Restrict the domain computers to a Specific Domain Controller

Question

Hi,

I need to restrict my domain computers to only use their branch DC when they connect through a specific branch subnet, whereas they should be able to use any DC when they go to the Head Office. I have already created a site and assigned the subnet but still the servers and pcs are not limited to their branch DC.

Thanks.

Answer 1

There's really nothing native for this beyond the locator. You'll need some custom blocking or other and this isn't recommended to do. Something here could help.

https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/how-domain-controllers-are-located#troubleshooting-the-domain-locator-process

--please don't forget to close up the thread here by marking answer if the reply is helpful--