cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

1832
Views
0
Helpful
2
Replies
larsen_2011
Beginner

force acs v.5 to join domain with a certain Domain Controller

    Hi everybody,

I try to join an ACS v. 5.3 to the domain.  For my acs in Location A, I can join without problems using my account. When I try to join the ACS in location B to the same domain with the same account, it doesnt work.

I looked at the debug log files for the ad client, and noticed, that the ACS in location B goes to a certain Domain Controller. However, I would have expected the ACS to contact another DC, which is located on  the same location as the ACS ... this doesnt happen.

My question:  How does the ACS determine what DC to contact ? Is it possible to force the AC to join by connecting a certain DC ?

Thanks for any help or ideas ?!?

Ida              

1 ACCEPTED SOLUTION

Accepted Solutions
Tarik Admani
Advocate

Hi,

Please check your sites and services in your DNS configuration to see if the right Domain controllers are being sent to the ACS when it attempts to connect to the domain. This feature is critical and will optimize the connections that the ACS chooses in order to join the domain.

The way this works is that ACS attempts to resolve some dns records for global catalog servers and domain controllers to the dns server configured in the initial installation script. Then the dns makes a decision based on the source ip address of the dns query and thinks that the ACS is at a specific site and returns the result of which DCs and GCs are configured in that specific site.

let me know if that helps.

Tarik Admani
*Please rate helpful posts*

View solution in original post

2 REPLIES 2
Tarik Admani
Advocate

Hi,

Please check your sites and services in your DNS configuration to see if the right Domain controllers are being sent to the ACS when it attempts to connect to the domain. This feature is critical and will optimize the connections that the ACS chooses in order to join the domain.

The way this works is that ACS attempts to resolve some dns records for global catalog servers and domain controllers to the dns server configured in the initial installation script. Then the dns makes a decision based on the source ip address of the dns query and thinks that the ACS is at a specific site and returns the result of which DCs and GCs are configured in that specific site.

let me know if that helps.

Tarik Admani
*Please rate helpful posts*

View solution in original post

wow Tarik,

you are really the best.

I checked the dns server, and saw that using nslookup to the domain name gave a somewhat funny response. Then I changed the dns server to the one we use in the location where the connection worked - and then I could connect to the domain.

Thanks a lot!

Content for Community-Ad