Petri IT Knowledgebase Forums
 

Petri.co.il forums Home Forums Start Page Forums Frequently Asked Questions FAQ Member List Members List
Go Back   Petri IT Knowledgebase Forums > Microsoft Networking Services > Active Directory
Reload this Page

AD authentication with other DC's in different timezones

Petri.co.il is happy to award auglan the title of Most Valuable Member !!!
Register Calendar Calendar Search Petri IT Knowledgebase Forums Search Todays Posts Today's Posts Mark Forums Read

Notices

AD authentication with other DC's in different timezones

AD authentication with other DC's in different timezones

this thread has 8 replies and has been viewed 608 times

Closed Thread
 
Thread Tools Search this Thread Display Modes
  #1  
Old 15th September 2012, 16:19
Stevenjwilliams83 Stevenjwilliams83 is offline
Junior Member
It's not a coincidence
  
 Join Date: Jan 2008
  6 month star 12 month star
 Location: Illinois
 Posts: 106
  Send a message via Yahoo to Stevenjwilliams83
 Reputation: Stevenjwilliams83 is on a distinguished road (10)
Default AD authentication with other DC's in different timezones
How does AD authentication work with a scenario where you have a backup DC at a site in another time zone? I have a few sites with one DC, so if that DC fails they can authenticate with another in my infrastructure, but they are all in different time zones. How does this scenario work with domain time sync.
  #2  
Old 15th September 2012, 18:10
Ossian Ossian is offline
Administrator
  
 Join Date: Nov 2003
  6 month star 12 month star
 Location: Bonnie Scotland
 Posts: 15,138
  Send a message via Skype™ to Ossian
 Reputation: Ossian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud of (1300)
Default Re: AD authentication with other DC's in different timezones
Absolutely no problem -- the DCs correct local to UTC and as long as that is within the allowed clock skew, they will sync.
__________________
Tom Jones
MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
PhD, MSc, FIAP, MIITT
IT Trainer / Consultant
Ossian Ltd
Scotland

** Remember to give credit where credit is due and leave reputation points where appropriate **
  #3  
Old 15th September 2012, 18:46
Stevenjwilliams83 Stevenjwilliams83 is offline
Junior Member
It's not a coincidence
  
 Join Date: Jan 2008
  6 month star 12 month star
 Location: Illinois
 Posts: 106
  Send a message via Yahoo to Stevenjwilliams83
 Reputation: Stevenjwilliams83 is on a distinguished road (10)
Default Re: AD authentication with other DC's in different timezones
So if I have a site in the UK and one in the US, it works just fine when PCs in the UK need to use the US DC to authenticate.
  #4  
Old 15th September 2012, 19:27
Ossian Ossian is offline
Administrator
  
 Join Date: Nov 2003
  6 month star 12 month star
 Location: Bonnie Scotland
 Posts: 15,138
  Send a message via Skype™ to Ossian
 Reputation: Ossian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud of (1300)
Default Re: AD authentication with other DC's in different timezones
Correct!
Otherwise how would multinationals operate?
__________________
Tom Jones
MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
PhD, MSc, FIAP, MIITT
IT Trainer / Consultant
Ossian Ltd
Scotland

** Remember to give credit where credit is due and leave reputation points where appropriate **
  #5  
Old 16th September 2012, 16:37
Stevenjwilliams83 Stevenjwilliams83 is offline
Junior Member
It's not a coincidence
  
 Join Date: Jan 2008
  6 month star 12 month star
 Location: Illinois
 Posts: 106
  Send a message via Yahoo to Stevenjwilliams83
 Reputation: Stevenjwilliams83 is on a distinguished road (10)
Default Re: AD authentication with other DC's in different timezones
I agree, I have just never been a part of until recently. I thought there was always something special that had to be done.
  #6  
Old 18th September 2012, 17:30
Stevenjwilliams83 Stevenjwilliams83 is offline
Junior Member
It's not a coincidence
  
 Join Date: Jan 2008
  6 month star 12 month star
 Location: Illinois
 Posts: 106
  Send a message via Yahoo to Stevenjwilliams83
 Reputation: Stevenjwilliams83 is on a distinguished road (10)
Default Re: AD authentication with other DC's in different timezones
Back on time again. If I have one logon script for my domain for users, including ones in a different time zone, and I use the net time command in my bat, but that value is a server not in their time zone, will this mess their PC's and servers up?
  #7  
Old 18th September 2012, 17:33
Ossian Ossian is offline
Administrator
  
 Join Date: Nov 2003
  6 month star 12 month star
 Location: Bonnie Scotland
 Posts: 15,138
  Send a message via Skype™ to Ossian
 Reputation: Ossian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud of (1300)
Default Re: AD authentication with other DC's in different timezones
No, it should not cause any problems -- as said already the DC will do everything in UTC and local "corrections" will apply
Does this help?
http://www.office-outlook.com/outloo...11/#msg_492011
__________________
Tom Jones
MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
PhD, MSc, FIAP, MIITT
IT Trainer / Consultant
Ossian Ltd
Scotland

** Remember to give credit where credit is due and leave reputation points where appropriate **
  #8  
Old 18th September 2012, 17:37
Stevenjwilliams83 Stevenjwilliams83 is offline
Junior Member
It's not a coincidence
  
 Join Date: Jan 2008
  6 month star 12 month star
 Location: Illinois
 Posts: 106
  Send a message via Yahoo to Stevenjwilliams83
 Reputation: Stevenjwilliams83 is on a distinguished road (10)
Default Re: AD authentication with other DC's in different timezones
Ahhhh Perfect! great example in that link! Thanks.
  #9  
Old 20th September 2012, 12:01
wullieb1 wullieb1 is offline
Moderator
  
 Join Date: Jul 2005
  6 month star 12 month star
 Location: Bris Vegas, Australia
 Posts: 6,394
 Reputation: wullieb1 is a splendid one to beholdwullieb1 is a splendid one to beholdwullieb1 is a splendid one to beholdwullieb1 is a splendid one to beholdwullieb1 is a splendid one to beholdwullieb1 is a splendid one to behold (684)
Default Re: AD authentication with other DC's in different timezones
In the logon script you could always just use this

net time %logonserver% /set /y
Closed Thread

« Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes
Linear Mode Linear Mode

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
ISA and Authentication outstream General Security 8 18th July 2009 14:25
PKI authentication de_anc General Security 1 12th March 2009 11:19
Forms Based Authentication and Windows Integrated Authentication bworchel Exchange 2000 / 2003 2 27th February 2009 02:12
Pix authentication knowram Cisco Routers & Switches How-to 1 16th April 2007 05:46
DC authentication tatasys Active Directory 19 11th August 2005 18:00


All times are GMT +3. The time now is 03:44.

Contact Us - Petri.co.il forums - Archive - Top
Steel Blue 3.5.4 vBulletin Style ©2006 vBEnhanced
Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
 

Valid XHTML 1.0!   Valid CSS!

Copyright 2005 Daniel Petri