Skip to content

Commit ac27358

Browse files
Merge pull request #10186 from MicrosoftDocs/kaushika-msft-patch-7
AB#8203: Update optimize-dc-location-global-catalog.md
2 parents 0d29a68 + da007ed commit ac27358

File tree

1 file changed

+26
-26
lines changed

1 file changed

+26
-26
lines changed

support/windows-server/active-directory/optimize-dc-location-global-catalog.md

Lines changed: 26 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
---
22
title: Optimize domain controller location
33
description: Explains how to optimize the location of a domain controller or global catalog that resides outside of a client's site. Provides steps for Windows 2000 and Windows Server 2003.
4-
ms.date: 06/18/2025
4+
ms.date: 11/14/2025
55
manager: dcscontentpm
66
audience: itpro
77
ms.topic: troubleshooting
8-
ms.reviewer: kaushika
8+
ms.reviewer: kaushika, herbertm
99
ms.custom:
1010
- sap:active directory\active directory replication and topology
1111
- pcy:WinComm Directory Services
@@ -17,17 +17,19 @@ appliesto:
1717
This article provides the steps to optimize the location of a domain controller or global catalog that resides outside of a client's site.
1818

1919
_Original KB number:_   306602
20-
_Applies to:_   All supported versions of Windows Server
2120

2221
## Summary
2322

24-
The domain controller locator mechanism in Windows 2000 always prefers a domain controller that resides in the site of the client that is searching for a domain controller. This is achieved by a domain controller that registers site-specific domain controller locator DNS SRV resource records for the site in which the domain controller resides.
23+
The domain controller locator mechanism in Windows always prefers a domain controller that resides in the site of the client that is searching for a domain controller. This is achieved by a domain controller that registers site-specific domain controller locator DNS SRV resource records for the site in which the domain controller resides.
2524

2625
Additionally, a domain controller may register site-specific domain controller locator DNS SRV resource records for any other sites that do not contain a domain controller in the same role to which the site of the domain controller is the closest. Such roles include a role that hosts the same domain, or that is a global catalog). This mechanism ensures that clients will locate the nearest domain controller in cases in which no domain controller is located in the client's site.
2726

28-
For more information about this mechanism, refer to the Windows 2000 Server Resource Kit, "Distributed Systems Guide" book, Chapter 3: "Name Resolution in Active Directory."
27+
In a case in which all the domain controllers in the same role (that is, that are hosting the same domain or are being global catalogs) in a particular site become unavailable, clients that are located in the same site will fail over to:
28+
- The Next Closest Site if configured to be used. A client needs to successfully contact a DC indicated the next closest site.
29+
- A DC registered in the list of Site-Less records.
2930

30-
In a case in which all the domain controllers in the same role (that is, that are hosting the same domain or are being global catalogs) in a particular site become unavailable, clients that are located in the same site will fail over to any other domain controller in any other site without optimization.
31+
By default all writable DCs register records for the site-less names, so a client may try DCs that are slow to respond as they are in a remote network, or they are not reachable at all due to routing restrictions. So it makes sense to have only DCs in the site-less DNS records that are well-connected to your network and are well-monitored, so they have good up-time.
32+
Read-Only DCs only register site-specific DNS records by default in the site they are located in. They do not automatically cover other sites.
3133

3234
## More information
3335

@@ -45,14 +47,9 @@ It is preferable that if all domain controllers and global catalogs in a satelli
4547

4648
To achieve this behavior, the domain controllers and global catalogs in the satellite offices should not register generic (non-site-specific) domain controller locator DNS records. These records are registered only by the domain controllers and global catalogs in the central hub. When clients cannot locate the domain controllers and global catalogs that serve their site, they try to locate any domain controllers or global catalogs by using these generic (non-site-specific) domain controller locator DNS records.
4749

48-
The following records should not be registered by the domain controllers or global catalogs in the satellite sites:
50+
### To configure domain controllers or global catalogs not to register site-less records
4951

50-
- Windows Server 2003-based domain controllers
51-
- Windows 2000-based domain controllers with Service Pack 2 (SP2) or later installed, or with the hotfix that is specified in Knowledge Base article 267855
52-
53-
### To configure domain controllers or global catalogs not to register generic records
54-
55-
#### Windows 2000
52+
#### Manual Configuration using Registry Editor
5653

5754
1. Start Registry Editor (Regedt32.exe).
5855
2. Locate and then click the following registry subkey: `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters`
@@ -66,9 +63,9 @@ The following records should not be registered by the domain controllers or glob
6663

6764
4. Exit Registry Editor.
6865

69-
#### Windows Server 2003
66+
#### Administrative Templates Group Policy
7067

71-
To configure Windows Server 2003-based domain controllers, use the "DC locator DNS records not registered by the DCs" Net Logon service group policy. To do this, specify the list of the space-delimited mnemonics that are specified in the "Reference tables" section.
68+
Use the "DC locator DNS records not registered by the DCs" Net Logon service group policy. To do this, specify the list of the space-delimited mnemonics that are specified in the "Reference tables" section.
7269

7370
#### Reference tables
7471

@@ -96,8 +93,6 @@ Global catalog-specific records
9693
|GcIpAddress|A|gc._msdcs.\<DnsForestName>|
9794
|GenericGc|SRV|_gc._tcp.\<DnsForestName>|
9895

99-
For the complete list of the domain controller locator DNS records, see the Windows 2000 Server Resource Kit, "Distributed Systems Guide" book, Chapter 3: "Name Resolution in Active Directory." For the complete list of the domain controller locator DNS records, refer to KB article Q267855 that is referenced in this article.
100-
10196
### Section II: Other topologies
10297

10398
If the failover to the central hubs when local domain controllers and global catalogs become unavailable does not satisfy your requirements, you can use the following configuration.
@@ -109,7 +104,7 @@ If the clients (such as servers that run Microsoft Exchange Servers) in site A f
109104
110105
### To configure a domain controller to register site-specific records for a different site
111106

112-
#### Windows 2000
107+
#### Manual Configuration using Registry Editor
113108

114109
1. Start Registry Editor (Regedt32.exe).
115110
2. Locate and then click the following registry subkey: `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters`
@@ -123,13 +118,13 @@ If the clients (such as servers that run Microsoft Exchange Servers) in site A f
123118

124119
4. Exit Registry Editor.
125120

126-
#### Windows Server 2003
121+
#### Administrative Templates Group Policy
127122

128-
To configure Windows Server 2003-based domain controllers, use the "Sites Covered by the domain controller locator DNS SRV Records" Net Logon service group policy. To do this, specify the list of the space-delimited site names for which the domain controller should register.
123+
Use the "Sites Covered by the domain controller locator DNS SRV Records" Net Logon service group policy. To do this, specify the list of the space-delimited site names for which the domain controller should register.
129124

130125
### To configure a Global Catalog to register site-specific records for a different site
131126

132-
#### Windows 2000
127+
#### Manual Configuration using Registry Editor
133128

134129
1. Start Registry Editor (Regedt32.exe).
135130
2. Locate and then click the following registry subkey: `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters`
@@ -143,13 +138,13 @@ To configure Windows Server 2003-based domain controllers, use the "Sites Covere
143138

144139
4. Exit Registry Editor.
145140

146-
#### Windows Server 2003
141+
#### Administrative Templates Group Policy
147142

148-
Use the "Sites Covered by the global catalog locator DNS SRV Records" Net Logon service Group Policy by specifying the list of the carriage return-delineated site names for which the global catalog should register.
143+
Use the "Specify sites covered by the GC Locator DNS SRV Records" Net Logon service Group Policy by specifying the list of the carriage return-delineated site names for which the global catalog should register.
149144

150145
### To Configure a domain controller to Register SRV Records with Particular Priority
151146

152-
#### Windows 2000
147+
#### Manual Configuration using Registry Editor
153148

154149
1. Start Registry Editor (Regedt32.exe).
155150
2. Locate and then click the following registry subkey: `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters`
@@ -163,6 +158,11 @@ Use the "Sites Covered by the global catalog locator DNS SRV Records" Net Logon
163158

164159
4. Exit Registry Editor.
165160

166-
#### Windows Server 2003
161+
#### Administrative Templates Group Policy
162+
163+
Use the "Priority Set in the domain controller locator DNS SRV Records" Net Logon service Group Policy.
167164

168-
To configure Windows Server 2003-based domain controllers, use the "Priority Set in the domain controller locator DNS SRV Records" Net Logon service Group Policy.
165+
### References
166+
- [Locating Active Directory domain controllers in Windows and Windows Server](/windows-server/identity/ad-ds/manage/dc-locator?tabs=dns-based-discovery).
167+
- [Problems occur with DCs in AD integrated DNS zones](/windows-server/active-directory/problems-with-dc-ad-integrated-dns-zones).
168+
- [Enabling Clients to Locate the Next Closest Domain Controller](/windows-server/identity/ad-ds/plan/enabling-clients-to-locate-the-next-closest-domain-controller).

0 commit comments

Comments
 (0)