Domain Controller for DR Site

Azy1412 211 Reputation points
2020-07-28T15:08:11.487+00:00 
 We're in the process of adding one domain controller in a different site for disaster recovery, but we don't want users to be authenticated from this DC and/or use the DNS server in the DR site.

is there a way to specify that the new DC in the DR site will have lowest priority for DNS and authentication ?
also it would be highly appreciated if you shared best practices guide for adding a new DC in a DR site.

Thank you.

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,453 questions
0 comments

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Vicky Wang 2,731 Reputation points
    2020-07-31T09:10:45.887+00:00

    Hi,
     
    Just checking in to see if the information provided was helpful. Please let us know if you would like further assistance.
     
    Best Regards,
    Vicky

    1 person found this answer helpful.
    0 comments
  2. Vicky Wang 2,731 Reputation points
    2020-07-29T08:52:37.257+00:00

    By default all dc's have a priority of 0, the lower the priority the first in priority. The dc with the lowest priority in the site will receive ALL authentication requests unless it is unavailable. If the lowest priority dc is unavailable then the next lowest dc in the site will receive all requests, etc…

    To modify the priority of a dc the registry key, use:

    HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\LdapSrvPriority

    Hope this information can help you
    Best wishes
    Vicky

    0 comments
  3. Vicky Wang 2,731 Reputation points
    2020-08-03T09:23:24.06+00:00

    Hi,
     
    Just want to confirm the current situations.
     
    Please feel free to let us know if you need further assistance.
     
    Best Regards,
    Vicky 

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.