Making Active Directory changes atomic
- by Matt Simmons
I've got a Windows 2003 Active Directory infrastructure, and there are times (such as when terminating an employee) that I want instantaneous propagation across both of my AD servers. Currently, I make the change in both places, which I suspect is unhealthy, but it's the only way I know to make sure that the account is disabled to every machine.
Is there a better way? Do I have to wait for the normal propagation time for convergence, or is there a way to "force" it?