Thursday, January 31, 2013

How to determine which domain controller your computer has established a secure channel with

How to determine which domain controller your computer has established a secure channel with

nltest /sc_query:Target FQDN for your domain

Result:
Flags: 30 HAS_IP  HAS_TIMESERV
Trusted DC Name \\Name of your domain controller.Your domain's FQDN
Trusted DC Connection Status Status = 0 0x0 NERR_Success
The command completed successfully

This is helpful if you're making Group Policy changes and you don't want to wait for replication; Simply point the Group Policy Management Console directly at this Domain Controller and make your changes there.

This also helps when troubleshooting authentication and/or domain controller issues.

For more information on the NLTEST command, see
http://technet.microsoft.com/en-us/library/cc731935%28v=ws.10%29.aspx

Originally published: 1-31-2013