Domain Bound to a single DC

Question

Hi,

By mistake, I ran klist add_bind CONTOSO.COM KDC.CONTOSO.COM. Does this mean the whole domain is bound to a single DC? If yes then how can i remove it immediately. I just need to bind some servers to use a specific DC.

Thanks for quick replies.

Answer 1

• add_bind Allows you to specify a preferred domain controller for Kerberos authentication
• purge_bind Removes the cached preferred domain controllers for the domains specified

https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/klist

--please don't forget to Accept as answer if the reply is helpful--

Answer 2

ok i used purge_bind command to remove the binding. Is it enough? Secondly, how to let some servers always use a specific DC to login?

Answer 3

Please close this thread (by marking answer) and open a new thread for new questions.