Slow Link group policy issue

[Todd]

I am running a Windows 2000 domain. I have a site that
has two domain controllers at it. One domain controller
(call it DC01) is on the local LAN with two other member
servers and the other domain controller (call it DC02) is
by itself on a slow link. Neither of these systems are
setup as the PDC Emulator for my domain.

DC01 is running Exchange 2000 and DC02 is file and print.

My problem is that the two member servers that are on the
local LAN with DC01 are attempting to get the domain
policy from DC02. I believe this is failing because I
don't have the default 500kbps link between the member
servers and DC02. I don't want to lower that speed. What
I want to know is why aren't the two member servers going
to DC01 instead? How can I force the two member servers
to go to DC01 for their global policy settings?

 

[Jdrew [MS]]

Hey Todd,

We have a couple of issues going on. First, why aren't they going to DC1?
Let me ask - have you defined sites in AD Sites and Services and, if so,
have you defined subnets and associated them with each site? If not, you
need to, since that is what the client Netlogon process uses to determine
which DCs to communicate with.

Second, you were wondering how to get clients to work with DC2 when they do
go to it for GPOs. Check out 227260 and look in More Information:

3. To change the slow link detection speed for Windows 2000 when a
user's roaming user profile is being downloaded, expand the Computer
Configuration node and navigate to the Administrative
Templates\System\Logon folder. Modify the "Slow network connection
timeout for user profiles" policy. This policy uses two values, one in
kbps for the TCP/IP slow network detection mechanism and one in ms
(milliseconds) for the time to contact server. To disable slow link
detection, use 0 (zero) for these values. By default, the connection
speed is set to 500 (kbps) and the time is set to 120 (milliseconds).

You'll need to read the article, but you can use this, too.

Hope this helps!

Jim

 

[Guest]

Jim,

Thanks for the info. I actually dug a little more into
this issue. I don't think slow link detection is actually
causing me problems.

I do have this site defined in AD Sites and Services and
the two subnets both have the site defined with two
servers within that site.

My real problem ended up being replication issues between
DC2 and DC1. The Domain GPO that I have isn't replicated
and probably hasn't in months (I just started working on
this network and didn't have a hand in setting it up).
Actually the SYSVOL is failing to replicate correctly to
that server.