CloseSiteTimeout

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters

Data type Range Default value

REG_DWORD

0x3C–0x418937 (seconds) (1 minute–49.7 days)49.7 days)

0x384 (15 minutes)

Description

Specifies how often the Net Logon service attempts to find a nearby domain controller. The value of this entry specifies the minimum time that must elapse between attempts. The value is used when Net Logon is using the secure channel to communicate with a domain controller (which it does, for example, when processing an interactive or network logon) in a site that is not nearby. In such a case, if the time elapsed since the last attempt to discover a close domain controller is greater than the time specified by this entry, Net Logon reattempts discovery of a nearby domain controller before sending the request to the remote domain controller.

This value does not apply when Net Logon is finding a domain controller to authenticate an interactive logon that is using pass-through authentication on a secure channel. These transactions do not need time between attempts.

This value helps separate attempts to locate domain controllers when a secure channel is used for other communications, such as pass-through authentication of a network logon.

This entry does not exist in the registry by default. You can add it by using the registry editor Regedit.exe.

Caution

  • Use caution when changing the value of this entry. If the value is too high, then the requesting client might be delayed significantly. If the value is too low, then repeated attempts to find the domain controller can create excessive network traffic.