this before but I
haven't
>> been able to find it again.
>>
>> Single domain, 3 physical sites, one AD site, Win2K3
>> functional mode (they really need to get a better name
>> for that), 3 DC's/GC's.
>>
>> TIA.
>>
>>
>
>
>.
>

The solution isn't to redesign how DC except the logins, the solution is to
redesign how you do the auditing. Miscrosoft Operation Manager (MOM) is
design specifically for this purpose. It will gather the data (logins and
tons of other stuff) and bring it into one centralized location. The
"workgroup" version of MOM can monitor up to 10 servers and only costs
somewhere around $420,...that is less than 2 copies of XP-Pro.

Aside from that, they already login to the DC on thier subnet by default
when the system is designed properly. Assuming each subnet is a
"site",...you create "Site Objects" on AD and associate the relevant DC with
that Site. Replication is controlled by AD using the "Site Links" between
the Sites and the users, when logging in will deal with the DC within thir
own "Site".

Investigate documentation on the use of AD Sites for more specific details.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com


"Tim" <(E-Mail Removed)> wrote in message
news:09bf01c539e8$845a3f30$(E-Mail Removed)...
> Hello -
>
> I'm looking to have my users authenticate to their local
> subnet DC's when logging on first, then other DC's if
> their's isn't available. I need to do this for auditing
> purposes.
>
> I think I've seen something on this before but I haven't
> been able to find it again.
>
> Single domain, 3 physical sites, one AD site, Win2K3
> functional mode (they really need to get a better name
> for that), 3 DC's/GC's.
>
> TIA.
>
>