Announcement

Collapse
No announcement yet.

AD authentication with other DC's in different timezones

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • AD authentication with other DC's in different timezones

    How does AD authentication work with a scenario where you have a backup DC at a site in another time zone? I have a few sites with one DC, so if that DC fails they can authenticate with another in my infrastructure, but they are all in different time zones. How does this scenario work with domain time sync.

  • #2
    Re: AD authentication with other DC's in different timezones

    Absolutely no problem -- the DCs correct local to UTC and as long as that is within the allowed clock skew, they will sync.
    Tom Jones
    MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
    PhD, MSc, FIAP, MIITT
    IT Trainer / Consultant
    Ossian Ltd
    Scotland

    ** Remember to give credit where credit is due and leave reputation points where appropriate **

    Comment


    • #3
      Re: AD authentication with other DC's in different timezones

      So if I have a site in the UK and one in the US, it works just fine when PCs in the UK need to use the US DC to authenticate.

      Comment


      • #4
        Re: AD authentication with other DC's in different timezones

        Correct!
        Otherwise how would multinationals operate?
        Tom Jones
        MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
        PhD, MSc, FIAP, MIITT
        IT Trainer / Consultant
        Ossian Ltd
        Scotland

        ** Remember to give credit where credit is due and leave reputation points where appropriate **

        Comment


        • #5
          Re: AD authentication with other DC's in different timezones

          I agree, I have just never been a part of until recently. I thought there was always something special that had to be done.

          Comment


          • #6
            Re: AD authentication with other DC's in different timezones

            Back on time again. If I have one logon script for my domain for users, including ones in a different time zone, and I use the net time command in my bat, but that value is a server not in their time zone, will this mess their PC's and servers up?

            Comment


            • #7
              Re: AD authentication with other DC's in different timezones

              No, it should not cause any problems -- as said already the DC will do everything in UTC and local "corrections" will apply
              Does this help?
              http://www.office-outlook.com/outloo...11/#msg_492011
              Tom Jones
              MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
              PhD, MSc, FIAP, MIITT
              IT Trainer / Consultant
              Ossian Ltd
              Scotland

              ** Remember to give credit where credit is due and leave reputation points where appropriate **

              Comment


              • #8
                Re: AD authentication with other DC's in different timezones

                Ahhhh Perfect! great example in that link! Thanks.

                Comment


                • #9
                  Re: AD authentication with other DC's in different timezones

                  In the logon script you could always just use this

                  net time %logonserver% /set /y

                  Comment

                  Working...
                  X