You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Updated the article to reflect the new reviewer's name and changed the publication date. Revised sections for clarity and consistency in terminology regarding domain controller locator DNS records.
Copy file name to clipboardExpand all lines: support/windows-server/active-directory/optimize-dc-location-global-catalog.md
+26-26Lines changed: 26 additions & 26 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,11 +1,11 @@
1
1
---
2
2
title: Optimize domain controller location
3
3
description: Explains how to optimize the location of a domain controller or global catalog that resides outside of a client's site. Provides steps for Windows 2000 and Windows Server 2003.
4
-
ms.date: 06/18/2025
4
+
ms.date: 11/14/2025
5
5
manager: dcscontentpm
6
6
audience: itpro
7
7
ms.topic: troubleshooting
8
-
ms.reviewer: kaushika
8
+
ms.reviewer: kaushika, herbertm
9
9
ms.custom:
10
10
- sap:active directory\active directory replication and topology
11
11
- pcy:WinComm Directory Services
@@ -17,17 +17,19 @@ appliesto:
17
17
This article provides the steps to optimize the location of a domain controller or global catalog that resides outside of a client's site.
18
18
19
19
_Original KB number:_ 306602
20
-
_Applies to:_ All supported versions of Windows Server
21
20
22
21
## Summary
23
22
24
-
The domain controller locator mechanism in Windows 2000 always prefers a domain controller that resides in the site of the client that is searching for a domain controller. This is achieved by a domain controller that registers site-specific domain controller locator DNS SRV resource records for the site in which the domain controller resides.
23
+
The domain controller locator mechanism in Windows always prefers a domain controller that resides in the site of the client that is searching for a domain controller. This is achieved by a domain controller that registers site-specific domain controller locator DNS SRV resource records for the site in which the domain controller resides.
25
24
26
25
Additionally, a domain controller may register site-specific domain controller locator DNS SRV resource records for any other sites that do not contain a domain controller in the same role to which the site of the domain controller is the closest. Such roles include a role that hosts the same domain, or that is a global catalog). This mechanism ensures that clients will locate the nearest domain controller in cases in which no domain controller is located in the client's site.
27
26
28
-
For more information about this mechanism, refer to the Windows 2000 Server Resource Kit, "Distributed Systems Guide" book, Chapter 3: "Name Resolution in Active Directory."
27
+
In a case in which all the domain controllers in the same role (that is, that are hosting the same domain or are being global catalogs) in a particular site become unavailable, clients that are located in the same site will fail over to:
28
+
- The Next Closest Site if configured to be used. A client needs to successfully contact a DC indicated the next closest site.
29
+
- A DC registered in the list of Site-Less records.
29
30
30
-
In a case in which all the domain controllers in the same role (that is, that are hosting the same domain or are being global catalogs) in a particular site become unavailable, clients that are located in the same site will fail over to any other domain controller in any other site without optimization.
31
+
By default all writable DCs register records for the site-less names, so a client may try DCs that are slow to respond as they are in a remote network, or they are not reachable at all due to routing restrictions. So it makes sense to have only DCs in the site-less DNS records that are well-connected to your network and are well-monitored, so they have good up-time.
32
+
Read-Only DCs only register site-specific DNS records by default in the site they are located in. They do not automatically cover other sites.
31
33
32
34
## More information
33
35
@@ -45,14 +47,9 @@ It is preferable that if all domain controllers and global catalogs in a satelli
45
47
46
48
To achieve this behavior, the domain controllers and global catalogs in the satellite offices should not register generic (non-site-specific) domain controller locator DNS records. These records are registered only by the domain controllers and global catalogs in the central hub. When clients cannot locate the domain controllers and global catalogs that serve their site, they try to locate any domain controllers or global catalogs by using these generic (non-site-specific) domain controller locator DNS records.
47
49
48
-
The following records should not be registered by the domain controllers or global catalogs in the satellite sites:
50
+
### To configure domain controllers or global catalogs not to register site-less records
49
51
50
-
- Windows Server 2003-based domain controllers
51
-
- Windows 2000-based domain controllers with Service Pack 2 (SP2) or later installed, or with the hotfix that is specified in Knowledge Base article 267855
52
-
53
-
### To configure domain controllers or global catalogs not to register generic records
54
-
55
-
#### Windows 2000
52
+
#### Manual Configuration using Registry Editor
56
53
57
54
1. Start Registry Editor (Regedt32.exe).
58
55
2. Locate and then click the following registry subkey: `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters`
@@ -66,9 +63,9 @@ The following records should not be registered by the domain controllers or glob
66
63
67
64
4. Exit Registry Editor.
68
65
69
-
#### Windows Server 2003
66
+
#### Administrative Templates Group Policy
70
67
71
-
To configure Windows Server 2003-based domain controllers, use the "DC locator DNS records not registered by the DCs" Net Logon service group policy. To do this, specify the list of the space-delimited mnemonics that are specified in the "Reference tables" section.
68
+
Use the "DC locator DNS records not registered by the DCs" Net Logon service group policy. To do this, specify the list of the space-delimited mnemonics that are specified in the "Reference tables" section.
72
69
73
70
#### Reference tables
74
71
@@ -96,8 +93,6 @@ Global catalog-specific records
96
93
|GcIpAddress|A|gc._msdcs.\<DnsForestName>|
97
94
|GenericGc|SRV|_gc._tcp.\<DnsForestName>|
98
95
99
-
For the complete list of the domain controller locator DNS records, see the Windows 2000 Server Resource Kit, "Distributed Systems Guide" book, Chapter 3: "Name Resolution in Active Directory." For the complete list of the domain controller locator DNS records, refer to KB article Q267855 that is referenced in this article.
100
-
101
96
### Section II: Other topologies
102
97
103
98
If the failover to the central hubs when local domain controllers and global catalogs become unavailable does not satisfy your requirements, you can use the following configuration.
@@ -109,7 +104,7 @@ If the clients (such as servers that run Microsoft Exchange Servers) in site A f
109
104
110
105
### To configure a domain controller to register site-specific records for a different site
111
106
112
-
#### Windows 2000
107
+
#### Manual Configuration using Registry Editor
113
108
114
109
1. Start Registry Editor (Regedt32.exe).
115
110
2. Locate and then click the following registry subkey: `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters`
@@ -123,13 +118,13 @@ If the clients (such as servers that run Microsoft Exchange Servers) in site A f
123
118
124
119
4. Exit Registry Editor.
125
120
126
-
#### Windows Server 2003
121
+
#### Administrative Templates Group Policy
127
122
128
-
To configure Windows Server 2003-based domain controllers, use the "Sites Covered by the domain controller locator DNS SRV Records" Net Logon service group policy. To do this, specify the list of the space-delimited site names for which the domain controller should register.
123
+
Use the "Sites Covered by the domain controller locator DNS SRV Records" Net Logon service group policy. To do this, specify the list of the space-delimited site names for which the domain controller should register.
129
124
130
125
### To configure a Global Catalog to register site-specific records for a different site
131
126
132
-
#### Windows 2000
127
+
#### Manual Configuration using Registry Editor
133
128
134
129
1. Start Registry Editor (Regedt32.exe).
135
130
2. Locate and then click the following registry subkey: `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters`
@@ -143,13 +138,13 @@ To configure Windows Server 2003-based domain controllers, use the "Sites Covere
143
138
144
139
4. Exit Registry Editor.
145
140
146
-
#### Windows Server 2003
141
+
#### Administrative Templates Group Policy
147
142
148
-
Use the "Sites Covered by the global catalog locator DNS SRV Records" Net Logon service Group Policy by specifying the list of the carriage return-delineated site names for which the global catalog should register.
143
+
Use the "Specify sites covered by the GC Locator DNS SRV Records" Net Logon service Group Policy by specifying the list of the carriage return-delineated site names for which the global catalog should register.
149
144
150
145
### To Configure a domain controller to Register SRV Records with Particular Priority
151
146
152
-
#### Windows 2000
147
+
#### Manual Configuration using Registry Editor
153
148
154
149
1. Start Registry Editor (Regedt32.exe).
155
150
2. Locate and then click the following registry subkey: `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters`
@@ -163,6 +158,11 @@ Use the "Sites Covered by the global catalog locator DNS SRV Records" Net Logon
163
158
164
159
4. Exit Registry Editor.
165
160
166
-
#### Windows Server 2003
161
+
#### Administrative Templates Group Policy
162
+
163
+
Use the "Priority Set in the domain controller locator DNS SRV Records" Net Logon service Group Policy.
167
164
168
-
To configure Windows Server 2003-based domain controllers, use the "Priority Set in the domain controller locator DNS SRV Records" Net Logon service Group Policy.
165
+
### References
166
+
-[Locating Active Directory domain controllers in Windows and Windows Server](/windows-server/identity/ad-ds/manage/dc-locator?tabs=dns-based-discovery).
167
+
-[Problems occur with DCs in AD integrated DNS zones](/windows-server/active-directory/problems-with-dc-ad-integrated-dns-zones).
168
+
-[Enabling Clients to Locate the Next Closest Domain Controller](/windows-server/identity/ad-ds/plan/enabling-clients-to-locate-the-next-closest-domain-controller).
0 commit comments