Tag: Computer Configuration

This policy setting determines when retries are no longer allowed for applications that perform periodic searches for domain controllers (DC) are unable to find a DC. For example retires may be set to occur according to the Use maximum DC discovery retry interval policy setting but when the value set in this policy setting is reached no more retries occur. If a value for this policy setting is smaller than the value in the Use maximum DC discovery retry interval policy setting the value for Use maximum DC discovery retry interval policy setting is used. The default value for this setting is to not quit retrying (0). The maximum value for this setting is 49 days (0x49*24*60*60=4233600). The minimum value for this setting is 0. Warning: If the value for this setting is too small a client will stop trying to find a DC too soon.

This policy setting determines the maximum retry interval allowed when applications performing periodic searches for Domain Controllers (DCs) are unable to find a DC. For example the retry intervals may be set at 10 minutes then 20 minutes and then 40 minutes but when the interval reaches the value set in this setting that value becomes the retry interval for all subsequent retries until the value set in Final DC Discovery Retry Setting is reached. The default value for this setting is 60 minutes (60*60). The maximum value for this setting is 49 days (0x49*24*60*60=4233600). The minimum value for this setting is 0. If the value for this setting is smaller than the value specified for the Initial DC Discovery Retry Setting the Initial DC Discovery Retry Setting is used. Warning: If the value for this setting is too large a client may take very long periods to try to find a DC. If the value for this setting is too small and the DC is not available the frequent retries may produce excessive network traffic.

This policy setting determines the amount of time (in seconds) to wait before the first retry for applications that perform periodic searches for domain controllers (DC) that are unable to find a DC. The default value for this setting is 10 minutes (10*60). The maximum value for this setting is 49 days (0x49*24*60*60=4233600). The minimum value for this setting is 0. This setting is relevant only to those callers of DsGetDcName that have specified the DS_BACKGROUND_ONLY flag. If the value of this setting is less than the value specified in the NegativeCachePeriod subkey the value in the NegativeCachePeriod subkey is used. Warning: If the value for this setting is too large a client will not attempt to find any DCs that were initially unavailable. If the value set in this setting is very small and the DC is not available the traffic caused by periodic DC discoveries may be excessive.

This policy setting defines whether a domain controller (DC) should attempt to verify the password provided by a client with the PDC emulator if the DC failed to validate the password. Contacting the PDC emulator is useful in case the client’s password was recently changed and did not propagate to the DC yet. Users may want to disable this feature if the PDC emulator is located over a slow WAN connection. If you enable this policy setting the DCs to which this policy setting applies will attempt to verify a password with the PDC emulator if the DC fails to validate the password. If you disable this policy setting the DCs will not attempt to verify any passwords with the PDC emulator. If you do not configure this policy setting it is not applied to any DCs.