Global Catalog

[Canuck]

my understanding of the global catalog server's purpose is that it indexs ad
attributes to make search quicker in AD.

We've got 2 domains 1 is an empty root and the other holds our pc's accounts
and servers. Do we have to have a Global Catalog server for authentication
purposes.

We have 4 sites each with DC's in them for authentication.

 

[Jimmy Andersson [MVP]]

You need a GC to find Universal Group Membership during logon.

Regards,
/Jimmy

 

[Dan DeStefano]

the gc holds the complete attribute set for its domain and a select set of
attributes for other domains in the forest. in w2k ad, when logging on, the
gc must be contacted to determine universal group memberships. so, if the gc
is offline or if the connection to it is slow, so will be logons. this is
not as much of a problem in w2k3 ad2, however.
the first dc in the forest will automatically host the gc, but you can make
other dc's host the gc as well. if logon times are a problem, then you may
want to install a local or better connected gc for the effected
machines/networks.
also, the infrastructure master fsmo role should not be hosted on a gc.

Dan

 

[S.J.Haribabu]

Hi Canuck,

GC is must per forest for Logon authentication. Though you have domain
controller (without GC) locally in your site, logon authetication happens
in GC only. Thats because GC stores Universal Group membership information.

For more information, why GC is required for logon authetication go through
the site http://support.microsoft.com/?kbid=216970

Canuck - Please let me know if you need further information on the same.

Thanks,

(e-mail address removed)

This posting is provided "AS IS" with no warranties, and confers no rights.