Check what domain controller

Dwight Spencer Dwight Spencer 2 2 silver badges 7 7 bronze badges. Run as: GetDcNames. Save as TestAdDnsRecords. Run as TestAdDnsRecords. There is a lot of text output. Anil Dhandar Anil Dhandar 1.

Sign up or log in Sign up using Google. Sign up using Facebook. Sign up using Email and Password. Post as a guest Name. Email Required, but never shown. The Overflow Blog. Does ES6 make JavaScript frameworks obsolete? Podcast Do polyglots have an edge when it comes to mastering programming Featured on Meta.

After the client locates a domain controller, it establishes communication by using LDAP to gain access to Active Directory. As part of that negotiation, the domain controller identifies which site the client is in based on the IP subnet of that client. If the client is communicating with a domain controller that isn't in the closest most optimal site, the domain controller returns the name of the client's site.

If the client has already tried to find domain controllers in that site, the client uses the domain controller that isn't optimal. Otherwise, the client does a site-specific DNS lookup again with the new optimal site name. The domain controller uses some of the directory service information for identifying sites and subnets. After the client locates a domain controller, the domain controller entry is cached.

If the domain controller isn't in the optimal site, the client flushes the cache after 15 minutes and discards the cache entry. It then attempts to find an optimal domain controller in the same site as the client.

After the client has established a communications path to the domain controller, it can establish the logon and authentication credentials. And if necessary for Windows-based computers, it can set up a secure channel. The client then is ready to perform normal queries and search for information against the directory. The client establishes an LDAP connection to a domain controller to log on.

The logon process uses Security Accounts Manager. The communications path uses the LDAP interface and the client is authenticated by a domain controller. So the client account is verified and passed through Security Accounts Manager to the directory service agent, then to the database layer, and finally to the database in the Extensible Storage engine ESE. ADAudit Plus assists an administrator with this information in the form of reports. This command lists elements that are remaining in the replication queue.

It displays inbound replication requests that the Domain Controller needs to issue in order to become consistent with its source replication partners.

This command displays the replication status when the specified domain controller last attempted to implement an inbound replication of Active Directory partitions.

It helps in figuring out the replication topology and replication failure. So, the answer to your second question may be in any of those scenarios. Choose your best bet here.

Home Windows Windows Server How-tos. Find which DC a computer is authenticated to. Windows Server General Windows. Ed Grauel. Jun 18, 1 Minute Read. Reply Facebook Twitter Reddit LinkedIn. Main Areas of Contribution:. Track Progress.