Active Directory Authentication

Hey everyone
Hopefully this is an easy question, and hopefully somone can give me a simple straight answer

I got 2 sites in active directory, site A and site B.

They are connected to each other using a 256K WAN link

the domain is arranged A.com and B.A.com

I am wondering, how do i force clients to authenticate to their local domains?

Cheers :-)
LVL 1
undysheltsAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

chaddupuisCommented:
Make sure that each domain controller is a global catalogue server. That should force the client to authenticate at the closest domain controller
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Justin CAWS Solutions ArchitectCommented:
If you have two domains, users authenticate to the domain their account is a part of.  If you've got one domain with two AD sites, users should authenticate to the DC in their own site first unless it is unavailable.  
0
Casca1Commented:
Depending on the GC, of course. In order to insure your clients authenticate to the local server, a DC at each site must be configured as a GC server.
0
Cloud Class® Course: MCSA MCSE Windows Server 2012

This course teaches how to install and configure Windows Server 2012 R2.  It is the first step on your path to becoming a Microsoft Certified Solutions Expert (MCSE).

chaddupuisCommented:
to add, if a DC is not configured as a global catalogue, it will not authenticate clients at all . (PERIOD)
0
Casca1Commented:
You know, there is one thing we haven't asked about. DNS. It shouldn't be an issue, as this seems to be a straight authentication question/issue.
And while it is a little late, is there any reason for the two seperate Domains?
Just curiosity, and I realize it's really not any of my business, but with that type of setup, a single domain, with seperate sites COULD have worked, depending of course on the needs of the business.
0
chaddupuisCommented:
If he has his domains setup this way then DNS is functioning. Also you should make sure that when you login that you specify username@b for b.a.com and username@a for a.com. This should guarantee that you are at least login into the correct domain. Now to make sure that the DC at the local site is processing the authentication request (and not a DC for the same domain at another site) you need to make sure that you have all your sites (in active directory Sites and Services) configured correctly and most importantly, like I alreadymentioned, you must have that DC specified as a globla catalogue server.
0
undysheltsAuthor Commented:
thanks chaddupuis... I asked for a simple answer and u were right on the ball.. thank you..
You didn't overwhelm me with Active Directory jargon (which is shocking because i've only stated learning AD)..

Thanks again! :-)
0
chaddupuisCommented:
Not a Problem, how did it go by the way?
0
undysheltsAuthor Commented:
Yeah...
the question was actually for an assignment i had (going towards my qualification).
I ended up understanding how it all works and i got a very good mark for the assignment.. thanks...
0
chaddupuisCommented:
No Problem.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 2000

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.