How can I replicate Domain Admins group members to DC's quickly so after adding a user, they can RDP to a DC right away?

Michael Snyder 0 Reputation points
2023-04-24T21:51:05.77+00:00

When a user is added to the Domain Admins group, it takes almost 30 minutes until that user can RDP to a DC. We are trying to use 'repadmin' and 'Sync-ADObject' to force replication of the Domain Admins group around to all the DC's, but this does not seem to be working.

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,097 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Limitless Technology 44,071 Reputation points
    2023-04-25T14:30:11.02+00:00

    Hello, Usually there is a 15 seconds window for updates to the first link, with a 3 seconds window for subsequent links in the Directory. And of course, the schedule of 15 minutes to launch replication. However, if inmediate replication is desired you can apply the next Site-Link changes: For automatically created sitelinks: Open ADSIEDIT Connect to Configuration Naming Context Expand Sites –> Intersite Transport –> IP Right-click the relevant sitelink and select properties Change the value of “options” to 1 For manually created sitelinks: Open ADSIEDIT Connect to Configuration Naming Context Expand Sites –> (The site name) –> Servers –> (Servername) –> NTDS Settings Right-click the relevant sitelink and select properties Change the value of “options” to 8 Repeat for every manually configured sitelink (if desired) --If the reply is helpful, please Upvote and Accept as answer--


  2. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.


    Comments have been turned off. Learn more