• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 144
  • Last Modified:

Specify login server for Win2000pro clients in 2000 Native domain

Is there a way to use Group Policy to specify that PC's (and associated user logging in) login to a specific domain controller? I want to apply it to the PC's in Active directory, so I planned on using the Computer Configuration area in GP. I just haven't been able to find a way to specify it. I am trying to balance the logon load among DC's in a single domain AD environment with one site and 3 DC's.
0
jefmik
Asked:
jefmik
  • 4
  • 4
1 Solution
 
Carlo-GiulianiCommented:
Normally, you should not need to worry about this.  The load on your DCs should be fairly even.  However, if you find that one DC is heavily loaded (this is often called "piling on") have a look to see of one of the following scenarios applies to you:  http://support.microsoft.com/default.aspx?scid=kb;en-us;305027
0
 
jefmikAuthor Commented:
None of those scenarios apply to my situation. I reviewed that and my logs, etc. prior to submitting my question.
I have a Domain controller policy in force to set the log size and what info is captured. Besides physically watching PC's connect to one more frequently, the Security log files are growing in a disproprtionate fashion. The DC in question is not a FSMO role holder or a GCS either.
0
 
Carlo-GiulianiCommented:
0
Upgrade your Question Security!

Add Premium security features to your question to ensure its privacy or anonymity. Learn more about your ability to control Question Security today.

 
jefmikAuthor Commented:
Yes, it is using round robin and netmask ordering, which is enabled by default on the 2000 DNS servers. However, I don't have any multi-homed Servers or clients which it seems this is intended to address. I would disable these but I don't see how that would impact this scenario. Is it accurate to say I cannot force clients to a specific logon server using AD & GP?
0
 
Carlo-GiulianiCommented:
Netmask and round-robin are mutually exclusive.   For round-robin to work, you must deactivate netmask ordering.  This is described in in http://support.microsoft.com/kb/177883/EN-US/

To be honest, I am not certain that round-robin is the normal mechanism for load balancing of DCs in a single site, but it seems likely.  

There may be a way to assign a specific DC using GP, but GP is not meant to be used this way.   The mechanism that *should* be used to direct clients to specific DCs is AD sites.  Normally, AD sites are used for phycially seperate sites, but you could divide your local network into two (or more) logical subnets, define these as different sites in AD, and put one domain contoller and some clients computers in each site.    This can be done without actually seperating your LAN into routed subnets....the subnets would only need be defined in AD.  However, you might have to change IP addresses on your DCs and/or workstations to be able to divide the up appropriately.  It would be a rather messy solution.

One more question:  is the DC that is heavily loaded your Global Catalog?  Maybe your only GC?  In a single-domain, single-site forest, you shoud make all of your DC into GCs.



0
 
jefmikAuthor Commented:
Only one GC and that isn't it. I see what you mean about the sites. Too messy, think I'll just monitor it closely and wait until I our next DC promotion/demotion to address. Thanks.
0
 
Carlo-GiulianiCommented:
But you have netmask enabled?   Have you tried disabling netmask to see if the round-robin goes into effect?

To verify if round-robin is working:
- IPCONFIG /FLUSHDNS (to flush local client cache)
- NSLOOKUP YOUR.DOMAIN.NAME  (you should get the IP addresses of your 3 DCs)
Repeat this several times....you should get the 3 addresses in different orders.
0
 
jefmikAuthor Commented:
OK, I see it is yet another gliche in MS default setup. I unchecked netmask and it reacts as you indicated is should.
Thanks!
0

Featured Post

How to Use the Help Bell

Need to boost the visibility of your question for solutions? Use the Experts Exchange Help Bell to confirm priority levels and contact subject-matter experts for question attention.  Check out this how-to article for more information.

  • 4
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now