How can I replicate Domain Admins group members to DC's quickly so after adding a user, they can RDP to a DC right away?

Question

When a user is added to the Domain Admins group, it takes almost 30 minutes until that user can RDP to a DC. We are trying to use 'repadmin' and 'Sync-ADObject' to force replication of the Domain Admins group around to all the DC's, but this does not seem to be working.

Answer 1

Hello, Usually there is a 15 seconds window for updates to the first link, with a 3 seconds window for subsequent links in the Directory. And of course, the schedule of 15 minutes to launch replication. However, if inmediate replication is desired you can apply the next Site-Link changes: For automatically created sitelinks: Open ADSIEDIT Connect to Configuration Naming Context Expand Sites –> Intersite Transport –> IP Right-click the relevant sitelink and select properties Change the value of “options” to 1 For manually created sitelinks: Open ADSIEDIT Connect to Configuration Naming Context Expand Sites –> (The site name) –> Servers –> (Servername) –> NTDS Settings Right-click the relevant sitelink and select properties Change the value of “options” to 8 Repeat for every manually configured sitelink (if desired) --If the reply is helpful, please Upvote and Accept as answer--