Question:
How does Centrify determine the order of contacting domain controllers?
Answer:
The Centrify DirectControl agent attempts to connect to the appropriate Domain Controller and Global Catalog for its joined domain using the site information found in DNS. Site information is configured using Active Directory Sites and Services and is defined by subnet.
- Using the site information, the agent queries DNS for a list of the domain controllers in its site and attempts to connect to the nearest domain controller.
- It will continue trying to connect to each of the domain controllers in its site based on proximity until it finds a server available.
- If the agent is unable to connect to any of the domain controllers in its site or if no site information is available, the agent tries to connect to any remaining domain controllers listed in DNS.
Additional information regarding the Centrify login process is available in the Centrify Suite Planning and Deployment Guide.