| Author | Messages | |
jw1
Posts:0
 | | 10/08/2007 4:44 AM |
| We still have a large number of users running logon scripts in the \NETLOGON share - and a few of them are seeing some long delays in running those scripts after we brought up a distant site with two DCs. Does NETLOGON obey any closest-DC or AD Site definitions? If not, is there any way to try to
shape what DC they will map from?
--James
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx | | | |
| austin
Posts:33
| | 10/09/2007 4:10 AM |
| James you need to see this post by Jorge about the DC
Locator process. It’s a 3 part article. Please try and read all 3
parts.
The DC that authenticates a user is not necessarily the same DC
it’ll run it’s logon scripts from.
Regards,
Austin
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Bart Van den
Wyngaert
Sent: 09 October 2007 05:49
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] NETLOGON share + logon scripts
Site definitions?
If not mistaken, the NETLOGON of the DC that authenticates
is used. Check which DC the users with long delays are using, my guess is the
remote DC's. If you define sites properly, they will logon to the local DC and
use the local NETLOGON.
Cheers
On 10/8/07, Wells, James Arthur
wrote:
We still have a large number of users running logon scripts
in the \NETLOGON share - and a few of them are seeing some long delays in
running those scripts after we brought up a distant site with two
DCs.Does NETLOGON obey any closest-DC or AD Site definitions?If
not, is there any way to try to
shape what DC they will map from?
--James
List info : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
This message may contain confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. If verification is required please request a digitally signed version. | | | |
| Marty1_0
Posts:89
| | 10/09/2007 5:10 AM |
| But itdoesuse a DC in the same siteas the authenticating DC to run logon scripts from?
On 10/9/07, Austin Osuide wrote:
James you need to see this post by Jorge about the
DC Locator process. It's a 3 part article. Please try and read all 3 parts.
The DC that authenticates a user is not necessarily the same DC it'll run it's logon scripts from.
Regards,
Austin
From:
ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
Bart Van den WyngaertSent: 09 October 2007 05:49To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] NETLOGON share + logon scripts
Site definitions?
If not mistaken, the NETLOGON of the DC that authenticates is used. Check which DC the users with long delays are using, my guess is the remote DC's. If you define sites properly, they will logon to the local DC and use the local NETLOGON.
Cheers
On 10/8/07, Wells, James Arthur wrote:
We still have a large number of users running logon scripts in the \NETLOGON share - and a few of them are seeing some long delays in running those scripts after we brought up a distant site with two DCs.Does NETLOGON obey any closest-DC or AD Site definitions?If not, is there any way to try to
shape what DC they will map from?--JamesList info : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspxList archive:
http://www.activedir.org/ma/default.aspx
This message may contain confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail.
Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses.
The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. If verification is required please request a digitally signed version. | | | |
| austin
Posts:33
| | 10/09/2007 5:46 AM |
| v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
Not necessarily!
That’s why I said to read all 3 parts of Jorge’s
blog post.
The part you probably missed is this.
It’ll all become “crystal clear” when you read that.
Regards,
Austin
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Bart Van den
Wyngaert
Sent: 09 October 2007 10:11
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] NETLOGON share + logon scripts
But itdoesuse a DC
in the same siteas the authenticating DC to run logon scripts from?
On 10/9/07, Austin Osuide wrote:
James you need to see this post
by Jorge about the DC Locator process. It's a 3 part article. Please try and
read all 3 parts.
The DC that authenticates a
user is not necessarily the same DC it'll run it's logon scripts from.
Regards,
Austin
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org]
On Behalf Of Bart Van den Wyngaert
Sent: 09 October 2007 05:49
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] NETLOGON share + logon scripts
Site definitions?
If not mistaken, the NETLOGON of the DC that authenticates is used. Check
which DC the users with long delays are using, my guess is the remote DC's. If
you define sites properly, they will logon to the local DC and use the local
NETLOGON.
Cheers
On 10/8/07, Wells, James Arthur wrote:
We still have a large number of users running logon scripts in the \NETLOGON
share - and a few of them are seeing some long delays in running those scripts
after we brought up a distant site with two DCs.Does NETLOGON obey
any closest-DC or AD Site definitions?If not, is there any way to
try to
shape what DC they will map from?
--James
List info : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
This message may contain
confidential information and is intended only for the individual named.
If you are not the named addressee you should not disseminate, distribute or
copy this e-mail.
Please notify the sender immediately by e-mail if you have received this e-mail
by mistake and delete this e-mail from your system.
E-mail transmission cannot be guaranteed to be secure or error-free as
information could be intercepted, corrupted, lost, destroyed, arrive late or
incomplete, or contain viruses.
The sender therefore does not accept liability for any errors or omissions in
the contents of this message, which arise as a result of e-mail transmission.
If verification is required please request a digitally signed version.
This message may contain confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. If verification is required please request a digitally signed version. | | | |
| Marty1_0
Posts:89
| | 10/09/2007 6:23 AM |
| Right, by default, it will not stick to the authenticating DC onlyhowever the first list will containDC's in the same site, the second list outside that site.
Which is basically what you would expect. What's interesting on Jorge's page in the 3rd part (andwhat I didn't know)isthat you can link it to the authenticating DC directly and that if authentication happens outside your site (due lack of DC for whatever reason) you can configure to use the referral based upon site link costs.
But before you worry about that, it would seem logical to have site definition in place, not? From the information given by James this doesn't seem the case.
Thanks for claryfingthings Austin!
Cheers
On 10/9/07, Austin Osuide wrote:
Not necessarily!
That's why I said to read all 3 parts of Jorge's blog post.
The part you probably missed is
this. It'll all become "crystal clear" when you read that.
Regards,
Austin
From:
ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
Bart Van den WyngaertSent: 09 October 2007 10:11
To: ActiveDir@mail.activedir.orgSubject:
Re: [ActiveDir] NETLOGON share + logon scripts
But itdoesuse a DC in the same siteas the authenticating DC to run logon scripts from?
On 10/9/07, Austin Osuide wrote:
James you need to see this post by Jorge about the
DC Locator process. It's a 3 part article. Please try and read all 3 parts.
The DC that authenticates a user is not necessarily the same DC it'll run it's logon scripts from.
Regards,
Austin
From:
ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
Bart Van den WyngaertSent: 09 October 2007 05:49To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] NETLOGON share + logon scripts
Site definitions?
If not mistaken, the NETLOGON of the DC that authenticates is used. Check which DC the users with long delays are using, my guess is the remote DC's. If you define sites properly, they will logon to the local DC and use the local NETLOGON.
Cheers
On 10/8/07, Wells, James Arthur wrote:
We still have a large number of users running logon scripts in the \NETLOGON share - and a few of them are seeing some long delays in running those scripts after we brought up a distant site with two DCs.Does NETLOGON obey any closest-DC or AD Site definitions?If not, is there any way to try to
shape what DC they will map from?--JamesList info : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspxList archive:
http://www.activedir.org/ma/default.aspx
This message may contain confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system.
E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission.
If verification is required please request a digitally signed version.
This message may contain confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail.
Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses.
The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. If verification is required please request a digitally signed version. | | | |
| Marty1_0
Posts:89
| | 10/09/2007 12:49 PM |
| Site definitions?
If not mistaken, the NETLOGON of the DC that authenticates is used. Check which DC the users with long delays are using, my guess is the remote DC's. If you define sites properly, they will logon to the local DC and use the local NETLOGON.
Cheers
On 10/8/07, Wells, James Arthur wrote:
We still have a large number of users running logon scripts in the \NETLOGON share - and a few of them are seeing some long delays in running those scripts after we brought up a distant site with two DCs.Does NETLOGON obey any closest-DC or AD Site definitions?If not, is there any way to try to
shape what DC they will map from?--JamesList info : http://www.activedir.org/List.aspxList FAQ:
http://www.activedir.org/ListFAQ.aspxList archive: http://www.activedir.org/ma/default.aspx | | | |
|
|