Solved

Domain controller on seperate site

Posted on 2013-02-04
3
231 Views
Last Modified: 2013-02-04
I have one main network with 3DC's and another remote site with one DC (all part of the one AD). I have recently merged with another company and have a trust in place. They will be accessing resources off my network. When they logon and authenticate on my network for some reason they are being sent to the remote site DC as oppose to the main network DC's. I understand sites and services is the place to go (I think?) I have never set up this before but from my recollection I specify the IP ranges to be associated with the specific servers?
0
Comment
Question by:Sid_F
3 Comments
 
LVL 29

Accepted Solution

by:
Rich Weissler earned 250 total points
Comment Utility
You'll want to associate specific SUBNETS to SITES.

In Sites and Services, drill down under Sites, then Subnets... and define subnets, and within the subnet, specify which site it is in.

(The domain controllers will use that information to determine which site they are in, so presumably the remote site subnets have already been defined.)
0
 
LVL 33

Assisted Solution

by:paulmacd
paulmacd earned 250 total points
Comment Utility
In ADS&S you can set a "cost" on the various links between subnets.  Set a higher cost on the link to the standalone DC and a lower cost on the link to the main network.  That should resolve your issue.
0
 
LVL 5

Author Closing Comment

by:Sid_F
Comment Utility
thanks
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

As network administrators; we know how hard it is to track user’s login/logout using security event log (BTW it is harder now in windows 2008 because user name is always “N/A” in the grid), and most of us either get 3rd party tools, or just make our…
Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

6 Experts available now in Live!

Get 1:1 Help Now