how to force client to authenticate with particular DC

[chai]

Hi there,

My company have few network segments and few DC. Before
it, it one 2 segment.

When some PC move to new segment or new PC joined to
domain, the logon process seem to take long time.

My DC + DNS record is correct and the client is
authenticated to DC - no problems.

Now I want to know it is possible to force certain segment
to authenticated with particular DC - the nearest one.

Thanks

 

[Matjaz Ladava [MVP]]

There is no direct way to force a client to authenticate to particular DC,
but if you setup sites in your AD (trough AD Sites and Services) and
asociate apropriate subnets with the site, then the clients in those subnets
will try to locate the nearest DC in their closest site.

--
Regards

Matjaz Ladava, MCSE, MCSA, MVP
Microsoft MVP - Active Directory
(e-mail address removed), (e-mail address removed)
http://ladava.com

 

[chai]

Hi Matjaz,

How about if 2 DC sharing with 8 subnets?

The PCs is under same subnet as the DC is then no problems
but how about the PCs is under different subnets? How do
they know which subnet is nearest?

For example, my DCs is in 10.10.1.0/24 subnet and
10.10.3.0/24 subnet. And I got others subnet 10.10.2.0/24,
10.10.4.0/24, 10.10.5.0/24, 10.10.6.0/24, 10.10.7.0/24,
and 10.10.8.0/24?

Thanks

 

[Matjaz Ladava [MVP]]

First thing to know is, how this subnets and sites are organized. If there
are WAN links between subnets, then you will create a site for each remote
location and add apropriate subnet object to that site. If there are no DC's
in a site, then the client must determine which DC to contact remotely. To
get the best info on this process, please read info in Windows 2000 Server
resource kit.
http://www.microsoft.com/windows2000/techinfo/reskit/en-us/distrib/dsbc_nar_jevl.asp

--
Regards

Matjaz Ladava, MCSE, MCSA, MVP
Microsoft MVP - Active Directory
(e-mail address removed), (e-mail address removed)
http://ladava.com