ICMP and Active directory

[charlie]

I know that clients must be able to ping DC's in its site
to authenicate and recieve group policies. Does anyone
know if clients or DC's from different sites need ping
for anything. I am in an environemnt where it has been
proposed that changes be made in DNS according to
knowledge base 267855. Pretty much one of the things you
can do is make sure if clients dont authenicate to
certain sites if there are no DC's availble in its own
site. Well since icmp to DC's across the wan(also AD
sites) is disabled it seems to me clients really cant
since they cant ping the DC's in other sites. I cant
really find any article on AD's dependance on ICMP
outside of its own site.

 

[Joe Richards [MVP]]

Clients use LDAP UDP pings for logons, not ICMP pings.

 

[Charlie]

Hey Joe,

Thanks for the reply. I should have known that.

 

[Simon Geary]

Group Policy slow link detection uses ICMP pings though.