If, for example, DC1 is the GC and DC2 is just a plain ol' DC, and DC2
happens to be the server that process the logon request, that DC query the
GC for information about your UPN suffix and Universal Group Membership
before authenticating you. If the GC cannot be contacted, or doesn't
respond in a timely manner, you will either logon with cached credentials
(if you've logged on before) or you will not be allowed to logon.
Universal groups can be from any domain, and your UPN might not represent
your actual domain (e.g. (e-mail address removed) even though I'm a member
of it.sales.msresource.net), therefore a GC is queried to reduce cross
domain (and usually site) search/ query traffic. Universal group membership
is needed to build an accurate security token.
Hope this helps,
--
Paul Williams
http://www.msresource.net
http://forums.msresource.net
______________________________________
Hi All,
Assume that I have single site, single domain network. I
have two domain controllers. One is acting as global catlog
server.
In this scenario, what is the login process involved?. What
is the role of global catlog in the login process?.
Regards,
Srinivas Acharya
