Windows Vista or Windows Server 2008 : Architecture of Group Policy - Domain Controller Selection During GPO Management

8/18/2012 4:18:39 PM

Using the PDC Emulator

Every time a GPO is viewed or changed, the GPMC and the GPME locate the domain controller that is responsible for the PDC emulator role. It is the GPO from this domain controller that is viewed and updated. There is no inherent reason for choosing this domain controller by default; one domain controller must be selected, because changes must occur on one domain controller and then replicate to all domain controllers. Because the PDC emulator is already responsible for many other critical domain tasks, it makes sense to use this domain controller for GPO updates as well.

There are times when the domain controller running the PDC emulator role is not available or is not the ideal candidate for updating the GPOs. If the PDC emulator is not available when a change must be made to a GPO, the system displays an error message, as shown in Figure 1.

Figure 1. When the domain controller running the PDC emulator role is not available for editing the GPO, an error message appears.

Note that not only does the system display a dialog box indicating that the domain controller is not available, it also gives you the option to choose a different domain controller. In most cases, selection of the domain controller for updating a GPO has no effect on the result of updating a GPO. Sometimes, however, selecting a different domain controller will result in faster or slower GPO deployment situations. This is because of the way in which a computer receives information regarding domain controllers during initial bootup. Computers receive a list of domain controllers from DNS that prioritizes them based on network location. The domain controllers in the computers own site are first; then the other domain controllers follow. If you make a change to a GPO that is initially updated on a domain controller that is not in the target computer’s site, it can take a while to replicate to the domain controller in the computer’s site. This could cause a delay in the processing of the GPO until all replication converges.

Selecting the Domain Controller for GPO Editing

To eliminate the processing delay described in the previous section, you can select a domain controller that is in the computer’s site. Of course, you must know which site the target computers are in, as well as which domain controllers correspond to that site.

You can also control which domain controller is used when you edit a GPO within the GPMC. Again, this is beneficial when you want to update a specific domain controller to ensure the fastest and most reliable application of the policy settings. To change the domain controller used for editing GPOs from within the GPMC, follow these steps:

Right-click the domain name in the GPMC window.

Click Change Domain Controller.

Make your selection from the list of possible domain controller options, as shown in Figure 2.

Figure 2. The domain controller used to edit GPOs can be selected from within the GPMC to optimize the application of the settings configured in the GPO.

The next time you edit a GPO from within the GPMC, you will be using the domain controller that you selected. Do not forget that you changed the domain controller in the interface.


One Group Policy setting allows you to configure the domain controller that will be used when editing GPOs. The setting, “Group Policy domain controller selection,” is under User Configuration\Administrative Templates\System\Group Policy, as shown in Figure 3. This policy setting is a bit out of date; it does not offer the same options as the GPMC, and it includes an option for using the domain controller that is being used by the snap-in, which refers to Active Directory Users and Computers.

Figure 3. The domain controller that is used for editing GPOs can be configured in a GPO, located under User Configuration\Administrative Templates\System\Group Policy.

  •  Windows Vista or Windows Server 2008 : Architecture of Group Policy - Group Policy Dependencies
  •  Retina MacBook Pro
  •  Suitcase Fusion 4
  •  Canon PIXMA MX895
  •  Samsung Series 5 Ultra
  •  ASUS U32U : Upscale Version Of A Netbook
  •  The Ubuntu Server Project (Part 6)
  •  The Ubuntu Server Project (Part 5)
  •  The Ubuntu Server Project (Part 4)
  •  The Terminal : Command line interface for the Mac, Unix foundation
  •  Sharp Aquos LC32LE340M : Just Enough
  •  Quicksilver : Giving your Mac a boost of power
  •  OKI MB461: Speed Is Its Middle Name
  •  Zotac Geforce GTX 670 AMP! Edition
  •  BenQ XL2420T : Holy Swivelling Monitor!
  •  Windows Server 2003 : Network Load-Balancing Clusters (part 2) - Creating an NLB Cluster
  •  Windows Server 2003 : Network Load-Balancing Clusters (part 1) - NLB Operation Styles and Modes, Port Rules
  •  Group Policy Basics : Creating Additional GPOs
  •  Group Policy Basics : Default GPOs - Default Domain Policy
  •  Toshiba Satellite Pro L770
    Top 10
    SharePoint 2010: Architecture Fundamentals - Physical Deployment Options
    SharePoint 2010: Architecture Fundamentals - Understanding SharePoint Administration
    SharePoint 2010: Architecture Fundamentals - SharePoint Lists, Libraries, and Items, Pages, Navigation
    Windows Vista : Managing Windows Images - Investigating Third-Party Alternatives
    Windows Vista : Managing Windows Images - Developing Custom Solutions
    Microsoft Windows Home Server 2011 : Modifying User Accounts
    Microsoft Windows Home Server 2011 : Automating Client Logons
    Microsoft Windows Home Server 2011 : Adding a New User
    Installing the HP-UX 11i Operating Environment (part 3) - HP 9000 Early Boot and Beginning the Load of HP-UX
    Installing the HP-UX 11i Operating Environment (part 2) - Loading HP-UX
    Most View
    Windows Azure : Messaging with the queue - Working with messages
    Microsoft SQL Server 2005 : Report Management
    Kingston SSDNow V+ 200 - SSDs for The Budget Conscious
    Buying Guide: CPU Cooling Equipment (Part 6) - Deepcool by Logisys ICE BLADE PRO,Enermax ETD-T60-VD, Enzotech Extreme-X REV.A
    Programming .NET Framework 3.5 : Using Data Synchronization Services (part 1)
    Windows 7: Using Windows Live Mail (part 2) - Creating, Sending, and Receiving Email
    Buyer’s Guide - Keyboard and mice (Part 4) - GIGABYTE Aire M1, Gyration Air Mouse Elite, IOGEAR Phaser GME422RW6
    Plot Thickens As Us Sues Apple To Protect Amazon's Monopod Y In Ebooks
    Deploying the Client for Microsoft Exchange Server 2010 : Outlook 2007 Auto Account Setup
    Capture A Subject As A Reflection (Part 2)
    Implementing Security in Windows 7 : Set the Junk E-mail Protection Level
    Try Another Option Except For Wordpress - Web Expert (Part 1) - Tumblr
    The State Of Mobile... Creative Media In 2012 (Part 1)
    Tasmania - Ideal Destination For Landscape Photographers (Part 2)
    Lomega 1TB Home Media Network Hard Drive Cloud Edition 7
    The Life After MobileMe (Part 1) - The transition of iWeb
    Microsoft Dynamic CRM 2011 : Sharing a Chart
    Mastering Windows PC (Part 2) - Use Taskbar, Windows Explorer & Control Panel
    Adobe Fireworks CS5 : Selecting and modifying with the Magic Wand tool
    SQL Server 2005 : How Exceptions Work in SQL Server