Identify logonserver for all computer accounts in AD

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

We have a domain with computer objects from different major US cities
populating AD. Is there a way to obtain some type of list for all computers
(or within a specific OU) and the logonserver they authenticate with? The DC
will tell me which city that the computer object belongs to and I can move
it to the proper OU. Thank you.

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Assuming your subnet topology is configured correctly you could query AD with a
list of the IP addresses of the machine and it will tell you what AD site the
IPs are for and then you can look at the site to determine which DCs would be
used but actually once you know the Site you should be good, again assuming that
is all configured properly. If it isn't configured properly, the DC would be a
random DC anyway.

To help with the IP to site conversion check out:

http://www.joeware.net/win/free/tools/atsn.htm


--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net


ekk wrote:
> We have a domain with computer objects from different major US cities
> populating AD. Is there a way to obtain some type of list for all computers
> (or within a specific OU) and the logonserver they authenticate with? The DC
> will tell me which city that the computer object belongs to and I can move
> it to the proper OU. Thank you.
>
>

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

So basically if your subnets are differentiated and you have dynamic DNS
registration working, you should be able to figure out which one goes where
from your DNS list.

Now, if you have everyone in the same subnet, this is either because you
have very fast WAN links and want everyone to be in the same site, or
because of non-IT related reasons. In this case, you may well be in some
trouble, and won't be able to assign logon servers anyway.

--
Ryan Hanisco
MCSE, MCDBA
FlagShip Integration Services
Chicago, IL

"Joe Richards [MVP]" <humorexpress@hotmail.com> wrote in message
news:OBOn89nUFHA.3620@TK2MSFTNGP09.phx.gbl...
> Assuming your subnet topology is configured correctly you could query AD
> with a list of the IP addresses of the machine and it will tell you what
> AD site the IPs are for and then you can look at the site to determine
> which DCs would be used but actually once you know the Site you should be
> good, again assuming that is all configured properly. If it isn't
> configured properly, the DC would be a random DC anyway.
>
> To help with the IP to site conversion check out:
>
> http://www.joeware.net/win/free/tools/atsn.htm
>
>
> --
> Joe Richards Microsoft MVP Windows Server Directory Services
> www.joeware.net
>
>
> ekk wrote:
>> We have a domain with computer objects from different major US cities
>> populating AD. Is there a way to obtain some type of list for all
>> computers (or within a specific OU) and the logonserver they authenticate
>> with? The DC will tell me which city that the computer object belongs to
>> and I can move it to the proper OU. Thank you.

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

It doesn't actually require dynamic DNS, it just requires that the DC SRV
records that are supposed to be registered, actually are. This can be done
statically but it is terribly messy to maintain.

Basically there is a DC locater capability built into the environment and you
are simply using it to find the site that a client would try to use. Each DC
covering a specific site will have a list of DNS records it wants registered for
that site. If the dynamic reg is working it will be registered. If static reg is
being used youwould need to read the DNS files on the server
(c:\%windir%\system32\config\netlogon.dns) and make sure those records were
registered.

ATSN calls the function DsAddressToSiteNames to query a DC to have it tell you
which specific sites are mapped to the specific subnets. This is nice to use
because it uses the exact same logic used by a client for locating what site it
is in so it works with subdividing of subnets that people do (for instance
someone may register an 8 bit subnet for the entire org to point at a hub site
and then further break down portions of that subnet into smaller subnets and
point them to other sites, that way you never have subnets that aren't defined
so you don't get the random DC location you can get with random subnets).

joe

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net


Ryan Hanisco wrote:
> So basically if your subnets are differentiated and you have dynamic DNS
> registration working, you should be able to figure out which one goes where
> from your DNS list.
>
> Now, if you have everyone in the same subnet, this is either because you
> have very fast WAN links and want everyone to be in the same site, or
> because of non-IT related reasons. In this case, you may well be in some
> trouble, and won't be able to assign logon servers anyway.
>