Solved

Choose Logon server using powershell or another

Posted on 2014-11-14
9
410 Views
Last Modified: 2014-12-17
I'm testing site replication in Active Directory. I have two sites and a link.

1. Is there a way to find logon server in powershell instead of all command 'echo %Logonserver%'?

2. How do I redirect Windows Login of clients to a DC in the remote site? Let's say I have a site A and a site 'Branch'. I like to redirect all user logins at Branch to the Site A without disconnecting the DC?
0
Comment
Question by:crcsupport
  • 5
  • 3
9 Comments
 
LVL 68

Accepted Solution

by:
Qlemo earned 300 total points
ID: 40442904
The purpose of additional DCs is to provide faster login/authentication. So why would you want to use the remote one  only?
0
 
LVL 1

Author Comment

by:crcsupport
ID: 40442906
Yes, for lab purpose, I wonder if there's a way to force that. It could be fun
0
 
LVL 68

Assisted Solution

by:Qlemo
Qlemo earned 300 total points
ID: 40442945
I think there is a setting somewhere for the preferred logon server. Need to do some research ...
0
 
LVL 1

Author Comment

by:crcsupport
ID: 40443195
I  created two SRV records for Kerberos and under Default-First-Site-Name,then I gave priority 0 to the logon server which I like to use for all, and change priority of other logon server to 100. Then, I resign in from clients, it still goes to a logon server with priority 100. I tried to flush dns cache, it doesn't help.
0
[Webinar] Disaster Recovery and Cloud Management

Learn from Unigma and CloudBerry industry veterans which providers are best for certain use cases and how to lower cloud costs, how to grow your Managed Services practice in IaaS clouds, and how to utilize public cloud for Disaster Recovery

 
LVL 1

Author Comment

by:crcsupport
ID: 40443196
0
 
LVL 68

Assisted Solution

by:Qlemo
Qlemo earned 300 total points
ID: 40444410
Not sure whether it does anything different, but try http://technet.microsoft.com/en-us/library/cc974369(v=ws.10).aspx - using ADMT.
0
 
LVL 19

Assisted Solution

by:compdigit44
compdigit44 earned 200 total points
ID: 40445877
Like others have state, changing the weight on the DNS records may be the only way to do this. On a side note, I have read that the echo "%logonserver% shows cached login server information and not the current login server...
0
 
LVL 1

Author Comment

by:crcsupport
ID: 40447916
I spent a couple of hours to try many methods online, but first of all, as Hulabaloo pointed out, %logonserver% seems a static variable showing last successful logon server, not showing the current logon server. I found this after I spent quite of time testing. So, I think I do  the same tests again when I have time suing 'nltest /sc_query:domainname' . I like to keep this post open for a bit longer for reference purpose.
0
 
LVL 1

Author Comment

by:crcsupport
ID: 40500530
As I've tested when there are only two sites, I was not able to redirect the logon unless I shut down the local DC. If there are 3 or more sites, then increasing Site LInk costs will do the trick.

Changing the priority SRV record does also only for local site.
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
A brief introduction to what I consider to be the best editor for PowerShell.
This tutorial will walk an individual through the process of configuring basic necessities in order to use the 2010 version of Data Protection Manager. These include storage, agents, and protection jobs. Launch Data Protection Manager from the deskt…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now