The switch /sc_query only shows you your secure channel DC, it doesn't
necessarily tell you what DC you are using for LDAP ops currently. They are
usually the same but don't have to be. 

 

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Cace, Andrew
Sent: Wednesday, August 31, 2005 6:19 PM
To: [email protected]
Subject: RE: [ActiveDir] DC authentication

 
Our TAM has been beating using nltest instead of "set l" into our heads for
almost two years now.  The set command echoes a variable that is set at
startup and doesn't change when your authenticating server changes.  

The only problem with using nltest with the /sc_query option is that it also
checks a cached value.  If you truly want to determine which DC is currently
authenticating a PC, you should use the /sc_reset option of nltest.  This
will reset the secure channel between the workstation and the DC and report
the status of the secure channel.

-Andrew

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tony Murray
Sent: Wednesday, August 31, 2005 4:09 PM
To: [email protected]
Subject: RE: [ActiveDir] DC authentication

Hi Christine

This will show you the secure channel for given machine:

nltest /sc_query:<domain> /server:<server_name> 

Tony

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Christine Allen
Sent: Thursday, 1 September 2005 8:58 a.m.
To: [email protected]
Subject: [ActiveDir] DC authentication

Sorry, I'm have a brain hiccup.  Does anyone know the command line utility
that tells you which dc authenticates you?

-Christine

Christine N. Allen
Systems Engineer
BMC HealthNet Plan
2 Copley Place
Boston, MA 02216

617-748-6034
617-293-4407
[EMAIL PROTECTED]

List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
########################################################################
####
This e-mail message has been scanned for Viruses and Content and cleared by
NetIQ MailMarshal at Gen-i Limited
########################################################################
####

List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to